Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.cer (raw, json)
Hash identifier:          1Nqsi5Udgo9KW8nNOo4EZuf3x7Upiw4wzPQiq7LAt5Q=
Subject key identifier:   0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961FE2D9438601D5028FE292BDF5979544
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 13:28:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8674
                          AS: 20943
                          AS: 29216
                          AS: 39840
                          AS: 39870 -- 39871
                          AS: 52005
                          AS: 56908
                          AS: 57021
                          IP: 77.72.224.0/21
                          IP: 83.143.176.0/21
                          IP: 185.1.230.0/24
                          IP: 185.42.136.0/22
                          IP: 194.58.192.0/20
                          IP: 194.146.105.0 -- 194.146.108.255
                          IP: 195.69.116.0/22
                          IP: 195.245.240.0/24
                          IP: 212.237.192.0/21
                          IP: 213.32.232.0/21
                          IP: 2001:67c:1010::/47
                          IP: 2001:67c:254c::/48
                          IP: 2001:67c:2550::/48
                          IP: 2001:67c:2554::/48
                          IP: 2001:67c:2558::/48
                          IP: 2001:7f8:d::/48
                          IP: 2001:7f8:122::/48
                          IP: 2001:7fe::/32
                          IP: 2a01:3f0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:e2:d9:43:86:01:d5:02:8f:e2:92:bd:f5:97:95:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 13:28:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bac82804700ad36538bf86f34c073e971430da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:bb:04:6c:0c:b7:48:62:f3:66:a4:14:49:
                    94:d0:77:6b:ed:0d:14:24:1e:5c:86:da:6c:e9:0c:
                    4e:69:01:e5:0f:da:aa:ea:6f:2b:f1:84:6a:fe:b5:
                    13:24:15:74:c0:81:54:9e:85:f2:f0:5d:58:3e:65:
                    4b:1d:88:09:e8:b5:70:67:df:51:4d:0d:ad:72:ff:
                    5e:62:3a:8a:d3:46:7a:52:b5:8e:03:ff:11:78:70:
                    40:be:90:34:1f:9b:36:8d:78:59:68:8a:5e:a6:71:
                    8f:dd:d0:73:9d:36:1f:67:c9:b2:de:74:61:95:f6:
                    3f:45:be:37:a7:c5:8c:7a:69:67:2c:52:81:46:0d:
                    f1:7e:5f:a5:9b:e8:47:d5:7a:d8:95:d9:f3:ff:48:
                    30:2b:a1:e2:82:07:d9:17:50:92:1a:6a:1d:4c:f5:
                    d6:b6:e0:42:10:bd:89:9a:8e:86:7b:34:98:46:7c:
                    84:bc:e0:4b:2a:36:40:f0:12:3c:82:81:3c:72:03:
                    8f:0f:72:ff:de:f7:1f:88:a5:7a:5f:8e:5d:ce:6a:
                    57:80:76:4c:55:2f:a4:b9:fd:14:b7:8f:c5:6c:fe:
                    e6:3e:03:38:0c:e8:0b:9d:e0:f7:cd:48:cb:6e:7d:
                    38:d5:c0:6c:28:b2:4f:c3:c1:85:6a:43:9e:e6:c3:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.224.0/21
                  83.143.176.0/21
                  185.1.230.0/24
                  185.42.136.0/22
                  194.58.192.0/20
                  194.146.105.0-194.146.108.255
                  195.69.116.0/22
                  195.245.240.0/24
                  212.237.192.0/21
                  213.32.232.0/21
                IPv6:
                  2001:67c:1010::/47
                  2001:67c:254c::/48
                  2001:67c:2550::/48
                  2001:67c:2554::/48
                  2001:67c:2558::/48
                  2001:7f8:d::/48
                  2001:7f8:122::/48
                  2001:7fe::/32
                  2a01:3f0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8674
                  20943
                  29216
                  39840
                  39870-39871
                  52005
                  56908
                  57021

    Signature Algorithm: sha256WithRSAEncryption
         94:44:46:7b:37:09:0f:c4:40:79:62:fe:15:ca:80:ee:e6:3a:
         db:04:27:3c:b3:a7:a4:d9:01:80:79:e3:83:d6:15:4a:2c:9e:
         a8:0f:2d:c4:9e:bb:37:a8:72:cb:fb:40:66:38:98:30:80:ad:
         23:fe:68:3d:7d:49:19:b6:63:77:24:2a:a7:7a:13:d0:42:fa:
         a6:2c:56:fd:a8:ed:53:55:bf:ea:b7:53:76:ed:f9:e5:1a:fb:
         42:a5:d6:6c:18:b5:a5:66:0f:c3:92:51:b5:c8:d4:c9:1b:07:
         e6:a6:72:1f:74:7b:9e:c4:d3:ef:7a:4f:d5:73:48:82:e9:6c:
         95:9b:91:c8:c3:44:d2:dd:a9:99:ce:28:5c:0d:13:89:ec:ed:
         99:9a:e9:c4:0c:df:77:b6:78:d0:41:be:37:4d:60:98:f6:ef:
         1b:4a:0a:83:2c:bd:45:85:9c:c4:1f:49:fc:1a:98:8c:48:5c:
         75:46:f3:8d:9a:b2:a9:cc:2f:03:7a:17:87:af:48:99:4e:0c:
         62:0f:cd:66:2a:06:a2:0f:a8:d8:20:6c:5d:ac:ea:99:69:72:
         22:f0:ff:36:d2:5f:8b:f4:df:dc:5e:0e:a9:39:b9:8f:8b:7a:
         c8:bc:7c:f3:72:0a:69:1b:22:cb:3c:e3:8b:7a:4e:99:42:db:
         0c:19:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:02 2025 by rpki-client on console.sobornost.net