Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.cer (raw, json)
Hash identifier:          asyRhXOpSM0lkzVYUS7w3OKoPtBpXibxMlr7MfOMg00=
Subject key identifier:   08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195DD3542B0C49C2BEAC87A6948C9869E7E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 14:43:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16242
                          AS: 59812
                          AS: 211096
                          IP: 2.59.120.0/22
                          IP: 95.156.203.0/24
                          IP: 95.214.148.0/22
                          IP: 185.15.137.0/24
                          IP: 193.134.251.0/24
                          IP: 193.247.85.0/24
                          IP: 194.69.196.0/23
                          IP: 2a12:5a40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:dd:35:42:b0:c4:9c:2b:ea:c8:7a:69:48:c9:86:9e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 28 14:43:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:be:3d:4c:01:d6:86:64:ae:2c:40:1a:af:
                    e4:e8:a4:52:bf:9d:46:00:cc:77:ea:20:ed:8e:3c:
                    81:75:b1:30:d0:53:70:76:f7:ff:a2:2c:a4:5d:66:
                    61:d5:e4:d4:a8:03:2b:af:d3:09:e6:0f:ec:0c:15:
                    86:95:65:80:4d:65:ec:dd:fe:9f:8c:cc:ea:43:9f:
                    87:e8:12:79:31:5e:6f:72:ed:08:85:34:2e:4c:b1:
                    1c:70:80:79:14:17:51:15:77:ac:35:eb:84:b1:22:
                    fd:bc:5c:5c:78:20:b4:22:31:56:3e:7e:3f:22:ae:
                    88:16:83:8d:55:a1:91:5f:14:6c:5c:fe:e2:21:05:
                    f1:8b:86:f2:1c:42:ad:13:8f:93:52:c5:6a:81:34:
                    c5:44:6a:96:4a:5e:96:6c:26:35:cb:1d:15:52:c4:
                    20:00:31:12:85:5c:82:a5:74:a6:2c:be:9d:eb:50:
                    dd:77:08:c1:00:9c:99:1c:5d:13:1b:b4:16:7e:0b:
                    60:23:db:5d:0f:be:e8:a8:6c:25:51:6d:b3:a5:22:
                    20:43:5f:cf:69:36:56:db:a4:56:6e:74:5a:46:31:
                    0e:44:a0:03:63:2e:33:0f:7d:43:3f:90:dc:49:ef:
                    4f:4d:1e:fd:bb:a0:74:45:6c:b4:2a:c8:dd:10:41:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.120.0/22
                  95.156.203.0/24
                  95.214.148.0/22
                  185.15.137.0/24
                  193.134.251.0/24
                  193.247.85.0/24
                  194.69.196.0/23
                IPv6:
                  2a12:5a40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16242
                  59812
                  211096

    Signature Algorithm: sha256WithRSAEncryption
         ae:e8:ce:a3:e9:7d:2e:11:9d:b8:3a:54:bc:d1:ac:0c:39:e7:
         06:28:ba:50:cd:3d:33:45:19:b2:ed:f3:ad:bd:a1:3a:88:07:
         d3:d4:3a:df:fc:c9:75:b2:aa:a6:ee:b3:4a:96:79:e7:fa:06:
         47:9f:61:90:c7:81:5a:ee:fe:37:12:4d:09:ba:58:16:d2:f6:
         de:ee:5a:b8:01:5d:9d:dd:30:e8:39:e3:3f:1b:c3:70:6b:ca:
         42:c7:71:87:7a:62:c0:d2:99:2f:c0:83:93:c3:0f:44:84:36:
         c2:48:a0:60:3f:d8:a7:08:4a:2e:7a:af:b4:d4:31:4e:6a:1f:
         18:c5:e9:8e:10:0f:53:97:6a:a1:a9:f8:b3:52:ea:c6:14:1b:
         33:67:d4:34:c6:6b:f2:6e:0c:b8:e6:e7:9c:10:26:eb:a0:42:
         da:ac:d4:00:aa:06:39:53:12:0e:b0:eb:15:c8:71:c1:79:22:
         a5:b2:9c:67:52:5b:05:78:c2:16:dc:f1:7e:1a:d5:51:c6:04:
         39:a5:c3:32:d5:40:4c:2e:97:42:e4:b4:2a:fb:eb:db:98:ae:
         3a:76:1b:70:5c:08:93:87:34:cb:ba:2c:d5:ac:bc:8b:ad:c2:
         a6:69:a9:ca:72:73:f9:0a:2e:5d:37:15:fd:63:64:2b:eb:8c:
         d7:9b:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:02 2025 by rpki-client on console.sobornost.net