Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
File:                     9U47eX9Lo36_cYmkwU8FINfPMNc.cer (raw, json)
Hash identifier:          tv4is2a0JK5NjZHgVnIfbdfd7S8H20dUeiAQPkGwle8=
Subject key identifier:   F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCE7314FEA70DF9AF3B3BB49043EFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.3.234.0/23
                          IP: 193.163.131.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:e7:31:4f:ea:70:df:9a:f3:b3:bb:49:04:3e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:a7:9f:8d:d0:a2:41:a4:8e:31:6d:cc:c0:
                    46:80:18:54:6c:ed:b3:69:bb:3d:1b:94:80:a6:ff:
                    59:2f:7c:d8:f5:30:ce:c0:bf:ac:da:1f:6c:15:19:
                    d3:78:0c:74:48:f4:f2:6a:bd:9b:7a:25:94:a2:a9:
                    75:4e:dc:e1:0a:b6:ed:f9:cb:be:fa:3f:47:c1:ff:
                    a6:8b:b9:dc:e1:db:c7:4d:6e:aa:37:17:99:ad:d1:
                    32:4b:3e:0f:b3:a0:4b:89:cc:8e:4d:f7:61:b2:04:
                    71:10:07:69:67:e4:1e:4f:4c:87:29:c4:74:0e:0d:
                    9c:41:8d:c4:00:28:db:1d:60:2e:4c:d5:a8:57:87:
                    27:60:af:4f:7d:9f:69:fa:d3:3a:1b:15:5f:d6:d5:
                    7e:0f:91:d9:67:74:03:86:e6:e5:64:a2:cd:39:27:
                    0b:cf:99:08:3b:28:2b:9c:7b:f2:73:fd:8d:fc:83:
                    82:1b:93:3d:37:47:21:64:bf:db:46:e5:6e:e4:df:
                    46:08:3a:a9:30:f0:51:54:04:72:bf:6b:fd:f7:bf:
                    ff:ff:16:d7:0d:1d:a9:cb:2e:19:c9:ee:b3:ea:9b:
                    1c:a5:25:14:ca:7d:7e:74:a1:f1:ff:6c:13:dd:c0:
                    25:07:02:51:50:e8:0d:64:b6:92:d0:02:ea:fe:c1:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.234.0/23
                  193.163.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:9f:01:f2:ba:71:c1:25:6b:6f:1e:3c:be:3c:c5:c9:e9:
         2f:a6:ea:e5:6c:d3:a2:fc:25:43:67:93:97:45:43:01:ab:16:
         09:2e:70:0b:53:8a:2a:f8:f4:3f:44:d9:ba:e4:54:46:0d:a7:
         b0:e2:74:83:61:0d:01:e6:b2:fc:64:05:bc:87:2d:63:2e:25:
         88:07:70:22:04:75:d8:a0:07:40:78:ec:dc:07:82:de:7f:86:
         8c:4c:05:f4:79:6b:4a:a2:a1:1b:83:2d:e4:89:80:7a:0f:d0:
         22:7a:0f:e5:3c:f2:00:65:33:d1:a2:c5:10:9c:2d:c4:8b:04:
         d6:c1:eb:6c:52:11:10:f7:c3:44:97:23:52:20:ea:3a:f7:1a:
         d5:98:10:7b:05:03:32:d2:53:52:a2:54:41:30:55:dc:6c:d9:
         f7:bd:7d:f3:5b:bd:b0:48:ad:c8:94:73:d4:0f:8c:f3:d1:7c:
         04:0c:22:e7:ed:cd:45:de:7d:5c:2a:2a:86:f7:50:8e:50:07:
         47:17:2d:6f:51:12:f2:56:a3:03:a7:73:2b:1b:e8:4c:af:2e:
         2a:87:4d:79:e7:06:62:73:1b:11:e8:ec:a3:d7:90:8c:a8:2b:
         b6:0f:4e:11:43:b9:bc:fd:1b:7d:f6:ce:6b:3c:6c:5d:9a:f6:
         b6:22:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:30 2025 by rpki-client on console.sobornost.net