Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
File:                     AYODB_eazcWa1uuC6Miq76PYgok.cer (raw, json)
Hash identifier:          S7frCfUJCDan4fyBhDhpSbb8b16C0BYSXjcpQjSdImM=
Subject key identifier:   01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D801B7F21D23AE48BA853FEA28B340
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 82.100.64.0/18
                          IP: 185.199.136.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d8:01:b7:f2:1d:23:ae:48:ba:85:3f:ea:28:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:db:11:81:30:75:45:e1:aa:3b:c4:3c:91:
                    15:aa:0e:c4:74:1a:ff:5c:d9:d9:af:24:d2:7b:75:
                    59:49:c7:b5:28:23:c9:95:3a:b5:1c:a6:70:d3:d4:
                    da:38:6c:b1:94:4b:79:24:a7:72:2f:a6:2d:60:77:
                    21:62:ca:2a:3c:f6:85:c9:0f:a7:5e:0b:62:fe:5a:
                    05:69:a7:13:1d:b1:18:fd:4b:1d:25:be:af:bc:2e:
                    a3:4f:02:62:9e:eb:0f:b4:d7:cf:85:f3:94:2a:c5:
                    ea:eb:13:e7:9e:a4:a6:77:11:cd:a2:72:6f:ea:44:
                    b7:b0:72:7c:d7:47:dc:3b:ac:73:93:5e:ab:5a:a5:
                    44:01:02:3b:aa:82:51:dc:6c:d9:45:63:26:0d:93:
                    f6:a1:29:26:84:93:1c:a5:ed:3f:93:70:95:4a:81:
                    52:99:22:c2:16:47:0e:ec:c1:d7:5c:d5:72:52:d3:
                    31:85:da:a6:62:12:d9:48:10:84:27:0c:a2:98:99:
                    6c:35:10:b2:ab:08:5e:fc:15:c6:55:95:d4:3e:95:
                    05:09:53:1b:16:f1:fa:a1:d7:ea:58:60:d7:c5:45:
                    bb:c9:0d:32:4f:72:dc:d0:73:87:0c:41:35:9f:68:
                    b1:00:db:6b:66:6a:67:bd:81:9d:8e:de:8b:8a:9d:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.100.64.0/18
                  185.199.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:54:96:8e:2c:71:ab:5d:ec:c3:af:e7:b7:b4:08:23:da:
         f6:86:dc:90:da:ce:26:29:93:ea:52:1f:57:c0:09:99:bd:5e:
         d3:37:b0:0f:dd:09:c8:67:6c:ea:ac:f3:73:e1:c4:7f:c4:46:
         a4:3f:50:34:1f:30:b6:dd:49:e8:00:68:00:e4:21:1d:f9:d0:
         b1:53:80:46:66:31:f6:10:9a:ef:0c:19:21:b1:ec:f4:04:a3:
         08:5a:e9:e4:a3:f5:26:63:85:77:89:fe:de:72:f5:2a:55:25:
         3f:5d:90:d3:f2:66:aa:ee:df:80:5f:76:e5:92:8f:51:f5:5b:
         0c:40:ef:92:4f:56:eb:20:0e:1d:89:90:a5:c7:71:27:66:b3:
         08:1a:32:20:ae:78:63:c4:a6:7b:03:c7:9d:6f:2a:f3:50:eb:
         1c:4b:fe:19:f9:58:7c:3e:0c:50:28:26:d4:96:01:ca:12:48:
         27:09:87:7a:11:32:89:e6:c8:f2:b1:04:2e:34:0f:c2:f5:03:
         e8:c1:c7:9a:68:1f:ce:39:e9:3b:67:15:ba:e0:00:a2:27:1f:
         23:aa:57:cd:6f:6c:d4:20:9e:bf:72:e4:d1:ab:a9:a6:c6:a9:
         ad:f9:91:8a:d7:e9:c2:3e:a7:cd:14:72:2a:ca:dc:ce:8a:3d:
         a4:91:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net