Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
File:                     AV8OZlqcdCI8S_4nChZZreTO8x8.cer (raw, json)
Hash identifier:          e+6tCkmTt+wc5DmiSDeKsx0sx+U7s98VYBf5RHo+37E=
Subject key identifier:   01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961A84218FC0C22AF093BD3B6F8D8823BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 12:26:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 80.244.1.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:84:21:8f:c0:c2:2a:f0:93:bd:3b:6f:8d:88:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 12:26:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:5b:71:1a:ae:ea:ee:de:0d:ab:42:23:18:
                    c6:39:1b:d2:30:58:3e:d1:ee:19:7a:a4:c5:f8:1b:
                    85:74:33:32:8d:09:3c:d6:2e:bd:0f:19:44:e9:35:
                    18:8a:4f:81:32:71:71:1b:fe:46:99:3f:9d:e2:d6:
                    df:72:f3:9a:3b:c0:d4:ba:b0:a7:83:5f:c4:42:ca:
                    8b:73:67:28:cd:72:78:cd:ec:f4:d3:0e:9c:7f:0e:
                    a8:f2:c2:49:bb:08:64:14:1f:d5:fd:50:06:4b:32:
                    cd:50:b7:dd:25:2c:ce:f6:73:d5:60:5e:b3:69:86:
                    0e:0d:26:1f:05:f1:7f:a7:d0:81:ec:4b:4c:a0:3b:
                    1c:a9:f7:f9:0b:0a:00:53:67:8f:d7:97:3e:f5:e7:
                    2e:e7:0c:d7:3e:df:06:c9:32:9b:e2:f4:cd:73:63:
                    73:96:1e:1c:b0:54:a7:25:ee:20:1f:e6:ef:e9:91:
                    6b:23:e2:1a:ef:b5:ea:fd:67:6e:bf:a0:ad:0e:83:
                    8e:74:dd:6f:c9:c0:e9:26:c7:a0:f6:8b:c8:28:48:
                    7f:2a:51:ed:5a:17:3b:4b:99:08:b1:10:9f:d6:23:
                    ce:db:fa:21:d6:1b:77:93:2f:50:7d:6e:9e:9d:42:
                    67:2e:6a:ed:89:fe:35:2f:0f:8a:0c:49:2c:a8:c8:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:18:03:cb:27:1e:85:d8:48:74:a3:5a:f4:41:9a:d5:78:c5:
         8f:7f:50:ad:26:70:45:3f:ab:39:05:ca:9f:1d:c6:8d:42:fa:
         ca:0f:45:a4:5f:1f:66:e2:3d:9f:19:41:0d:63:18:30:35:3c:
         0a:fe:e3:e0:cf:15:86:a4:b8:0d:c6:e6:50:ad:4d:c9:28:9e:
         24:db:52:fb:0c:3f:f6:20:b2:a9:25:97:1f:ba:85:8a:69:85:
         01:e0:98:78:b7:39:7b:20:ed:c5:70:c0:17:f7:0d:87:fd:91:
         16:32:1e:63:d5:11:e9:5c:cd:9b:f1:f7:2d:b7:03:51:f0:29:
         e6:b4:3f:1a:6b:48:19:d4:c5:ec:d5:65:f2:18:06:2c:12:0a:
         b4:7e:4e:a7:61:28:4a:f4:89:eb:8d:97:47:f0:69:47:e1:fc:
         ed:a8:6e:90:8d:73:66:93:f6:b8:fc:2d:f9:4b:75:85:3b:64:
         6b:05:d5:7e:67:25:40:16:f2:28:eb:46:f2:0d:fb:09:54:99:
         52:6e:dd:6d:b4:d1:c3:c0:7a:d5:a5:83:ad:a6:c2:41:45:61:
         d7:ce:34:84:4a:8c:57:c6:dd:d4:4e:23:36:a4:f3:b2:64:c1:
         c3:3d:72:fa:f6:d4:99:42:fe:5c:5e:7f:76:70:76:34:97:15:
         4f:b8:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net