Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.cer (raw, json)
Hash identifier:          xcMWDOr0mmuwCalM/B1nDezf1tn1CkwyCFaB0Qq07Jw=
Subject key identifier:   20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194F004CAADF2164688D80E1B4984C59E0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 10 Feb 2025 13:20:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35594
                          IP: 83.137.197.0/24
                          IP: 93.177.124.0/24
                          IP: 185.179.80.0/22
                          IP: 195.137.160.0/24
                          IP: 2a0a:7d80::/29
                          IP: 2a10:dc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f0:04:ca:ad:f2:16:46:88:d8:0e:1b:49:84:c5:9e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 10 13:20:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:8a:d2:8c:ce:52:cc:dc:f0:bf:11:fb:1a:
                    a9:f8:9a:96:70:fd:57:7c:d9:17:f8:c6:98:08:dc:
                    ab:a2:14:fa:65:41:f5:80:75:66:68:f1:11:54:08:
                    eb:b0:f9:07:5a:0b:18:2d:ae:b3:3e:b0:92:3b:ba:
                    ac:fe:1c:f1:aa:06:6b:5c:ed:4f:b6:1a:eb:fd:79:
                    32:44:0a:a9:49:2b:1c:03:12:ca:94:23:67:f3:5b:
                    01:8f:49:1c:a6:5a:d6:50:2d:4c:c7:65:54:60:f0:
                    aa:00:fb:b9:19:ad:74:da:01:0d:cf:82:c2:25:a3:
                    5d:5f:5e:a3:ab:c2:5c:6d:c5:bb:13:6b:65:ba:32:
                    fc:95:e1:02:b6:3f:4d:6a:d4:82:48:df:0c:01:71:
                    31:46:69:43:30:02:a8:c0:a5:a5:6f:a4:cf:6f:4c:
                    e8:d8:a1:34:17:99:06:ec:bf:9b:af:8f:76:e7:93:
                    cc:35:30:c5:67:c6:03:a2:22:ec:87:92:20:84:ff:
                    24:b3:0a:86:af:bf:3b:6a:f1:47:ec:1b:e5:43:58:
                    39:7b:56:95:15:73:32:82:43:8f:e6:b5:79:99:7d:
                    c0:93:a9:c8:b6:87:27:f8:aa:fb:7f:48:48:74:54:
                    2e:3a:5f:d8:ae:23:a7:44:50:5a:8a:c3:d4:62:2e:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.197.0/24
                  93.177.124.0/24
                  185.179.80.0/22
                  195.137.160.0/24
                IPv6:
                  2a0a:7d80::/29
                  2a10:dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35594

    Signature Algorithm: sha256WithRSAEncryption
         52:37:ed:8e:bd:9b:58:48:dc:aa:89:d3:19:5f:2b:59:5d:de:
         04:62:fb:5b:fd:b4:a8:e2:e3:56:b0:bb:b8:db:40:4f:5c:45:
         23:19:59:50:40:07:e9:a4:4a:77:9f:73:5f:81:55:9e:e9:d0:
         4c:60:e0:ac:e1:a1:a7:67:a1:c5:97:11:ce:e2:38:c8:31:eb:
         ce:29:0b:78:5d:ec:ed:43:d9:ac:96:d8:0d:3c:59:43:ce:67:
         47:90:ff:a6:89:02:ad:b5:a9:41:37:b1:fb:ad:65:bd:5b:33:
         14:6b:90:66:ee:b0:c4:5b:f8:28:4f:63:24:eb:53:0b:f7:7c:
         78:7c:28:7d:87:b8:ac:88:5d:0a:dc:18:e9:1b:75:eb:0c:89:
         4a:8a:af:d1:08:de:61:df:fe:47:a5:64:dd:3e:0c:6b:24:7e:
         e9:05:e9:e1:35:c7:3e:67:d3:54:70:e7:e1:54:1b:2c:9e:af:
         e3:16:29:91:61:9d:4e:b1:c7:80:ab:fb:db:31:a8:47:54:0b:
         d0:20:a0:99:9f:b9:2f:fa:14:04:91:78:8a:59:9b:a8:26:fa:
         c5:f0:8a:2d:cb:7f:39:ae:82:4b:67:66:ee:30:7c:5f:dc:b4:
         29:d1:27:1f:8c:6f:aa:d2:a5:7e:b8:06:b6:7a:69:06:9c:c1:
         56:c5:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:14 2025 by rpki-client on console.sobornost.net