Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
File:                     AZlprHWrzVlo8Yng1F272rKYK9o.cer (raw, json)
Hash identifier:          nrUHHqsIwoa09HuO8+41QOHbLljNuwRLDCkBiPQ6LwY=
Subject key identifier:   01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421446C13CD8DC579DD110959864A2EE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 9143
                          IP: 62.145.192.0/18
                          IP: 80.112.0.0/17
                          IP: 80.114.0.0/17
                          IP: 80.114.192.0 -- 80.115.191.255
                          IP: 82.72.0.0/14
                          IP: 82.101.192.0/18
                          IP: 82.151.160.0/19
                          IP: 82.217.0.0/16
                          IP: 83.80.0.0/13
                          IP: 84.24.0.0/13
                          IP: 84.104.0.0/14
                          IP: 85.147.0.0/16
                          IP: 89.220.128.0/17
                          IP: 94.208.0.0/13
                          IP: 185.130.168.0/22
                          IP: 212.54.32.0/19
                          IP: 212.120.64.0/18
                          IP: 212.127.128.0/17
                          IP: 212.204.128.0/18
                          IP: 213.34.96.0/19
                          IP: 213.51.0.0/16
                          IP: 213.73.128.0/17
                          IP: 217.62.0.0 -- 217.63.63.255
                          IP: 217.63.192.0/18
                          IP: 217.101.0.0/16
                          IP: 217.102.128.0 -- 217.102.223.255
                          IP: 217.104.0.0/17
                          IP: 217.105.64.0 -- 217.105.191.255
                          IP: 217.120.0.0/14
                          IP: 2001:b88::/29
                          IP: 2001:1c00::/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:6c:13:cd:8d:c5:79:dd:11:09:59:86:4a:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:e4:4d:d4:4f:63:09:7f:ee:33:4f:ae:fb:
                    12:39:51:d2:f2:91:af:86:88:7c:fc:ca:df:d6:09:
                    97:92:a8:77:fe:c8:3b:59:f3:9e:82:59:17:1f:64:
                    6d:ea:db:51:08:fe:90:e0:44:75:3c:22:93:f6:bd:
                    c0:68:74:5c:43:46:83:ea:4a:56:62:7e:e4:04:e8:
                    e7:71:a2:9e:53:82:98:e9:bb:f4:ec:c5:e4:cf:81:
                    dc:93:23:45:5e:81:88:aa:96:81:13:12:1a:10:02:
                    27:a0:ad:6d:2b:68:e9:1e:56:1e:e0:4c:24:fc:d0:
                    3d:15:37:6a:21:c6:29:f6:de:92:95:52:fc:4a:cc:
                    74:ae:26:d1:69:14:8c:f1:f9:bf:aa:9c:fd:35:f6:
                    4a:d5:46:c4:6e:4e:5a:37:8f:57:b5:01:d3:91:71:
                    00:46:5d:c5:22:b8:ff:e5:6a:2f:54:31:94:67:33:
                    e1:8b:e6:20:1e:d5:65:55:a8:77:86:44:85:0b:e4:
                    d8:cf:a7:a2:89:01:9d:c1:11:05:5f:55:fd:fc:e2:
                    f1:58:57:20:dd:24:fb:c3:01:6a:cb:a8:6d:c1:22:
                    04:c9:5e:04:7c:6e:52:b4:27:81:1c:cf:27:f7:a0:
                    bf:4f:43:d2:0e:67:7e:e0:e4:31:0a:c0:c7:eb:cc:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.145.192.0/18
                  80.112.0.0/17
                  80.114.0.0/17
                  80.114.192.0-80.115.191.255
                  82.72.0.0/14
                  82.101.192.0/18
                  82.151.160.0/19
                  82.217.0.0/16
                  83.80.0.0/13
                  84.24.0.0/13
                  84.104.0.0/14
                  85.147.0.0/16
                  89.220.128.0/17
                  94.208.0.0/13
                  185.130.168.0/22
                  212.54.32.0/19
                  212.120.64.0/18
                  212.127.128.0/17
                  212.204.128.0/18
                  213.34.96.0/19
                  213.51.0.0/16
                  213.73.128.0/17
                  217.62.0.0-217.63.63.255
                  217.63.192.0/18
                  217.101.0.0/16
                  217.102.128.0-217.102.223.255
                  217.104.0.0/17
                  217.105.64.0-217.105.191.255
                  217.120.0.0/14
                IPv6:
                  2001:b88::/29
                  2001:1c00::/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9143

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:ac:a5:18:ea:d9:29:6c:4b:c7:cb:58:d2:bf:8b:42:82:
         a1:74:0f:8d:f4:1b:a5:e4:e5:82:d0:05:bf:d5:60:e9:7c:72:
         74:c3:d9:2c:f8:8f:49:74:4d:f0:21:95:eb:3f:8a:24:7f:e1:
         6c:eb:02:ef:79:da:a8:dd:6e:7b:2d:37:14:6f:79:8e:36:80:
         9e:a9:11:7c:68:0d:9d:91:61:54:47:1b:76:eb:60:7b:a4:e8:
         c1:53:a5:b6:57:55:ae:2b:90:12:15:04:58:ae:aa:bd:12:d6:
         eb:0d:38:65:54:d3:c3:ef:16:ee:4d:84:60:e2:cd:36:90:e7:
         3b:dc:f6:57:a7:09:39:d8:b6:df:d6:da:48:cd:0a:49:3a:f0:
         a7:7e:3c:dc:e1:46:43:14:ea:da:f4:3a:b5:af:cb:6e:d6:e5:
         04:1b:82:6f:40:a8:29:5e:1d:03:bf:42:95:1a:70:36:c2:8b:
         0a:c1:f8:1f:9e:cf:cb:d0:a1:1f:4c:98:86:55:95:9f:e2:6d:
         48:d1:05:a6:b2:d1:34:d8:33:e5:a2:7b:73:ec:ef:ea:39:30:
         95:e9:c0:52:39:1c:6d:e9:b0:3b:71:59:08:54:a6:f3:0f:3b:
         a5:95:19:e0:95:8b:6c:06:8c:b3:78:ab:2c:91:15:5b:e1:75:
         aa:15:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net