Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.cer (raw, json)
Hash identifier:          LHFPVdtfn2dduSS0K/CsfB9B+fU+zkcdQJlIhzfGYGw=
Subject key identifier:   11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C49790C4433901C58297A2C6F4576
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50357
                          IP: 193.106.124.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:49:79:0c:44:33:90:1c:58:29:7a:2c:6f:45:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:46:11:d5:0b:cf:35:a0:0c:78:5a:65:a6:
                    e2:bb:04:55:a5:e6:a6:86:b8:b0:55:a8:06:a3:7a:
                    68:68:52:30:da:c0:e5:c7:ae:0d:ce:8d:1a:5d:1e:
                    a7:63:a7:c7:ce:a5:df:95:b9:d6:72:3d:38:6d:4a:
                    30:32:78:96:4a:4b:da:47:f7:65:e6:04:83:18:10:
                    98:a4:e4:bf:cc:18:0c:1c:a1:c1:03:b9:ff:e5:65:
                    8d:3c:1a:a2:f7:41:d2:ee:de:58:4c:5a:bb:c0:de:
                    22:c1:32:fe:c0:f4:47:5b:9f:a9:e0:df:ed:54:ee:
                    8a:52:9a:7d:05:21:27:17:ab:66:33:0b:10:a3:bb:
                    21:ef:db:a3:5c:73:01:a0:7f:6d:3d:c2:68:d2:f4:
                    d6:0f:55:00:b3:12:de:eb:73:11:88:19:31:62:2a:
                    93:e8:b8:da:69:7c:8a:bf:e8:14:ed:74:a7:c2:d2:
                    fd:ea:b8:8f:00:8a:f8:25:b0:da:7e:fb:a8:82:6c:
                    d2:5c:ad:af:ca:23:e4:f5:23:bc:f8:fe:38:43:ed:
                    1b:71:0a:6f:f9:56:2a:5c:81:dd:0c:63:6a:b5:7a:
                    e5:25:6e:f9:34:3f:17:55:7a:ef:3e:6a:d7:ae:0c:
                    1c:bd:2e:e3:dc:53:24:0a:15:78:06:b9:52:01:67:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.124.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50357

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:98:c5:81:4f:25:bc:36:81:7d:8b:20:65:00:cc:ce:b6:
         d0:24:d1:69:70:93:98:33:1e:9d:d1:40:73:87:14:e9:9a:72:
         de:2d:be:0c:cd:d2:80:5c:d3:fc:46:d0:96:c5:bb:d2:33:c2:
         3d:8d:90:50:fb:db:4f:30:bc:13:71:2e:5c:2c:e6:dc:d7:97:
         c3:93:48:3b:41:f8:3a:c6:8f:d4:5e:b4:5c:0a:3d:ce:45:1c:
         f5:5a:bd:51:72:8b:dd:fd:86:e7:a6:30:57:2d:27:d0:54:3d:
         08:e2:14:bf:fd:6e:c4:a0:95:15:8d:f6:77:4a:26:6b:82:bc:
         90:53:01:fd:5d:45:47:ae:b7:21:af:24:24:c8:2f:73:95:5d:
         fc:d4:28:1b:bc:25:2b:1e:37:80:0c:25:d0:0b:3d:e8:ab:0a:
         d6:56:c3:e5:f3:01:4d:5a:30:df:5e:bd:0f:ec:7e:1f:e4:39:
         02:11:91:45:3b:0f:ea:bc:e1:bf:e1:7c:ce:08:9d:99:8a:4a:
         2d:9c:f5:a8:a1:95:cb:e9:d6:c9:db:41:35:80:24:83:1a:04:
         75:61:cf:8c:b4:88:19:12:06:0f:64:ed:1c:ce:8c:0c:a5:9a:
         ea:e1:0a:3f:e5:fa:59:35:7c:9b:d0:f5:2f:7d:31:c8:a1:c5:
         82:4c:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:07 2025 by rpki-client on console.sobornost.net