Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
File:                     GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer (raw, json)
Hash identifier:          5h+7DWNGDV9zJ8HtbfBtY/6gGPwjwjMGhwVJCcV6ArU=
Subject key identifier:   19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206851C872D14685736D29201378E868
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12812
                          IP: 185.190.28.0/22
                          IP: 193.188.128.0/22
                          IP: 2a02:f700::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:51:c8:72:d1:46:85:73:6d:29:20:13:78:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:cd:34:75:ae:73:04:78:bc:8e:c6:b5:88:
                    a0:09:f7:f3:6b:f3:9c:f4:b6:12:53:a9:c3:62:94:
                    7a:9a:01:cc:94:36:68:d1:56:b6:39:65:c2:7f:cf:
                    41:89:3f:9c:eb:83:0a:24:59:d3:31:47:fe:c5:ef:
                    65:3d:e7:ff:29:d4:4e:2c:ac:18:af:d8:1b:cb:26:
                    1a:6a:4c:31:a0:ab:05:3e:de:1c:1c:e4:44:58:61:
                    b1:e3:4c:f2:37:c3:6c:d5:cb:d6:69:bd:c6:11:fc:
                    21:6f:ec:4d:36:bc:49:85:c4:57:9b:45:ce:29:79:
                    bc:c2:b2:98:e0:cc:15:d7:fa:29:44:f5:2d:e4:22:
                    0a:dc:9b:f6:b9:01:44:7e:a5:ff:e1:02:54:95:bb:
                    21:dd:42:ae:a3:00:5d:cd:06:e6:22:2f:db:e0:11:
                    fd:5e:8e:de:9c:38:b0:0b:0a:d5:49:16:0d:53:a3:
                    7f:b1:06:ba:99:e7:9f:c4:3a:9b:18:fc:7f:e1:95:
                    f8:58:d0:b2:c4:42:73:c2:ab:ac:95:7b:7c:8b:50:
                    3e:14:5b:49:21:14:19:09:57:21:f8:0d:56:1b:50:
                    c4:2b:a6:83:1b:4d:1b:39:8e:3d:4c:81:1d:1b:30:
                    54:e2:65:31:79:ce:ec:31:89:5a:e4:7a:af:bd:03:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.28.0/22
                  193.188.128.0/22
                IPv6:
                  2a02:f700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12812

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:64:c3:52:cc:99:5f:b5:e2:07:49:b5:a6:b0:a5:64:ad:
         c7:74:2b:c8:30:5a:85:6a:c8:78:57:01:b1:74:56:7f:75:ae:
         b9:50:11:84:0f:c3:32:2a:14:35:4b:02:b0:6d:42:12:70:4f:
         04:2e:66:ee:3d:2f:a0:4c:c7:8e:c6:84:79:13:fe:6b:b6:de:
         21:e5:1d:c5:81:34:c3:fa:24:82:4b:b9:8d:69:61:d2:71:e6:
         0b:07:86:04:88:27:4d:18:8c:f5:ec:05:9b:5d:fb:a5:3c:6c:
         5e:8a:cb:e6:da:20:86:ab:9a:fa:00:c1:44:b8:1d:bc:b1:9c:
         4a:0d:e3:18:c6:f2:af:33:ec:39:be:35:6a:09:4d:4a:41:01:
         c5:18:6e:47:49:66:a8:1e:47:39:0d:89:e4:f8:da:b6:6d:d5:
         64:46:5d:39:f6:fb:80:20:45:8a:5d:c3:50:9d:41:8e:90:27:
         1b:19:4f:92:7b:63:0a:7e:eb:a1:fe:9b:10:41:65:52:9d:75:
         e9:9f:4c:87:46:b9:73:68:b0:a3:c1:9e:4f:62:03:e7:4e:82:
         53:eb:ba:09:14:e8:55:72:f5:04:46:f0:5b:61:70:e3:bf:79:
         10:9b:f7:4f:0e:af:d1:37:14:4f:bc:84:53:15:25:d1:50:f2:
         fe:41:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:10 2025 by rpki-client on console.sobornost.net