Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.cer (raw, json)
Hash identifier:          tnl4fXRCYez33EGm/UfNkveupwRl/1TBt/UfXRWHa9w=
Subject key identifier:   F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3329E68D0B6446BEBBA5E4753D687
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 6858
                          AS: 24739
                          AS: 31191
                          AS: 35000
                          AS: 43267
                          AS: 49165
                          IP: 37.46.52.0 -- 37.46.63.255
                          IP: 37.143.16.0/20
                          IP: 46.228.0.0/20
                          IP: 46.252.240.0/20
                          IP: 62.181.33.0/24
                          IP: 62.181.40.0/22
                          IP: 62.181.45.0/24
                          IP: 62.181.52.0/24
                          IP: 77.232.50.0 -- 77.232.63.255
                          IP: 78.111.80.0/22
                          IP: 78.111.92.0/22
                          IP: 78.140.192.0 -- 78.140.239.255
                          IP: 78.140.248.0/22
                          IP: 79.99.104.0/21
                          IP: 81.23.96.0/19
                          IP: 81.24.112.0/20
                          IP: 82.112.184.0/21
                          IP: 84.47.137.0/24
                          IP: 84.47.188.0/24
                          IP: 84.242.4.0/24
                          IP: 85.235.192.0/19
                          IP: 87.249.32.0/24
                          IP: 87.249.34.0/23
                          IP: 87.249.39.0 -- 87.249.40.255
                          IP: 87.249.42.0/24
                          IP: 87.249.45.0 -- 87.249.48.255
                          IP: 87.249.51.0 -- 87.249.52.255
                          IP: 89.104.96.0/24
                          IP: 89.104.98.0/23
                          IP: 89.104.103.0 -- 89.104.106.255
                          IP: 89.104.108.0/23
                          IP: 89.104.120.0/24
                          IP: 89.104.124.0/24
                          IP: 89.223.5.0/24
                          IP: 89.223.8.0/24
                          IP: 89.223.10.0/24
                          IP: 91.196.72.0/22
                          IP: 92.255.2.0/24
                          IP: 92.255.5.0/24
                          IP: 92.255.7.0 -- 92.255.8.255
                          IP: 92.255.10.0/24
                          IP: 92.255.12.0/24
                          IP: 92.255.14.0/24
                          IP: 92.255.17.0/24
                          IP: 92.255.24.0/24
                          IP: 92.255.26.0 -- 92.255.28.255
                          IP: 92.255.31.0/24
                          IP: 93.174.240.0/21
                          IP: 94.140.192.0/19
                          IP: 176.32.176.0/20
                          IP: 178.238.16.0/20
                          IP: 185.7.144.0/22
                          IP: 185.58.248.0/22
                          IP: 185.124.188.0/22
                          IP: 185.247.80.0/22
                          IP: 188.227.0.0/19
                          IP: 188.227.36.0 -- 188.227.55.255
                          IP: 188.227.60.0 -- 188.227.83.255
                          IP: 188.227.88.0 -- 188.227.105.255
                          IP: 188.227.108.0 -- 188.227.127.255
                          IP: 195.182.128.0/19
                          IP: 212.59.112.0/22
                          IP: 212.59.127.0/24
                          IP: 212.116.96.0/19
                          IP: 213.135.68.0/24
                          IP: 213.135.75.0 -- 213.135.76.255
                          IP: 213.135.78.0/24
                          IP: 213.135.93.0/24
                          IP: 213.208.185.0/24
                          IP: 217.197.224.0/20
                          IP: 2a00:1020::/32
                          IP: 2a01:a280::/30
                          IP: 2a06:aa80:: -- 2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:32:9e:68:d0:b6:44:6b:eb:ba:5e:47:53:d6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:68:bf:77:73:f6:db:54:2a:38:cb:d1:f3:
                    ed:12:99:fb:72:13:53:41:e8:0c:28:29:7e:3f:d0:
                    8b:61:7c:b5:d5:d2:ed:43:01:ba:5a:5e:3c:0d:6a:
                    57:50:fc:75:53:9d:1d:10:c4:d5:51:44:53:39:e8:
                    83:d7:5b:e6:79:00:57:55:74:b8:16:bd:28:49:60:
                    5e:a1:47:37:a7:08:22:d2:fb:d1:e1:c4:ba:0d:de:
