Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
File:                     9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer (raw, json)
Hash identifier:          aWv1F09rDkibLES3i0/18AVVBoQ0sqcHl1XYws4hrNc=
Subject key identifier:   F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DCE25D0D107914EABE850E9D8F523
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197441
                          AS: 201985
                          IP: 46.23.0.0/20
                          IP: 185.57.16.0/22
                          IP: 2a02:7000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:ce:25:d0:d1:07:91:4e:ab:e8:50:e9:d8:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:d1:07:b1:75:46:0d:46:57:14:6d:bf:3f:
                    ad:cc:43:79:4e:ae:87:92:89:12:bc:d5:b7:f3:56:
                    5d:b9:ee:a5:7e:13:e0:fb:0f:dc:83:b6:c6:8c:3a:
                    5c:91:ba:f0:aa:6a:f9:4d:46:a2:9a:cd:3d:7f:cb:
                    aa:81:f2:13:fc:ac:63:96:c3:b2:97:a4:7e:a6:ff:
                    9d:bc:37:bf:32:7b:7c:0f:5e:f6:2d:63:1a:54:27:
                    d9:88:15:88:fc:d4:4f:3c:91:cf:29:60:58:a3:d4:
                    a3:bd:ee:1f:63:c4:fc:89:c0:13:00:81:10:ef:0b:
                    d4:91:b2:c1:f1:62:da:e8:90:3e:23:23:16:7a:cc:
                    9f:2e:80:e0:4a:3a:8e:14:66:d5:98:85:9c:7b:c7:
                    95:ce:6e:00:aa:35:56:1c:8e:2f:de:20:70:a2:bd:
                    29:66:16:42:f9:57:dd:a5:f3:73:a2:30:4c:d5:81:
                    c2:36:1a:2a:71:bb:e6:29:8b:99:a8:2b:1b:a4:69:
                    ed:8c:99:77:b7:a5:63:4a:d0:38:d0:72:3b:07:74:
                    68:e3:e2:9b:9a:c0:55:2d:13:3d:4c:3d:cc:3f:4e:
                    de:ed:1b:3a:b9:40:f9:26:86:e6:60:18:67:2e:1a:
                    fb:56:a9:fb:83:20:3c:75:5a:b9:b5:7f:0a:0c:f8:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.23.0.0/20
                  185.57.16.0/22
                IPv6:
                  2a02:7000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197441
                  201985

    Signature Algorithm: sha256WithRSAEncryption
         91:f7:aa:2d:55:70:bc:39:7e:17:ba:86:a6:92:9b:35:94:e2:
         3e:5b:8a:e7:f1:06:a6:60:6b:9c:72:4a:48:a6:36:28:a7:cd:
         f9:d6:e8:9e:d7:da:58:06:23:fe:6d:1a:7b:58:a7:77:2c:8c:
         ff:18:83:0f:81:c8:3b:6f:de:a9:ad:d3:31:c0:61:a1:f3:c6:
         91:e9:bb:c3:02:33:6d:3c:ad:61:9f:4d:32:c3:01:ec:ec:94:
         0f:c1:0e:44:d1:c8:f4:4a:1e:3d:aa:7d:a2:b5:d9:8c:bd:f7:
         a6:fa:00:95:90:df:48:93:cc:1c:2b:6e:fd:38:ae:f7:c6:54:
         4f:9f:22:d6:3d:46:3a:88:2a:06:91:c7:4a:98:04:2e:7b:45:
         5e:c1:1a:ad:89:9f:d0:1b:2e:03:08:7d:08:a1:ed:db:b1:82:
         5a:0c:04:6a:a2:98:98:57:38:48:07:09:f9:59:1a:45:af:e2:
         64:01:dc:f8:4a:18:07:2b:4c:7f:15:84:cf:d1:8d:51:cb:42:
         ba:bd:bd:dc:2c:6c:66:f8:44:82:21:57:b2:83:a2:9c:a9:46:
         c7:86:a8:19:8e:cd:1e:80:6b:3a:0a:cf:55:d6:c9:0d:d3:5a:
         25:46:27:57:7a:97:9b:d0:85:5b:aa:7e:d2:c6:ec:56:cf:6d:
         6f:dd:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:30 2025 by rpki-client on console.sobornost.net