Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
File:                     9Ma33VF1vo23oFIvfU5BxcQsayk.cer (raw, json)
Hash identifier:          8Vp7zwWHxkF+K4f7xm/Cw2iZKYdsFI11gpoDkx0lsMI=
Subject key identifier:   F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B7E5259AFBCEB165B9CBFB0757319
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212136
                          IP: 5.172.178.0/24
                          IP: 5.181.12.0/24
                          IP: 81.22.46.0/23
                          IP: 91.214.116.0/24
                          IP: 176.56.32.0/24
                          IP: 176.111.174.0/24
                          IP: 185.122.204.0/24
                          IP: 185.198.69.0/24
                          IP: 185.228.248.0/24
                          IP: 185.234.216.0/24
                          IP: 185.247.187.0/24
                          IP: 194.31.9.0/24
                          IP: 213.232.254.0/24
                          IP: 2a10:aa80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:7e:52:59:af:bc:eb:16:5b:9c:bf:b0:75:73:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:11:fa:33:c8:fb:e1:4b:1e:8e:41:e6:bd:
                    cd:10:a8:bd:a3:52:e5:08:a1:aa:a9:f0:1b:8e:ef:
                    ec:35:a6:4b:93:88:99:88:f1:61:ff:f1:90:45:7a:
                    33:29:8b:6c:c3:bc:09:81:1d:be:56:96:ef:a9:eb:
                    f0:c1:ba:85:aa:ba:fe:72:45:e3:b3:da:33:a9:ac:
                    09:fe:9b:96:3f:e0:b7:bb:3a:68:27:c1:59:9a:ac:
                    f8:6d:ea:58:63:f8:37:fe:c0:01:d3:6e:72:f6:5c:
                    74:8b:ec:44:4b:db:7b:be:cc:bd:00:fa:26:f3:c6:
                    55:8b:56:9f:23:5a:62:e6:2d:d0:f6:ea:8d:b5:2f:
                    d0:f8:2a:30:61:71:5f:53:02:01:c8:55:31:d0:4d:
                    b5:0d:04:4f:58:56:c7:3a:30:4a:c4:47:94:7b:3d:
                    f7:7e:13:30:16:46:3b:cc:bf:64:4d:12:c0:b0:57:
                    a5:57:b6:21:9c:85:38:93:a2:75:ce:e5:75:c3:10:
                    81:77:ce:de:a8:24:17:51:e7:b3:4f:ae:13:d9:f6:
                    09:e8:3a:03:f9:a3:60:a2:b5:57:74:d3:2a:75:4b:
                    21:7e:b0:55:2d:49:d5:6b:4d:ed:45:2c:4c:ce:e6:
                    ea:f1:62:90:c1:b7:bf:12:84:f3:78:d6:d0:74:a1:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.178.0/24
                  5.181.12.0/24
                  81.22.46.0/23
                  91.214.116.0/24
                  176.56.32.0/24
                  176.111.174.0/24
                  185.122.204.0/24
                  185.198.69.0/24
                  185.228.248.0/24
                  185.234.216.0/24
                  185.247.187.0/24
                  194.31.9.0/24
                  213.232.254.0/24
                IPv6:
                  2a10:aa80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212136

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:fb:85:28:fb:3a:9c:80:24:c7:81:9e:cb:03:2e:77:22:
         1a:ee:48:89:87:57:02:3c:1b:59:92:a3:00:dd:1e:58:88:2c:
         51:91:c4:d4:73:ef:0f:60:5f:de:42:a2:a6:ac:c4:89:61:6d:
         87:39:67:ea:de:0c:22:f8:34:99:ab:28:4b:bf:0f:70:87:54:
         f2:84:20:18:70:7c:1e:6d:c5:6e:2d:bf:e4:c2:08:ac:dd:fb:
         19:74:d3:40:96:b1:05:4b:f0:30:69:7b:e7:ee:42:71:2c:27:
         65:0d:a4:92:ec:2b:08:4e:06:1c:e4:c8:7b:81:f0:21:64:18:
         ee:72:1d:9b:ec:67:45:83:4c:11:55:bb:6e:b4:9d:04:42:26:
         b7:aa:66:b0:62:36:ad:a1:05:8a:c5:33:d6:b0:ec:62:e9:48:
         a1:d8:23:1f:be:45:49:eb:ed:86:41:99:19:95:75:be:46:25:
         1a:6f:be:9b:f7:05:d8:2c:6c:98:90:fc:0e:ef:0b:e2:1b:01:
         b1:58:93:e1:2b:d0:0a:a6:41:0f:00:87:cc:d4:ba:6f:68:e7:
         ad:a3:4d:32:72:1d:45:ca:d5:9f:1f:2e:b1:98:f0:c8:76:34:
         3e:f7:f3:c6:c1:f1:0c:83:6e:4d:42:49:51:0c:6e:0a:ff:77:
         b7:88:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:30 2025 by rpki-client on console.sobornost.net