Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer (raw, json)
Hash identifier:          pAg4MyuPKO+i4A8B0kV9+p+YVz8d/nuA7uU+wyXhuLI=
Subject key identifier:   1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1EAB43753A76A7DEAB0E7B1CC6486
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39657
                          IP: 81.30.16.0/20
                          IP: 81.93.32.0/20
                          IP: 93.88.32.0/20
                          IP: 185.63.12.0/22
                          IP: 2a03:960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:ea:b4:37:53:a7:6a:7d:ea:b0:e7:b1:cc:64:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:d8:90:38:d2:5f:d1:a8:b2:02:a8:3e:35:
                    6e:c3:12:2a:08:ef:5d:f7:34:62:36:68:57:95:1a:
                    ac:75:7b:55:a2:b1:80:0d:e2:23:d3:8a:17:ba:c7:
                    03:01:53:b3:db:7a:9f:35:b2:0a:3a:2d:ef:55:d8:
                    ed:c2:88:9c:d4:bb:2a:84:c6:27:dc:d5:5a:68:04:
                    eb:c3:c8:e9:cd:52:5b:5f:37:e8:20:0b:95:08:50:
                    c6:b3:82:a9:5c:7d:8e:04:fb:67:ce:f8:7d:6d:4f:
                    79:74:0d:91:e2:a0:a4:46:34:1d:df:2f:f7:22:4a:
                    2a:00:b1:6b:05:bf:61:1b:18:2b:08:c1:27:d1:60:
                    ee:90:60:99:ec:32:d5:22:69:02:1a:86:2e:ef:ff:
                    ec:88:85:5c:1d:32:85:c9:a4:db:07:97:6c:30:d8:
                    b1:69:9b:43:de:08:bf:8c:51:5f:07:db:c9:15:ae:
                    65:7f:28:b4:56:39:b7:f0:40:40:e2:e4:cc:b1:82:
                    65:19:e3:26:f8:7f:a1:d1:d9:3c:12:1f:f3:87:6a:
                    38:44:18:03:b6:b4:c6:c9:00:28:0b:bc:01:0d:60:
                    b9:77:09:27:54:70:e7:b1:2c:bf:9e:5f:d4:53:88:
                    d7:ed:65:4b:43:cf:aa:8f:79:6a:3c:ff:47:fb:b0:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.16.0/20
                  81.93.32.0/20
                  93.88.32.0/20
                  185.63.12.0/22
                IPv6:
                  2a03:960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39657

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:aa:f8:62:fa:5c:4d:06:4c:4d:c5:6a:f1:5d:83:3a:b8:
         e1:ec:5c:01:d0:50:ed:6a:dc:ec:85:2e:8c:6a:ab:fe:c8:b4:
         3b:d6:e6:0e:bc:d6:ab:7f:bb:2f:b6:e0:24:01:a9:9f:17:7e:
         aa:67:a8:f7:93:88:eb:27:f2:13:15:82:a3:23:5a:67:8c:27:
         ae:aa:6c:81:3f:af:bd:d2:26:2b:15:1f:27:2d:f1:fc:a5:2f:
         93:ad:18:67:d2:da:17:51:6f:f8:2d:4c:68:c6:ef:5b:be:b6:
         26:bc:d2:b6:14:26:54:ac:00:dc:72:92:35:bc:de:a1:2c:82:
         c0:c0:c5:1b:91:33:a0:a4:0b:41:80:8e:a0:62:c9:33:ce:8c:
         93:16:e8:eb:b8:e7:17:c8:d1:3a:3e:6d:76:4e:33:ab:57:5e:
         5e:09:4a:1d:fa:db:7d:60:88:7b:08:77:88:1c:b0:31:60:9e:
         07:51:31:7f:aa:f0:f7:96:89:71:0f:98:69:2e:8e:78:94:7b:
         6b:37:73:77:07:1c:65:9e:97:93:0b:67:9f:8d:a0:8b:dc:b4:
         30:a7:53:6d:56:9e:cb:bb:1f:8d:58:7d:a6:ab:fb:4b:e4:df:
         70:a2:30:c8:02:a3:5e:83:d3:10:6e:68:e4:e4:a1:b5:9a:86:
         05:f2:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:11 2025 by rpki-client on console.sobornost.net