Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
File:                     ISvg6nHPQ34I798_55jq-YQTHEY.cer (raw, json)
Hash identifier:          z3mEnWAhzvuA3jMM+EtW6gfYWwum97cLb3tdcu0AAMs=
Subject key identifier:   21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019571166D54F7EFF983E760BB818C5A288F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:50:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8937
                          AS: 9063
                          IP: 31.220.32.0/22
                          IP: 37.230.0.0/19
                          IP: 91.184.160.0/19
                          IP: 93.186.0.0/20
                          IP: 109.75.80.0/20
                          IP: 147.93.216.0/21
                          IP: 176.126.64.0/23
                          IP: 176.126.68.0/23
                          IP: 176.126.71.0 -- 176.126.73.255
                          IP: 176.126.75.0 -- 176.126.76.255
                          IP: 176.126.79.0 -- 176.126.82.255
                          IP: 185.35.109.0 -- 185.35.111.255
                          IP: 185.161.200.0/23
                          IP: 185.166.189.0 -- 185.166.191.255
                          IP: 185.168.8.0/24
                          IP: 185.168.11.0/24
                          IP: 185.186.144.0/23
                          IP: 185.194.151.0/24
                          IP: 185.203.123.0/24
                          IP: 185.222.139.0/24
                          IP: 185.231.252.0/22
                          IP: 194.35.184.0/23
                          IP: 194.35.188.0/23
                          IP: 212.18.192.0/19
                          IP: 212.82.48.0/20
                          IP: 212.88.128.0/19
                          IP: 217.24.224.0/20
                          IP: 2a02:5a0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:71:16:6d:54:f7:ef:f9:83:e7:60:bb:81:8c:5a:28:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  7 14:50:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:1f:88:10:5a:95:ab:52:c1:4a:bd:38:ca:
                    4c:38:40:20:46:6d:8e:0c:63:29:23:dd:eb:65:40:
                    e0:da:23:a0:52:be:d9:b1:75:a7:50:a8:a3:cf:ce:
                    3a:d3:82:51:19:0c:e8:e6:5b:db:1e:bb:92:ea:a2:
                    1e:21:7e:6c:b9:5e:d7:a2:2a:7f:eb:94:ff:56:f7:
                    59:9b:a1:f3:a3:fc:73:30:d3:eb:ef:da:9b:1d:46:
                    2d:ec:5c:9e:f2:6c:65:30:29:9c:cf:c0:5d:3f:4c:
                    8b:71:a4:7c:94:2e:1b:b8:26:46:ed:6e:70:9b:02:
                    f5:70:5f:79:e9:ee:2b:12:0b:4c:2b:05:08:88:8e:
                    97:cd:4c:ae:66:54:11:84:7e:3c:95:bf:cf:a7:15:
                    c7:02:de:be:08:25:18:5d:f8:ab:89:60:2b:82:9e:
                    73:25:8d:fc:c1:f8:44:59:45:3c:24:13:47:8c:6c:
                    c9:99:e2:97:dd:74:0c:08:b1:90:1e:51:a4:2a:9b:
                    65:da:1d:4c:f3:5e:72:2e:05:bf:48:4b:7e:b1:24:
                    14:6b:8d:b2:50:1b:c2:4f:33:d1:9b:78:25:d7:b9:
                    00:f7:8b:1c:aa:4e:8d:bc:1b:0a:b9:70:d1:c5:30:
                    17:e4:dc:6d:d7:53:4d:a7:23:8b:23:f7:c6:c5:f2:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.32.0/22
                  37.230.0.0/19
                  91.184.160.0/19
                  93.186.0.0/20
                  109.75.80.0/20
                  147.93.216.0/21
                  176.126.64.0/23
                  176.126.68.0/23
                  176.126.71.0-176.126.73.255
                  176.126.75.0-176.126.76.255
                  176.126.79.0-176.126.82.255
                  185.35.109.0-185.35.111.255
                  185.161.200.0/23
                  185.166.189.0-185.166.191.255
                  185.168.8.0/24
                  185.168.11.0/24
                  185.186.144.0/23
                  185.194.151.0/24
                  185.203.123.0/24
                  185.222.139.0/24
                  185.231.252.0/22
                  194.35.184.0/23
                  194.35.188.0/23
                  212.18.192.0/19
                  212.82.48.0/20
                  212.88.128.0/19
                  217.24.224.0/20
                IPv6:
                  2a02:5a0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8937
                  9063

    Signature Algorithm: sha256WithRSAEncryption
         53:32:0e:f6:3f:74:b7:29:4f:5c:8e:31:df:12:90:c9:93:ed:
         02:31:dd:d7:2e:ea:f7:05:e0:99:a7:e9:3d:45:ea:36:00:56:
         d9:55:91:81:cf:97:14:eb:4d:f5:12:c0:e0:77:d3:76:ca:af:
         47:4f:00:c0:d2:a7:20:7c:a4:d1:f7:07:5a:07:35:b1:c5:00:
         67:f4:6e:f1:3b:0d:0e:2f:56:f6:19:c5:38:f1:e9:78:89:ce:
         f1:5b:80:a6:b1:ed:4d:a2:cd:06:45:44:8d:8d:db:3f:09:eb:
         c3:be:4d:d3:e9:be:e6:b6:9f:4e:65:e2:61:97:74:63:84:64:
         43:89:35:ca:12:6c:70:11:39:c2:63:15:52:09:a7:2d:a0:a6:
         ab:2a:67:42:38:23:4f:53:1e:8f:e7:a0:74:98:98:ea:17:4a:
         88:7e:55:3d:91:dd:0e:d0:9f:8f:a3:96:f2:55:5c:05:1f:ea:
         ee:fe:75:92:c3:91:45:6f:98:13:22:1c:f4:5d:0d:66:eb:4b:
         01:ef:87:39:81:9c:f0:c0:21:70:c0:2e:2a:b3:10:d8:d8:73:
         75:06:40:d8:a5:cc:a1:14:34:f3:58:d3:7d:75:39:c0:e6:b0:
         58:6e:b2:5a:45:37:84:cb:9c:a6:31:e4:de:95:fb:3f:96:50:
         7d:8c:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:14 2025 by rpki-client on console.sobornost.net