Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
File:                     E38jlE49eNqSAFXXLHTQK-VFXzU.cer (raw, json)
Hash identifier:          EFl+eigFAArhku0mGxopTZ6sNJq4hkGIzG3k4IMuSFg=
Subject key identifier:   13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FB471B66A01E6186CFB3905212C12
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.252.252.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:b4:71:b6:6a:01:e6:18:6c:fb:39:05:21:2c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=137f23944e3d78da920055d72c74d02be5455f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:73:78:52:5e:32:7e:a7:75:6d:fb:e2:90:
                    98:4b:51:d9:26:e6:58:6d:b8:09:9e:23:02:2d:3a:
                    a2:58:58:00:10:37:6b:41:e3:e3:31:36:76:45:6b:
                    f1:e8:a0:13:e9:2f:a9:e5:54:49:7b:7b:dc:c5:3f:
                    cf:ea:35:57:9c:4b:bb:de:b7:8e:14:62:03:c5:ba:
                    62:1f:a9:61:1e:68:62:d5:39:aa:88:e2:95:f9:13:
                    d5:08:2b:16:10:60:8e:c6:14:5d:b6:85:01:a3:cd:
                    24:a9:bc:59:31:bf:1f:e4:10:a2:35:68:89:2d:67:
                    f5:7e:51:bb:fb:8b:7e:31:5c:9e:75:f6:39:7e:62:
                    e8:3e:b8:9b:e0:2e:4a:e1:e8:b1:4d:ed:b9:1f:7e:
                    05:61:cb:37:59:21:c9:b3:32:ac:fe:4d:07:07:a8:
                    68:ee:1b:be:dc:7d:e3:7d:8b:5e:8f:0f:dc:26:02:
                    87:f4:73:e1:25:2a:5a:26:3d:a9:1e:a1:f5:c2:44:
                    da:42:b9:02:5c:62:2a:1a:a1:78:59:b6:df:c0:97:
                    f7:7e:a2:86:87:48:4e:0a:99:61:d0:ba:7d:d1:a7:
                    7a:72:99:fa:65:72:33:aa:bb:5a:17:63:47:ba:c9:
                    3f:d7:44:80:21:4a:dd:e5:2c:3e:6e:8c:38:dc:2c:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:15:50:e1:48:7d:94:1d:3e:a6:ec:ba:74:9d:8f:2a:3d:
         b5:bc:aa:83:2b:06:9a:aa:2c:1a:6c:a7:5f:32:be:48:fc:be:
         2d:04:f3:d8:78:48:6c:77:9f:bd:80:d9:4b:95:c4:77:ea:9c:
         ae:2f:ed:86:a3:a5:4b:cf:76:b6:f3:d8:4d:df:cb:1e:86:e1:
         fe:d9:83:f7:b2:08:57:c8:34:43:9f:4b:ba:e3:9c:73:3b:ba:
         75:db:d2:3a:4a:32:cd:71:f3:6a:9f:10:23:70:be:47:e5:52:
         16:c4:e2:f3:a7:1d:40:12:5e:4c:90:f8:de:73:de:28:1b:9d:
         04:d5:56:2a:07:84:ee:ca:c3:a8:93:8c:ce:d7:09:56:7f:39:
         3a:f4:8d:46:25:5a:ac:43:0d:d6:fc:fc:55:2f:48:47:10:2b:
         e3:ea:bc:1f:51:9b:6e:ca:cb:91:2b:82:e3:3b:24:2a:14:e0:
         71:c3:7f:92:a8:d3:62:5a:5f:b6:19:d2:0f:50:8a:d6:fb:94:
         8d:87:68:53:dc:88:14:a7:14:86:0f:eb:36:ae:f6:41:fd:0e:
         69:7d:a3:60:87:40:bf:20:d0:c4:a9:23:c6:7a:24:ba:17:4e:
         9e:15:bf:f2:68:7d:f5:79:62:a4:0c:1c:40:b6:27:59:f0:8a:
         11:89:6d:0d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlj7RxtmoB5hhs+zkFISwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzdmMjM5NDRlM2Q3OGRhOTIwMDU1ZDcyYzc0ZDAyYmU1NDU1ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1hzeFJeMn6ndW374pCYS1HZJuZY
bbgJniMCLTqiWFgAEDdrQePjMTZ2RWvx6KAT6S+p5VRJe3vcxT/P6jVXnEu73reO
FGIDxbpiH6lhHmhi1TmqiOKV+RPVCCsWEGCOxhRdtoUBo80kqbxZMb8f5BCiNWiJ
LWf1flG7+4t+MVyedfY5fmLoPrib4C5K4eixTe25H34FYcs3WSHJszKs/k0HB6ho
7hu+3H3jfYtejw/cJgKH9HPhJSpaJj2pHqH1wkTaQrkCXGIqGqF4WbbfwJf3fqKG
h0hOCplh0Lp90ad6cpn6ZXIzqrtaF2NHusk/10SAIUrd5Sw+bow43CxCEQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBN/I5ROPXjakgBV1yx00CvlRV81MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzRhMTY0
ZS0xZTU4LTQxMDUtYmVkMS00MDdhZjg5YWQ4ZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNGExNjRl
LTFlNTgtNDEwNS1iZWQxLTQwN2FmODlhZDhlOS8xL0UzOGpsRTQ5ZU5xU0FGWFhM
SFRRSy1WRlh6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufz8MA0GCSqGSIb3DQEBCwUAA4IBAQBT+xVQ
4Uh9lB0+puy6dJ2PKj21vKqDKwaaqiwabKdfMr5I/L4tBPPYeEhsd5+9gNlLlcR3
6pyuL+2Go6VLz3a289hN38sehuH+2YP3sghXyDRDn0u645xzO7p129I6SjLNcfNq
nxAjcL5H5VIWxOLzpx1AEl5MkPjec94oG50E1VYqB4TuysOok4zO1wlWfzk69I1G
JVqsQw3W/PxVL0hHECvj6rwfUZtuysuRK4LjOyQqFOBxw3+SqNNiWl+2GdIPUIrW
+5SNh2hT3IgUpxSGD+s2rvZB/Q5pfaNgh0C/INDEqSPGeiS6F06eFb/yaH31eWKk
DBxAtidZ8IoRiW0N
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:06 2025 by rpki-client on console.sobornost.net