Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer (raw, json)
Hash identifier:          pFau/4aNV19V0TsdnKRxQh4SOkQr3fLM79xQpBdCngA=
Subject key identifier:   04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1B574F723BEFBDB47D7624BAEDA23
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57269
                          IP: 31.14.104.0/21
                          IP: 31.14.192.0/21
                          IP: 77.81.8.0/21
                          IP: 79.112.0.0/15
                          IP: 79.116.0.0/15
                          IP: 86.105.120.0/21
                          IP: 89.34.208.0/21
                          IP: 89.38.168.0/21
                          IP: 89.41.152.0/21
                          IP: 89.43.176.0/22
                          IP: 89.45.96.0/20
                          IP: 89.46.48.0 -- 89.46.59.255
                          IP: 89.47.204.0/22
                          IP: 91.232.81.0/24
                          IP: 92.114.112.0/20
                          IP: 93.114.112.0/20
                          IP: 93.115.64.0/21
                          IP: 93.118.80.0/20
                          IP: 93.118.192.0/18
                          IP: 94.176.152.0/21
                          IP: 176.126.176.0/20
                          IP: 185.105.36.0/22
                          IP: 185.239.200.0/22
                          IP: 188.240.76.0/22
                          IP: 188.241.224.0/20
                          IP: 195.135.248.0/22
                          IP: 2a0c:5a80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:b5:74:f7:23:be:fb:db:47:d7:62:4b:ae:da:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:f8:48:b2:bc:93:3f:ab:65:7b:92:05:d4:
                    51:e7:2b:6d:f9:8e:9e:48:aa:97:6b:7f:68:19:da:
                    d2:05:d0:2c:31:6d:bb:60:37:ed:79:74:30:26:16:
                    cb:ee:85:22:1c:b1:47:51:e7:b4:f2:e0:4a:4b:e4:
                    07:d7:38:c3:6c:27:4f:3e:40:36:c6:1b:8e:c8:b6:
                    6e:91:04:89:94:c2:ac:df:8d:e7:32:6b:a7:68:bf:
                    ee:b4:0e:36:fe:16:18:64:0e:a4:db:c2:5a:a1:99:
                    82:57:27:b2:8b:4c:7a:a5:86:04:0b:83:d8:10:46:
                    6a:89:52:41:e0:17:ee:8e:43:bf:e6:98:b1:46:39:
                    76:d5:60:58:57:5c:45:d2:f0:85:63:a7:8b:b8:21:
                    60:10:30:5b:24:b2:e1:89:96:a8:bc:17:8d:bf:a0:
                    46:80:a8:7d:b0:ff:cc:fa:c2:3d:aa:e9:c1:2c:9c:
                    12:f5:fc:99:2a:af:b3:a9:7c:fc:26:77:25:96:8f:
                    de:e6:36:77:58:85:a4:80:ad:6b:be:b2:26:74:91:
                    cb:ff:5d:c5:9b:4a:2e:de:91:d6:2c:af:90:5f:40:
                    45:89:af:54:2c:02:d4:71:f8:97:51:f2:af:2e:c9:
                    0a:74:c1:d9:2a:1e:7b:c3:fe:d5:93:2d:9c:59:61:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.104.0/21
                  31.14.192.0/21
                  77.81.8.0/21
                  79.112.0.0/15
                  79.116.0.0/15
                  86.105.120.0/21
                  89.34.208.0/21
                  89.38.168.0/21
                  89.41.152.0/21
                  89.43.176.0/22
                  89.45.96.0/20
                  89.46.48.0-89.46.59.255
                  89.47.204.0/22
                  91.232.81.0/24
                  92.114.112.0/20
                  93.114.112.0/20
                  93.115.64.0/21
                  93.118.80.0/20
                  93.118.192.0/18
                  94.176.152.0/21
                  176.126.176.0/20
                  185.105.36.0/22
                  185.239.200.0/22
                  188.240.76.0/22
                  188.241.224.0/20
                  195.135.248.0/22
                IPv6:
                  2a0c:5a80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57269

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:a0:ff:de:d1:39:17:1f:c5:68:76:83:d2:34:a9:82:f1:
         3c:f7:81:39:9d:c4:02:65:bd:5a:68:ab:8e:25:b0:15:e6:78:
         06:10:fc:35:83:e7:09:3b:db:60:7d:b3:0b:9c:39:62:17:b9:
         e3:3a:f7:7a:c9:04:74:b6:43:b9:af:95:18:1c:7c:8b:dc:e6:
         0e:f5:47:0e:1e:c8:8a:6f:bd:d8:3c:fb:db:b5:fc:b2:c6:b1:
         06:d6:63:93:58:df:51:bd:10:ad:6f:31:2f:9d:a6:1f:f1:2e:
         83:79:e0:03:e7:c7:d3:47:ca:d5:2c:80:64:f0:4a:d0:1e:63:
         40:11:af:3d:60:d8:6d:4c:19:60:03:87:43:1d:dc:58:d6:7a:
         77:e8:f0:a7:42:21:b1:a3:92:ff:05:2d:91:80:81:f7:99:2d:
         99:31:9a:85:71:ed:56:07:6c:fb:cc:83:15:85:6c:58:7c:0b:
         67:ad:54:4a:b3:57:ef:a1:2d:d6:20:1e:42:90:09:39:0b:a4:
         c5:a6:4e:a5:3e:62:0b:3d:dd:21:1d:92:fb:fd:86:7c:ef:fa:
         02:a8:ad:92:90:86:4d:8f:27:ab:7c:e2:9a:c4:6f:21:1e:84:
         67:60:9e:4e:9d:55:40:f3:3a:00:91:31:4d:4e:d5:3f:c8:a7:
         ac:c3:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:01 2025 by rpki-client on console.sobornost.net