                    41:23:0d:ff:fc:db:ed:21:d5:72:71:c6:9d:a0:fa:
                    db:4c:eb:a6:65:c9:a5:13:8b:de:f4:d5:fc:90:1c:
                    67:96:62:0a:d0:68:88:71:a8:8f:48:c7:bc:5c:ab:
                    5c:e6:96:e8:17:ef:d3:67:58:59:33:ed:9f:72:72:
                    a6:46:e6:d0:05:67:b3:c1:f6:e2:64:f7:a5:47:0e:
                    73:12:12:7f:95:54:f6:c3:0f:40:71:2d:44:2e:71:
                    f6:83:78:98:f1:ff:da:34:9f:38:ad:69:b6:40:2a:
                    e8:5c:8f:89:96:af:4a:99:8e:fc:3b:fa:56:d1:93:
                    22:d4:7f:b1:a1:aa:a4:8b:92:b9:20:80:12:dd:b7:
                    b9:4a:c5:2b:c3:10:8b:79:2d:52:74:97:c9:a5:fa:
                    55:81:19:50:86:99:63:92:b2:55:4d:8c:c6:6b:d7:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.52.0-37.46.63.255
                  37.143.16.0/20
                  46.228.0.0/20
                  46.252.240.0/20
                  62.181.33.0/24
                  62.181.40.0/22
                  62.181.45.0/24
                  62.181.52.0/24
                  77.232.50.0-77.232.63.255
                  78.111.80.0/22
                  78.111.92.0/22
                  78.140.192.0-78.140.239.255
                  78.140.248.0/22
                  79.99.104.0/21
                  81.23.96.0/19
                  81.24.112.0/20
                  82.112.184.0/21
                  84.47.137.0/24
                  84.47.188.0/24
                  84.242.4.0/24
                  85.235.192.0/19
                  87.249.32.0/24
                  87.249.34.0/23
                  87.249.39.0-87.249.40.255
                  87.249.42.0/24
                  87.249.45.0-87.249.48.255
                  87.249.51.0-87.249.52.255
                  89.104.96.0/24
                  89.104.98.0/23
                  89.104.103.0-89.104.106.255
                  89.104.108.0/23
                  89.104.120.0/24
                  89.104.124.0/24
                  89.223.5.0/24
                  89.223.8.0/24
                  89.223.10.0/24
                  91.196.72.0/22
                  92.255.2.0/24
                  92.255.5.0/24
                  92.255.7.0-92.255.8.255
                  92.255.10.0/24
                  92.255.12.0/24
                  92.255.14.0/24
                  92.255.17.0/24
                  92.255.24.0/24
                  92.255.26.0-92.255.28.255
                  92.255.31.0/24
                  93.174.240.0/21
                  94.140.192.0/19
                  176.32.176.0/20
                  178.238.16.0/20
                  185.7.144.0/22
                  185.58.248.0/22
                  185.124.188.0/22
                  185.247.80.0/22
                  188.227.0.0/19
                  188.227.36.0-188.227.55.255
                  188.227.60.0-188.227.83.255
                  188.227.88.0-188.227.105.255
                  188.227.108.0-188.227.127.255
                  195.182.128.0/19
                  212.59.112.0/22
                  212.59.127.0/24
                  212.116.96.0/19
                  213.135.68.0/24
                  213.135.75.0-213.135.76.255
                  213.135.78.0/24
                  213.135.93.0/24
                  213.208.185.0/24
                  217.197.224.0/20
                IPv6:
                  2a00:1020::/32
                  2a01:a280::/30
                  2a06:aa80::-2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6858
                  24739
                  31191
                  35000
                  43267
                  49165

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:12:8a:7f:4c:55:e0:c9:0f:16:1f:34:d1:63:31:07:62:
         d5:8e:6e:a9:ff:a9:58:b3:66:b5:e9:17:b9:64:98:64:ca:00:
         a5:1c:9c:5e:d3:6e:7f:52:c9:b7:f2:b9:22:28:cc:11:61:db:
         6e:12:53:d5:48:c3:aa:05:4b:d5:68:b6:a2:12:4c:70:2d:fd:
         66:3f:22:1c:1e:e7:d1:91:e5:82:77:ed:07:78:87:26:f5:dc:
         3c:df:df:09:b3:dd:68:60:76:08:af:66:bf:34:3c:0b:dc:55:
         ca:78:10:6b:48:43:21:54:3a:3e:7f:43:e3:86:3c:49:95:a9:
         ee:82:b5:cf:2e:c3:ee:b1:72:de:36:88:0b:cf:97:bb:52:e3:
         39:94:31:1d:d5:ee:38:6b:d7:59:9b:51:cb:ed:a4:4c:e9:0c:
         63:a7:37:2f:26:eb:c5:10:1d:d4:1c:1a:78:ee:ef:82:71:9e:
         07:ab:77:39:2b:29:7a:b8:19:9a:50:20:37:22:cf:8e:4f:c1:
         6a:87:cf:70:4c:5a:3c:7c:81:04:ee:98:be:4a:ca:e4:ee:c9:
         0e:af:de:2d:0a:d0:d6:43:8c:c9:f8:29:ea:c8:32:a9:bc:a9:
         f7:1c:28:e8:93:a4:1b:6a:ac:7f:08:8b:cc:89:07:e1:97:87:
         7c:ad:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net