Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.cer (raw, json)
Hash identifier:          MMbs0ajSemTRKXm5RaNGYVMoejU6qgwizd6FCsq0mAg=
Subject key identifier:   1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427484D28E59FBABB26C926A39008DC6E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47504

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:4d:28:e5:9f:ba:bb:26:c9:26:a3:90:08:dc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:3c:68:0a:69:cb:a2:4a:61:6e:d5:22:9d:
                    4f:14:45:fe:c3:a9:16:6e:07:4e:f3:66:ca:f6:d7:
                    4e:5b:ac:16:1d:68:c9:4f:84:03:2e:1f:8f:88:99:
                    2f:19:af:8a:66:76:0a:9a:3e:20:b1:e7:c5:0c:05:
                    9a:e8:92:a0:03:6c:52:bd:a2:f3:93:f5:59:27:f1:
                    bc:60:b7:c4:32:6f:a4:c3:eb:82:6e:b2:88:8b:48:
                    ee:ec:75:39:83:f3:f5:74:82:1a:ec:87:1b:2e:75:
                    d5:d8:93:99:bb:f5:5e:99:73:af:e5:21:bf:be:20:
                    13:8c:0f:b4:da:b4:71:83:b7:11:0f:78:e4:6c:5a:
                    f1:29:d9:c4:c9:bc:85:6e:8b:ea:c4:54:ed:bb:6c:
                    62:eb:7c:cf:7b:1a:7e:86:30:23:1f:b2:c9:38:86:
                    7e:13:74:e2:07:ec:72:11:54:3e:bf:28:40:6c:f3:
                    76:29:2d:10:30:90:dd:e9:4b:49:29:81:9d:0e:98:
                    fa:f3:f4:7c:b6:30:4d:06:d9:d9:3c:99:1c:f1:b4:
                    77:0b:f4:4c:db:31:9c:99:98:b2:ec:02:9b:d9:f5:
                    83:eb:f8:2c:62:d3:be:b3:8e:df:a8:ec:47:2b:d4:
                    1a:ce:d6:47:f7:e4:8d:de:28:fe:e2:7e:77:fb:47:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47504

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:41:52:fe:9a:01:a3:92:a4:8b:00:f3:a6:b7:c5:77:88:
         9f:48:f8:47:04:41:52:c8:0c:7c:1c:d2:7d:e8:cf:9c:a6:8d:
         45:d5:27:78:de:c6:b7:2b:90:e6:22:85:29:d6:d5:6e:02:1c:
         6b:6e:19:e1:e5:40:39:ae:95:11:11:4c:a1:35:cc:4c:4b:93:
         91:6d:f5:35:7a:7f:ea:e4:e8:fa:1f:a8:38:67:4c:af:e5:4a:
         8b:be:86:a2:62:d8:d0:f5:21:25:42:07:31:7c:5c:fb:8f:1e:
         aa:74:4e:c4:64:6f:4b:48:1c:f8:1a:27:e5:c4:4e:49:e9:68:
         58:7c:66:4d:95:6f:f3:47:0c:ed:16:69:31:0f:55:ae:4a:06:
         33:1b:cf:45:af:6e:c9:4c:f1:39:09:a3:4d:bf:72:f6:fe:16:
         04:e4:7b:35:7e:ab:53:7b:6c:30:a7:6c:41:bd:fc:e9:6d:cf:
         69:98:c9:09:be:82:7a:16:d2:0d:d3:50:07:2b:24:e6:a7:94:
         e9:eb:68:ac:78:0f:f0:52:d1:10:7e:75:57:9d:59:3f:2f:f9:
         a1:17:46:a8:cd:42:34:be:5a:10:49:d5:e1:69:0f:82:23:9b:
         34:6c:f1:61:6f:ac:03:e6:dd:58:17:3c:f6:c4:dd:5d:d8:6a:
         0e:17:5e:19
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQnSE0o5Z+6uybJJqOQCNxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjZmZTAwNzkxN2ViNjMyN2JlMzA2MWE5YWY2ZWM1NDhkMzUzMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA48aAppy6JKYW7VIp1PFEX+w6kW
bgdO82bK9tdOW6wWHWjJT4QDLh+PiJkvGa+KZnYKmj4gsefFDAWa6JKgA2xSvaLz
k/VZJ/G8YLfEMm+kw+uCbrKIi0ju7HU5g/P1dIIa7IcbLnXV2JOZu/VemXOv5SG/
viATjA+02rRxg7cRD3jkbFrxKdnEybyFbovqxFTtu2xi63zPexp+hjAjH7LJOIZ+
E3TiB+xyEVQ+vyhAbPN2KS0QMJDd6UtJKYGdDpj68/R8tjBNBtnZPJkc8bR3C/RM
2zGcmZiy7AKb2fWD6/gsYtO+s47fqOxHK9QaztZH9+SN3ij+4n53+0dCcQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFB9v4AeRfrYye+MGGpr27FSNNTBmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzE1NTVi
OC04NTNkLTQzZDYtODEyNC0wOWIzYjg3MjI2ODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvMTU1NWI4
LTg1M2QtNDNkNi04MTI0LTA5YjNiODcyMjY4OC8xL0gyX2dCNUYtdGpKNzR3WWFt
dmJzVkkwMU1HWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC5kDANBgkqhkiG9w0BAQsFAAOCAQEActBBUv6aAaOS
pIsA86a3xXeIn0j4RwRBUsgMfBzSfejPnKaNRdUneN7GtyuQ5iKFKdbVbgIca24Z
4eVAOa6VERFMoTXMTEuTkW31NXp/6uTo+h+oOGdMr+VKi76GomLY0PUhJUIHMXxc
+48eqnROxGRvS0gc+Bon5cROSeloWHxmTZVv80cM7RZpMQ9VrkoGMxvPRa9uyUzx
OQmjTb9y9v4WBOR7NX6rU3tsMKdsQb386W3PaZjJCb6CehbSDdNQBysk5qeU6eto
rHgP8FLREH51V51ZPy/5oRdGqM1CNL5aEEnV4WkPgiObNGzxYW+sA+bdWBc89sTd
XdhqDhdeGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:11 2025 by rpki-client on console.sobornost.net