Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
File:                     AdKI5UcwsQk69JmTgDQvhdgZjQo.cer (raw, json)
Hash identifier:          qU5shyfrAgGOHjJxzoV9ufPeW+rYEqwSgnZQN+Y0k6g=
Subject key identifier:   01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143B4C80D4F8B930CC209546B84F229
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198497
                          IP: 188.241.122.0/23
                          IP: 195.62.5.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b4:c8:0d:4f:8b:93:0c:c2:09:54:6b:84:f2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01d288e54730b1093af4999380342f85d8198d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:ad:31:1f:ae:2e:ba:8f:26:7a:82:c9:a7:
                    75:96:60:b4:8f:04:f0:cc:92:57:a8:9f:c7:b1:90:
                    79:97:a0:b4:53:f3:6c:f1:1d:27:84:f8:21:44:84:
                    ad:10:b9:87:ee:f6:6c:5d:3c:a3:a7:9c:69:e5:1d:
                    68:71:ad:27:d0:9a:f9:37:62:6d:19:27:2a:45:7a:
                    40:78:3e:1b:02:ba:62:70:2b:70:37:78:2e:34:e8:
                    b3:e1:b7:da:dc:59:ad:a1:c5:aa:b6:ce:ef:de:ed:
                    82:2f:ef:c2:cd:aa:e7:19:cc:22:0d:6e:1f:98:07:
                    ae:53:c0:de:03:e9:93:02:59:97:c5:17:0e:6d:a4:
                    c9:93:3c:c4:d1:45:d1:09:d6:e5:b4:c7:cf:4b:58:
                    27:46:4d:39:5b:0e:4e:15:89:3b:68:53:c2:ca:9b:
                    8e:23:85:48:0d:57:1f:31:30:93:cc:3b:d2:06:48:
                    7b:fe:0d:63:73:fc:7c:df:fd:3f:6b:82:0a:82:31:
                    63:ab:6c:c5:98:d4:d1:ac:b7:5a:f0:de:ff:07:85:
                    2c:27:73:f3:cd:a7:c3:ec:31:94:4a:a5:fb:c6:fe:
                    82:03:af:4f:91:3f:e5:4e:e9:56:c6:62:7f:fd:28:
                    6d:52:c7:0e:1e:53:5b:6d:d2:5b:46:72:f1:02:2b:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.241.122.0/23
                  195.62.5.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198497

    Signature Algorithm: sha256WithRSAEncryption
         9e:9b:d1:11:f2:d9:c1:57:69:21:95:1b:4d:2c:73:9c:a4:eb:
         fe:c4:2a:06:b8:16:38:70:5f:20:57:dc:00:e9:03:07:37:e6:
         5c:8c:94:5d:75:95:24:6d:2d:1e:fc:96:21:32:4b:bd:15:58:
         e3:b6:e9:b0:cd:46:fc:25:b0:64:cf:de:e3:9a:98:9b:9b:4b:
         ca:46:87:24:1c:96:1d:83:8c:44:2d:2f:15:1f:15:2e:78:9f:
         71:8c:8a:dd:33:85:ab:f5:43:61:64:0d:fa:28:6d:24:c8:d3:
         e8:8b:9e:fe:57:1d:bc:ce:66:7e:ba:f4:73:f3:94:03:35:74:
         08:d2:08:70:0f:ca:92:0e:7c:6d:ec:28:94:b0:41:48:a0:e6:
         eb:6e:b2:b4:6f:9f:82:f3:9c:3b:3d:5d:54:08:9e:da:b7:84:
         a7:76:c9:5e:c1:6f:ea:d8:69:d3:50:a6:9b:0c:a4:e5:d7:e4:
         65:59:47:0d:c9:f5:3c:47:09:8e:fa:3e:94:f5:50:81:f1:b5:
         56:b2:dc:e7:66:7f:12:9e:a6:43:38:e8:b9:15:30:aa:94:8b:
         cc:ce:e4:bc:99:0d:12:5b:bf:e3:c8:e9:63:85:a0:51:39:2c:
         17:5c:73:b3:6a:8e:b8:2b:c6:7c:e5:dd:bf:34:46:46:a8:db:
         c4:ce:dc:0a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQhQ7TIDU+LkwzCCVRrhPIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWQyODhlNTQ3MzBiMTA5M2FmNDk5OTM4MDM0MmY4NWQ4MTk4ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwKtMR+uLrqPJnqCyad1lmC0jwTw
zJJXqJ/HsZB5l6C0U/Ns8R0nhPghRIStELmH7vZsXTyjp5xp5R1oca0n0Jr5N2Jt
GScqRXpAeD4bArpicCtwN3guNOiz4bfa3FmtocWqts7v3u2CL+/CzarnGcwiDW4f
mAeuU8DeA+mTAlmXxRcObaTJkzzE0UXRCdbltMfPS1gnRk05Ww5OFYk7aFPCypuO
I4VIDVcfMTCTzDvSBkh7/g1jc/x83/0/a4IKgjFjq2zFmNTRrLda8N7/B4UsJ3Pz
zafD7DGUSqX7xv6CA69PkT/lTulWxmJ//ShtUscOHlNbbdJbRnLxAisI1wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFAHSiOVHMLEJOvSZk4A0L4XYGY0KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzkyYzBh
Ny0yYzAwLTRhMGQtYjBmOS1iY2UzZWI1Nzc1ZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvOTJjMGE3
LTJjMDAtNGEwZC1iMGY5LWJjZTNlYjU3NzVlYi8xL0FkS0k1VWN3c1FrNjlKbVRn
RFF2aGRnWmpRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBvPF6AwQAwz4FMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMHYTANBgkqhkiG9w0BAQsFAAOCAQEAnpvREfLZwVdpIZUbTSxznKTr
/sQqBrgWOHBfIFfcAOkDBzfmXIyUXXWVJG0tHvyWITJLvRVY47bpsM1G/CWwZM/e
45qYm5tLykaHJByWHYOMRC0vFR8VLnifcYyK3TOFq/VDYWQN+ihtJMjT6Iue/lcd
vM5mfrr0c/OUAzV0CNIIcA/Kkg58bewolLBBSKDm626ytG+fgvOcOz1dVAie2reE
p3bJXsFv6thp01Cmmwyk5dfkZVlHDcn1PEcJjvo+lPVQgfG1VrLc52Z/Ep6mQzjo
uRUwqpSLzM7kvJkNElu/48jpY4WgUTksF1xzs2qOuCvGfOXdvzRGRqjbxM7cCg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net