Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
File:                     ATNUQlFNUkm1FDz9-CEha7XFKUA.cer (raw, json)
Hash identifier:          hqwQLYKVKVZdwc/wm6edwkv8ORpN9KXR3qv/CvcAuoM=
Subject key identifier:   01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A4043C78CDB711D678C5BBA919435
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39134
                          IP: 23.105.224.0/19
                          IP: 23.111.32.0/19
                          IP: 23.111.96.0/19
                          IP: 23.111.192.0/19
                          IP: 88.212.192.0/18
                          IP: 185.206.100.0/22
                          IP: 2a02:2100::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:40:43:c7:8c:db:71:1d:67:8c:5b:ba:91:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01335442514d5249b5143cfdf821216bb5c52940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:72:51:fe:97:47:a2:3e:00:5b:39:9e:60:
                    62:f5:f5:57:80:b7:41:78:c7:ac:f3:39:74:16:0c:
                    28:a2:14:ff:3d:21:0e:80:1b:85:6e:df:8f:3e:f0:
                    25:ab:dd:33:8e:a7:a5:c3:8f:ff:2d:02:e5:fd:2b:
                    27:31:12:d8:1e:f7:ed:eb:f2:7d:65:05:17:af:be:
                    06:09:44:3b:92:9f:3c:de:33:5e:6a:cb:10:2c:7c:
                    c2:77:c3:6e:88:5c:0c:d2:11:08:fd:22:5d:07:74:
                    37:f1:59:39:89:aa:9a:5f:3f:b1:f3:ae:c1:2e:d0:
                    e8:c5:32:12:95:37:15:bd:3c:3e:bb:a7:8e:0a:66:
                    eb:01:65:80:2f:9c:31:50:68:fd:5a:03:eb:4d:8f:
                    52:77:60:68:76:78:e8:3b:5b:69:6d:39:2d:40:ae:
                    35:7b:0c:9f:11:98:ec:54:60:8c:42:06:5c:d7:67:
                    71:7a:73:63:45:29:8c:49:76:8c:21:13:21:74:26:
                    e9:85:f7:5d:c5:38:59:8d:29:b4:e0:f7:27:53:68:
                    2d:18:05:9e:ee:b4:76:9d:c0:18:f1:c4:32:8f:bf:
                    7c:47:34:7c:4b:05:9d:e1:98:e5:b1:67:95:e9:6a:
                    f4:64:e6:60:3f:29:ef:a5:cc:2c:fa:4a:10:ea:22:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.224.0/19
                  23.111.32.0/19
                  23.111.96.0/19
                  23.111.192.0/19
                  88.212.192.0/18
                  185.206.100.0/22
                IPv6:
                  2a02:2100::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39134

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:45:89:d5:5d:c9:76:41:5e:db:81:7b:d9:09:f3:5a:c1:
         b7:5c:fb:cc:96:43:0a:5b:a9:e7:f3:53:88:21:2a:99:ba:83:
         93:6a:4f:98:62:c3:5e:5f:00:2a:c6:fd:9f:66:a3:c7:e1:56:
         4b:94:a1:48:53:f5:6b:97:48:ff:0a:71:fe:51:69:4f:f9:05:
         29:56:47:74:9f:9f:1f:46:37:3b:a4:b2:b9:f3:1c:77:2d:ec:
         d0:de:92:f9:72:18:e5:af:6e:b0:b7:1d:3e:f7:cf:37:4a:44:
         8c:1b:0f:43:58:a1:12:9b:97:b7:53:ed:b0:dc:7d:eb:a9:32:
         0a:4c:b7:26:57:17:00:8b:7f:f4:b5:dc:9a:fc:2f:cf:33:d1:
         e3:8e:ee:8c:87:cd:ed:1b:af:95:5d:6d:5b:da:63:30:71:ea:
         05:5d:32:fa:21:22:c4:2d:48:d2:8f:ad:78:12:37:de:aa:af:
         1f:51:58:be:54:01:c6:26:f8:ae:e0:26:97:2b:cd:78:18:c4:
         81:8a:7a:58:5f:28:f0:ec:44:03:de:c4:f2:4d:90:3c:d6:ad:
         5b:95:f5:13:71:ef:4c:89:ce:63:53:37:52:4d:77:19:37:5e:
         a7:c7:9b:fe:9f:b5:a5:48:99:aa:db:3d:a0:ed:48:cb:b0:a7:
         09:fc:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net