Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
File:                     Fi5IMpyL6O8gnplY2marAkAUXhk.cer (raw, json)
Hash identifier:          KnZWy0xrWsr1sINV4Lwg3K4Ll03N8jaGLLCsWrRsXAE=
Subject key identifier:   16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019465653EFE213FAFC7B8E73F5CDE14825B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 14 Jan 2025 15:18:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57795
                          IP: 23.249.232.0/21
                          IP: 37.114.88.0/21
                          IP: 64.23.96.0/19
                          IP: 64.26.32.0/20
                          IP: 83.174.128.0/20
                          IP: 93.92.24.0/21
                          IP: 149.143.0.0/19
                          IP: 185.6.204.0/22
                          IP: 185.34.176.0/22
                          IP: 185.37.64.0/22
                          IP: 185.43.212.0/22
                          IP: 185.144.20.0/22
                          IP: 185.221.156.0/22
                          IP: 185.254.41.0 -- 185.254.43.255
                          IP: 2a00:9340::/29
                          IP: 2a00:f5e0::/32
                          IP: 2a07:36c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:65:65:3e:fe:21:3f:af:c7:b8:e7:3f:5c:de:14:82:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 14 15:18:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=162e48329c8be8ef209e9958da66ab0240145e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:ed:4b:a2:22:58:c3:9b:f9:a3:01:ad:3d:
                    df:46:25:f8:ec:3d:1a:c0:ea:04:d3:45:8b:d3:61:
                    b9:31:e6:91:c9:96:8e:f4:0e:44:68:29:e6:0b:8f:
                    40:47:ed:82:33:96:88:d5:b3:f9:8c:66:24:05:76:
                    41:d3:ad:3b:95:f3:b9:6d:7b:1c:06:06:20:c7:99:
                    e7:d4:dc:c7:38:53:66:1c:de:cf:c4:7b:e3:c0:a7:
                    60:7e:04:86:33:b5:af:20:77:bc:f8:4a:04:e4:af:
                    7b:af:c3:73:42:d5:eb:bf:80:4f:64:a0:fa:15:2c:
                    47:8e:cd:b2:6d:46:9c:a7:f7:4a:bd:91:57:e3:33:
                    5b:9c:ff:bb:cb:2b:cf:42:cc:86:33:22:85:82:e8:
                    64:da:45:89:97:3a:fe:26:a7:61:b6:6d:5f:3f:97:
                    da:11:19:8b:c7:1a:2f:c8:22:7d:bc:2c:d7:65:e2:
                    2b:e3:66:ff:c5:91:a8:b1:20:21:85:c8:87:98:57:
                    b8:35:22:bf:6a:a8:1a:c5:0a:36:2d:df:57:91:a9:
                    d0:eb:00:fc:5c:70:9f:bb:a9:e7:02:24:f9:f7:06:
                    77:89:7d:9a:e0:04:ea:b4:83:2b:80:34:14:92:1d:
                    7c:25:b3:6c:1c:20:f8:9a:05:06:f7:d1:eb:52:98:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.232.0/21
                  37.114.88.0/21
                  64.23.96.0/19
                  64.26.32.0/20
                  83.174.128.0/20
                  93.92.24.0/21
                  149.143.0.0/19
                  185.6.204.0/22
                  185.34.176.0/22
                  185.37.64.0/22
                  185.43.212.0/22
                  185.144.20.0/22
                  185.221.156.0/22
                  185.254.41.0-185.254.43.255
                IPv6:
                  2a00:9340::/29
                  2a00:f5e0::/32
                  2a07:36c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57795

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:2e:3d:1c:b1:62:5d:64:9b:96:1c:c8:bf:91:bc:a8:04:
         9a:00:bf:cd:1c:50:84:fa:8d:1c:45:e4:12:13:3e:a5:c5:93:
         ad:07:d1:5b:b1:fc:9d:e9:03:b0:64:21:61:c5:79:cd:75:3b:
         85:be:61:6d:1d:d8:15:f2:98:91:16:42:cb:7b:d2:1c:32:a5:
         44:a6:b2:eb:30:e9:83:44:30:e9:ab:1f:71:5b:a1:4f:ce:51:
         95:c2:4a:fa:50:15:2b:1e:71:4e:28:97:25:88:aa:30:47:37:
         15:94:12:d6:05:f0:61:de:e6:e8:a1:32:ad:5c:5e:d3:32:bd:
         8d:ef:e5:10:ed:4c:9c:e9:03:a6:d8:6a:cd:02:3a:d6:86:fd:
         da:9f:ee:c0:14:ce:7d:b2:7e:77:df:60:0e:00:b7:cf:05:64:
         0d:55:7c:dd:be:8f:f8:32:33:10:d3:45:38:99:c4:f1:c7:0d:
         0f:4f:9f:c3:84:55:f3:a3:e0:2e:a5:12:0e:d5:5f:62:f3:17:
         d8:96:93:0f:df:28:a4:bb:00:cd:5a:51:20:7d:c8:57:04:7a:
         14:1a:65:8b:fb:30:f9:72:eb:2d:f8:2f:f3:f3:5c:01:76:f4:
         45:a0:61:4c:2d:7b:87:e1:55:bc:62:e6:99:66:24:3a:c8:9e:
         ae:0c:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:08 2025 by rpki-client on console.sobornost.net