Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
File:                     FIa0oIrOYOZw7c2J-tslQBFWL1M.cer (raw, json)
Hash identifier:          50JBBuh0Ohkr4OIVmAXYpmqczeJuyi4EZ95aifrMCBE=
Subject key identifier:   14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445478D9EE5733B1762A83D61C133EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208377
                          IP: 193.242.155.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:47:8d:9e:e5:73:3b:17:62:a8:3d:61:c1:33:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1486b4a08ace60e670edcd89fadb254011562f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6a:6a:40:a6:92:5e:64:55:7f:87:a9:0c:01:
                    22:52:5f:ca:25:59:ff:9e:55:b7:ff:fc:c4:b7:ed:
                    6d:e9:6f:dc:d0:c3:c8:0c:45:12:29:bb:0e:70:86:
                    c9:aa:8f:02:d3:b8:0f:20:71:aa:35:8e:21:7b:60:
                    1e:9a:d8:0f:93:69:ec:eb:d0:b7:5c:27:8a:de:ad:
                    c9:c6:2c:0d:8d:bc:60:0a:78:59:a6:2c:b5:4a:49:
                    58:61:d7:26:c4:14:08:1d:93:9f:b9:7c:f1:b6:e0:
                    17:c1:e6:1d:f1:34:97:0d:f4:cd:87:10:d5:e9:73:
                    e0:69:f9:e8:4a:c3:6f:22:e8:16:1e:9f:c5:49:8f:
                    85:07:5e:86:34:4c:00:84:88:db:9b:d3:94:d1:51:
                    43:7c:67:ef:5f:50:3a:c7:f2:4c:1c:ad:7c:ce:4a:
                    3f:2d:cf:7f:7d:32:67:7a:b9:bc:43:00:bb:25:fb:
                    c0:d5:c0:0f:16:31:0b:ca:cb:d1:90:25:fb:12:99:
                    5e:74:9f:b1:d0:ab:ac:50:fc:83:74:23:0d:f2:1e:
                    89:28:0d:67:63:17:b9:65:88:1e:a7:3f:15:5c:51:
                    18:22:e4:74:01:fc:7f:5f:78:5e:28:8f:3c:5d:6a:
                    8d:e5:5a:4f:d0:5e:9f:1b:a6:8d:6c:7b:dd:23:a1:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.155.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208377

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:8b:df:79:68:71:17:b5:1d:d1:0e:28:c5:dd:d4:6c:1d:
         0c:fd:86:0d:2a:8f:f3:f5:47:6d:60:87:27:80:6c:fd:1e:aa:
         29:e8:f2:f8:91:d9:1e:01:a6:b3:23:16:5a:84:f7:a9:17:3b:
         4b:ec:f0:1c:39:55:31:9c:be:45:47:7c:26:1d:d3:fe:e6:86:
         7d:64:5d:f4:2f:b0:58:a7:a0:5a:b9:11:b1:39:da:bf:22:51:
         45:40:f7:16:64:29:60:0b:4b:19:85:f4:18:5e:13:1d:41:09:
         52:c2:af:7b:4c:ff:ce:15:b2:44:cd:fe:39:9d:4c:0a:5e:47:
         5c:51:63:d7:06:e2:9a:94:fe:24:b7:0c:67:1c:8e:b8:b0:6d:
         68:d8:0c:fa:0d:46:15:cc:9f:17:49:c4:01:17:8c:f9:db:fa:
         62:9a:a8:d8:37:2e:3b:cf:9f:9a:4d:f7:da:90:d3:d8:e3:21:
         9a:7d:10:44:46:19:bf:57:71:07:ea:ca:15:15:3e:dc:e2:9c:
         cf:74:84:8a:cb:b5:b6:ea:b4:b5:cd:6a:93:ff:9d:00:5c:6f:
         a2:8b:29:cd:6d:27:c0:fe:e7:9e:ab:c4:cc:60:33:70:c9:e4:
         df:34:4e:6c:d5:a8:a2:19:33:c9:98:5f:94:73:09:9c:7e:2a:
         54:aa:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net