Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
File:                     Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer (raw, json)
Hash identifier:          qsRZ+4/4oulA1hfLI4XPvIEU0S+wzjvMhr16ZasNKuE=
Subject key identifier:   15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252228C9EE58A8646CDF5645B7E8C8A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201522
                          AS: 203618
                          IP: 103.72.184.0/22
                          IP: 185.71.172.0/22
                          IP: 185.92.230.0/23
                          IP: 194.179.132.0/23
                          IP: 194.179.144.0/23
                          IP: 194.179.148.0/23
                          IP: 202.92.212.0/24
                          IP: 2a03:8d60::/32
                          IP: 2a05:33c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:28:c9:ee:58:a8:64:6c:df:56:45:b7:e8:c8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15bd7f78b7a044ae134c88b624e831a761143b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:de:a3:d9:33:4b:1b:23:38:e2:16:1e:81:
                    e3:a3:31:10:17:0c:c6:fa:db:44:6a:be:5f:36:57:
                    ca:0b:c3:99:67:a3:f6:5f:98:17:f8:a0:15:e8:45:
                    a2:dc:4e:9f:29:f7:e7:90:b0:14:1d:2c:3a:ab:67:
                    e9:85:84:e7:31:aa:8b:56:6d:58:93:ef:5c:cc:03:
                    29:bc:c1:e8:41:09:d3:2d:5e:a5:20:e8:e7:c4:b7:
                    84:0a:31:b4:47:50:a3:df:92:c9:d6:dc:42:e4:f9:
                    9f:4a:c1:dd:bc:cd:9a:2a:e4:75:b7:45:ae:ea:20:
                    01:73:07:4b:21:d2:a4:22:b3:07:09:56:e6:18:86:
                    71:a5:fc:3e:25:52:6d:84:29:bf:40:86:06:15:24:
                    48:28:d5:f4:19:20:ac:42:ef:0a:b8:5f:54:b2:2a:
                    66:a1:01:38:47:01:54:f6:54:c1:20:ea:99:74:35:
                    9c:50:25:98:2d:a3:1c:be:7b:18:ec:82:5c:36:26:
                    4c:4d:31:db:d2:fd:0c:04:6f:e3:b6:4a:40:8d:dd:
                    dc:e9:08:4e:f8:7b:92:92:f6:68:78:38:45:93:c3:
                    ed:33:2c:14:a5:90:d5:43:35:7d:9a:47:5b:e5:7d:
                    d0:a8:98:7f:a3:c5:b3:f9:9a:1f:b4:9a:37:ba:a4:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.184.0/22
                  185.71.172.0/22
                  185.92.230.0/23
                  194.179.132.0/23
                  194.179.144.0/23
                  194.179.148.0/23
                  202.92.212.0/24
                IPv6:
                  2a03:8d60::/32
                  2a05:33c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201522
                  203618

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:00:bf:9b:12:2c:19:72:d6:3a:de:07:fe:61:ac:83:ee:
         1f:06:a7:af:34:82:82:3c:24:d7:46:cd:d9:f4:cb:6f:e3:52:
         52:84:5d:73:c7:95:e3:bb:07:76:b8:cb:83:ff:55:67:c2:6d:
         0f:b6:17:65:6d:72:ac:72:fd:3a:ac:b5:9b:35:73:34:7f:c7:
         14:de:9e:bc:f1:53:dd:36:1e:61:22:26:ad:e1:6f:23:e2:b2:
         6a:09:ac:47:ee:c3:0d:f9:23:6c:aa:db:30:15:c9:f3:e4:8c:
         5e:e2:1a:94:b2:43:3f:81:90:a3:dc:ab:b2:18:26:92:da:18:
         87:a4:13:63:c6:b5:5e:08:c6:79:79:a1:1f:3c:92:02:94:d8:
         9c:cf:29:d6:04:4e:67:4f:10:c2:32:2e:f9:23:d2:99:5c:bb:
         81:c0:c8:b5:4b:2b:29:d4:8f:bf:53:10:eb:13:e0:a7:08:10:
         99:b2:d2:13:1e:ae:d1:7a:e0:84:49:d5:78:4a:ae:b0:18:82:
         75:c1:c8:b3:e4:00:4b:6b:d4:2f:19:4f:f3:48:75:fa:67:55:
         2b:fd:1a:75:8e:e4:cd:3f:aa:6b:07:c2:22:4c:27:4d:6c:61:
         9c:6a:97:16:f8:4f:0f:4d:a9:b3:e9:62:a6:37:cd:c3:4c:13:
         01:e2:f2:b1
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAZQlIijJ7lioZGzfVkW36MimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWJkN2Y3OGI3YTA0NGFlMTM0Yzg4YjYyNGU4MzFhNzYxMTQzYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61feo9kzSxsjOOIWHoHjozEQFwzG
+ttEar5fNlfKC8OZZ6P2X5gX+KAV6EWi3E6fKffnkLAUHSw6q2fphYTnMaqLVm1Y
k+9czAMpvMHoQQnTLV6lIOjnxLeECjG0R1Cj35LJ1txC5PmfSsHdvM2aKuR1t0Wu
6iABcwdLIdKkIrMHCVbmGIZxpfw+JVJthCm/QIYGFSRIKNX0GSCsQu8KuF9Usipm
oQE4RwFU9lTBIOqZdDWcUCWYLaMcvnsY7IJcNiZMTTHb0v0MBG/jtkpAjd3c6QhO
+HuSkvZoeDhFk8PtMywUpZDVQzV9mkdb5X3QqJh/o8Wz+ZoftJo3uqRl+wIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFBW9f3i3oESuE0yItiToMadhFDt5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2M2ZWI5
Ny00OGU4LTRlNWItOTdjZC1kNWQ4ZTA0ZTU5NzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYzZlYjk3
LTQ4ZTgtNGU1Yi05N2NkLWQ1ZDhlMDRlNTk3NS8xL0ZiMV9lTGVnUks0VFRJaTJK
T2d4cDJFVU8zay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF
BwEHAQH/BEowSDAwBAIAATAqAwQCZ0i4AwQCuUesAwQBuVzmAwQBwrOEAwQBwrOQ
AwQBwrOUAwQAylzUMBQEAgACMA4DBQAqA41gAwUDKgUzwDAfBggrBgEFBQcBCAEB
/wQQMA6gDDAKAgMDEzICAwMbYjANBgkqhkiG9w0BAQsFAAOCAQEAly4Av5sSLBly
1jreB/5hrIPuHwanrzSCgjwk10bN2fTLb+NSUoRdc8eV47sHdrjLg/9VZ8JtD7YX
ZW1yrHL9Oqy1mzVzNH/HFN6evPFT3TYeYSImreFvI+KyagmsR+7DDfkjbKrbMBXJ
8+SMXuIalLJDP4GQo9yrshgmktoYh6QTY8a1XgjGeXmhHzySApTYnM8p1gROZ08Q
wjIu+SPSmVy7gcDItUsrKdSPv1MQ6xPgpwgQmbLSEx6u0XrghEnVeEqusBiCdcHI
s+QAS2vULxlP80h1+mdVK/0adY7kzT+qawfCIkwnTWxhnGqXFvhPD02ps+lipjfN
w0wTAeLysQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net