Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
File:                     BsvHYUtJh4vzf94MGNfIUcLQfm8.cer (raw, json)
Hash identifier:          9TLZn4T8UqA7scuOaZBf9k1c95OrOTM9pY0/9vJja9Y=
Subject key identifier:   06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067FA6FA1E87649439DC3164F99AD07
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8412
                          IP: 46.124.0.0/15
                          IP: 62.140.32.0/19
                          IP: 78.132.0.0/17
                          IP: 185.99.72.0/22
                          IP: 212.67.224.0/19
                          IP: 212.95.0.0/19
                          IP: 213.142.96.0/19
                          IP: 213.162.64.0/19
                          IP: 2001:678:5a8::/48
                          IP: 2001:4bc8::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:fa:6f:a1:e8:76:49:43:9d:c3:16:4f:99:ad:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:fc:58:90:6a:d6:3c:0b:58:7a:e0:97:e8:
                    dd:d5:5d:2e:ac:8f:e6:92:2a:5f:25:81:59:eb:11:
                    5f:2f:ce:da:c8:bf:b4:fc:78:6a:da:f7:5f:a1:a3:
                    3c:f7:33:5f:a4:40:a1:65:b3:9f:41:4c:2e:d0:1b:
                    d8:7b:f1:b1:db:24:46:c2:59:33:ce:13:78:b8:3b:
                    0e:52:e6:c6:04:c3:06:82:84:18:01:b6:eb:38:6d:
                    ee:ca:07:14:3c:d1:bd:7c:b2:4a:15:c9:2d:51:9b:
                    2f:ed:a8:e1:40:93:91:8b:2f:02:68:7f:36:aa:d7:
                    6a:7d:a5:0e:df:e1:43:52:cf:ec:aa:bc:11:ee:57:
                    83:61:8f:61:82:cf:9a:15:e0:5a:7f:c7:2f:7b:93:
                    8d:2f:d4:60:46:ec:d3:4f:aa:46:0a:46:f5:31:eb:
                    86:9a:bc:84:80:32:8a:7e:2d:26:7f:1c:84:2c:94:
                    d3:74:5c:83:19:75:05:cb:90:ce:2d:b5:b1:f3:70:
                    8d:ea:85:3f:d2:f7:8f:e6:f2:c8:ae:27:52:4d:65:
                    5d:0f:2e:bd:4d:50:18:94:15:83:80:6a:5a:20:67:
                    e1:3f:22:75:ac:3c:d5:b8:e9:ec:0d:5e:e0:26:b7:
                    59:20:db:0d:77:80:cd:d6:89:eb:55:e7:04:7a:7d:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.124.0.0/15
                  62.140.32.0/19
                  78.132.0.0/17
                  185.99.72.0/22
                  212.67.224.0/19
                  212.95.0.0/19
                  213.142.96.0/19
                  213.162.64.0/19
                IPv6:
                  2001:678:5a8::/48
                  2001:4bc8::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8412

    Signature Algorithm: sha256WithRSAEncryption
         03:74:5b:5a:42:06:ef:16:bc:31:c2:0f:1f:71:b3:89:10:f0:
         3e:b9:c3:3f:85:c6:85:ab:53:dd:b2:b5:87:00:f3:a4:4a:3a:
         32:b3:57:4e:e0:f4:a4:c5:2c:c4:11:b5:d2:b4:b5:38:1d:6c:
         b9:55:93:3f:e6:72:ce:25:07:ea:df:59:d1:77:9a:53:9f:aa:
         f1:32:7f:f5:7c:6b:96:5d:46:bd:18:fc:53:87:7f:f5:83:5c:
         22:90:87:2f:4e:03:9f:2e:d7:af:54:8c:7c:e4:c9:63:1d:f1:
         76:1c:1b:a6:6a:f9:74:d0:e6:e8:7c:31:12:9a:81:34:2e:f1:
         fb:1e:2b:40:c0:73:6a:15:8b:f8:3b:29:25:72:d2:41:8f:05:
         f6:9e:33:27:7c:bc:a3:c8:9a:3b:ff:97:8f:e4:f7:80:6f:85:
         85:d0:88:d2:b5:f6:ef:8b:f6:e3:32:f5:9a:c2:e5:a2:16:ad:
         9b:39:1a:0b:64:35:a4:2f:d5:51:2c:fb:c7:88:d6:9c:ce:b4:
         3c:22:66:e4:99:16:c4:fe:52:ce:1f:40:ba:d9:14:29:b0:97:
         4b:b7:a4:07:25:db:77:85:38:dc:24:f0:e2:06:8c:2d:41:72:
         21:74:06:94:30:22:5b:4d:81:05:77:23:43:78:e3:7d:38:29:
         8b:d4:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:01 2025 by rpki-client on console.sobornost.net