Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer (raw, json)
Hash identifier:          +Q6ZFL65nv+FATrsyYi2vpDePuGNWL+UV6gCRhiJyWA=
Subject key identifier:   17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1FCCAD6C0D35A0854B2645B9290D2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 30873
                          IP: 5.100.160.0/21
                          IP: 5.255.0.0/19
                          IP: 31.31.176.0/20
                          IP: 46.35.64.0/19
                          IP: 46.161.224.0/19
                          IP: 78.137.64.0/19
                          IP: 80.253.176.0/20
                          IP: 81.91.24.0/21
                          IP: 82.114.160.0/19
                          IP: 89.189.64.0/19
                          IP: 94.26.192.0/19
                          IP: 109.74.32.0/20
                          IP: 109.200.160.0/19
                          IP: 110.238.32.0/19
                          IP: 131.117.160.0/21
                          IP: 134.35.0.0/16
                          IP: 175.110.0.0/18
                          IP: 176.123.16.0/20
                          IP: 178.130.64.0/18
                          IP: 185.11.8.0/22
                          IP: 188.209.224.0/19
                          IP: 188.240.96.0/19
                          IP: 213.246.0.0/19
                          IP: 2a02:2718::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:fc:ca:d6:c0:d3:5a:08:54:b2:64:5b:92:90:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:9e:f4:8d:5b:71:4c:c7:a6:44:50:1f:07:
                    bf:46:ec:5c:c5:6c:ae:6d:ea:2e:68:22:2e:6f:83:
                    09:b0:fe:8e:27:6b:ff:a1:e6:eb:ed:23:39:5b:95:
                    13:76:7d:c0:fb:cb:0d:cf:14:4d:8f:24:26:eb:12:
                    e9:2b:31:84:24:da:9b:80:ea:b5:e9:73:3a:db:be:
                    b5:d5:a8:e5:23:1d:98:7c:19:f2:cb:94:1c:cb:21:
                    a9:c4:23:9b:5f:6b:98:b1:2b:3c:c9:ee:a3:e2:0e:
                    43:fe:e9:b3:61:e9:15:2e:3e:b8:5b:1f:ee:c2:f8:
                    87:10:6e:64:2a:b0:fc:f4:6d:cd:17:3c:a2:b8:fd:
                    20:5c:fb:6f:ab:13:0f:8e:32:43:d5:e4:2c:88:54:
                    21:47:d1:3f:fa:97:32:84:c7:86:56:d5:b0:67:d5:
                    a7:f2:b1:7c:7c:c2:e3:c2:5d:ab:85:8a:8b:a7:58:
                    28:53:e1:01:60:e2:5e:a5:f5:ac:c2:ec:fc:4c:10:
                    f5:d6:91:6b:fa:49:a9:67:a3:5e:3d:29:61:cd:c1:
                    41:66:0a:81:4a:c0:ea:23:fb:63:e6:f6:6a:7c:99:
                    59:1d:a6:54:82:5d:ff:0e:83:ba:62:c1:10:70:5e:
                    b4:e1:e8:26:b7:5e:27:84:b0:25:be:9f:47:69:5f:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.100.160.0/21
                  5.255.0.0/19
                  31.31.176.0/20
                  46.35.64.0/19
                  46.161.224.0/19
                  78.137.64.0/19
                  80.253.176.0/20
                  81.91.24.0/21
                  82.114.160.0/19
                  89.189.64.0/19
                  94.26.192.0/19
                  109.74.32.0/20
                  109.200.160.0/19
                  110.238.32.0/19
                  131.117.160.0/21
                  134.35.0.0/16
                  175.110.0.0/18
                  176.123.16.0/20
                  178.130.64.0/18
                  185.11.8.0/22
                  188.209.224.0/19
                  188.240.96.0/19
                  213.246.0.0/19
                IPv6:
                  2a02:2718::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30873

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:e7:86:1a:16:8c:36:2d:d7:90:9a:cd:15:1c:9b:66:5e:
         84:71:35:e8:57:5d:41:96:b9:97:7c:69:e8:e7:aa:20:49:bc:
         1c:24:84:22:6c:64:bf:13:33:1b:dd:73:61:4d:40:38:d8:45:
         d8:49:ac:f7:de:bb:ae:e7:63:23:c1:73:6f:19:b1:2a:d5:4e:
         3f:2e:fe:58:cc:31:df:d3:c8:1c:05:94:02:b1:ea:93:c4:98:
         2f:43:69:f1:4f:c8:ab:9d:a3:8e:80:fb:a2:9f:c6:fe:4b:4c:
         c7:e5:06:d5:f7:12:da:02:01:b8:00:01:48:f4:4d:88:f5:e2:
         05:c9:f9:d2:19:db:cb:fa:d8:11:92:3c:cd:0f:29:23:c3:15:
         3f:32:02:4e:a1:19:a6:51:d3:b3:db:65:43:dd:f3:fa:b6:a2:
         3f:45:13:6f:2e:65:21:47:94:14:bd:cd:fb:09:b1:51:fe:af:
         88:59:9b:5f:41:5c:06:45:58:b7:72:0a:0f:9b:b3:ea:57:23:
         9b:4c:5d:2e:00:5f:5c:b5:7c:74:28:6d:6f:1b:07:4b:c0:dd:
         97:a5:b1:a5:8f:70:9c:2b:d3:fc:fa:29:40:3c:c7:2b:33:d0:
         0b:74:41:8c:62:86:07:7b:d8:82:f0:f7:94:bf:73:0e:9e:75:
         cc:69:bc:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:07 2025 by rpki-client on console.sobornost.net