Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
File:                     FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer (raw, json)
Hash identifier:          G8esFF4vxL5sRWxvH9nc12w2Iw4waWBwS7X4wa5iLtI=
Subject key identifier:   16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F9AEAF5AF97D917A9B4E22B8B411
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215592

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f9:ae:af:5a:f9:7d:91:7a:9b:4e:22:b8:b4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:de:24:a6:1b:92:22:2f:41:c0:55:a2:a1:
                    e7:a5:c0:f9:3c:6b:26:7b:2c:14:84:4a:dc:36:57:
                    05:da:30:90:4e:78:7c:38:23:f1:ec:d8:9e:98:a7:
                    53:ad:e9:e1:4b:dd:51:c4:c2:bb:c0:a1:8d:39:84:
                    3f:77:5e:f5:61:d5:88:03:2d:2f:8f:04:a1:a8:7c:
                    5a:66:53:b4:0c:36:3c:4d:7b:1a:c7:ad:3d:06:1c:
                    c7:53:00:6e:c1:46:54:08:8e:19:a7:18:a8:8e:bd:
                    a6:ff:4e:38:8d:81:ee:03:0c:59:d7:f7:5c:0d:60:
                    c5:40:2a:e0:eb:3e:1d:ef:1b:8c:45:44:c8:99:25:
                    06:e1:c1:4f:bb:e6:18:86:af:0c:ea:ce:fb:e8:9b:
                    3a:b5:24:84:c1:e0:fc:b5:60:85:8c:60:3a:5a:7e:
                    3d:6b:3b:19:f3:80:ae:e0:2d:86:bd:33:75:fd:1a:
                    11:f8:8d:6c:06:4c:5e:23:36:43:fe:d2:25:0d:23:
                    c7:a4:58:46:25:ea:97:ce:55:03:50:e0:83:87:2e:
                    ce:8e:9b:a9:4e:65:15:61:b5:2f:01:05:44:d5:b6:
                    aa:a2:c9:c5:3a:6e:09:53:71:16:41:9c:a1:d8:12:
                    b0:3f:cb:3f:3d:0b:ce:25:56:cd:1e:ec:cf:22:95:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215592

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:a0:25:dc:45:49:8b:f9:c5:81:b5:32:d5:42:4c:7f:b2:
         05:5e:ee:cf:15:d2:b5:e6:9d:b5:21:c2:dd:09:85:22:39:d4:
         37:1b:18:f3:1b:5f:83:ab:b2:1a:f9:95:fa:1c:ea:de:55:c2:
         4f:27:b6:d2:42:73:d8:41:fc:69:8e:85:9e:d0:86:e2:6c:b0:
         bf:0c:42:64:0c:2e:b0:22:ab:a1:cc:e7:d2:ac:a9:73:d9:e4:
         97:a2:23:52:63:b7:62:db:73:fa:1d:2c:fc:ea:ba:b7:6f:34:
         30:fe:64:2a:ab:2c:ba:a2:ce:f6:1f:90:6f:49:2e:f7:05:72:
         2f:33:51:0a:d7:da:dd:db:96:08:e4:26:f7:ee:74:f3:39:a3:
         bb:a1:03:b8:21:c5:48:2e:b1:5e:1f:e9:fd:7f:97:5a:7d:02:
         e0:3f:30:1a:c9:00:f1:6a:ba:ae:18:fb:1b:75:c3:77:d7:ad:
         74:54:2f:aa:21:8b:29:40:08:0a:7e:20:39:d0:fb:bb:c5:fc:
         e7:29:a0:d7:02:d4:8e:21:2e:65:f1:36:80:91:20:e6:64:39:
         9b:53:5f:71:2d:ef:60:9b:ed:35:60:be:e7:d5:d0:fd:7b:33:
         5f:f0:79:64:c2:94:93:af:4f:3e:b3:ed:33:56:99:d7:6e:5f:
         19:8b:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net