Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer (raw, json)
Hash identifier:          GBPiaFs8Kp0alDuh/T5q7mGLmBMhbsro+N2hnZRfSks=
Subject key identifier:   22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F624F21946F3A4F2A9DF0B19EF491
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58186
                          IP: 91.192.226.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:62:4f:21:94:6f:3a:4f:2a:9d:f0:b1:9e:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2213007596493802fb93a326731fd3329eae2dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:47:fc:ad:d6:05:fb:42:0e:2a:7d:43:16:94:
                    1a:1e:5c:b4:6a:4f:95:a2:7a:19:3b:35:e6:bc:20:
                    dc:7b:7a:d8:a6:e5:61:1d:31:8b:2f:b1:67:e1:62:
                    0a:21:46:dc:4f:c6:ba:b8:fa:c2:80:71:69:99:f7:
                    41:aa:af:8d:57:11:f0:4a:7f:85:ab:c9:20:15:cd:
                    34:70:8b:47:e1:b4:4a:0b:82:22:c2:28:6c:25:e1:
                    e5:02:5b:e1:3f:1c:2b:18:74:01:e6:75:ac:33:67:
                    60:3e:27:d0:58:eb:b7:d2:b4:ea:93:00:70:b0:4e:
                    54:a3:36:b8:60:89:a8:1d:a1:f4:64:2f:c7:c2:f6:
                    fa:db:23:63:d0:0b:67:b0:f7:1f:96:ba:08:a9:d2:
                    f8:96:08:dd:97:df:52:a9:f4:5e:8e:25:74:49:c0:
                    9b:19:6d:6f:db:04:69:d5:63:1f:9e:57:56:87:4d:
                    d7:21:1a:2f:6f:b9:46:54:89:f8:fe:93:a6:dc:3d:
                    15:69:21:be:08:2c:0c:be:63:53:4e:bd:13:e8:96:
                    32:6e:da:42:92:07:17:7e:06:5c:d1:d5:ce:cb:c0:
                    2d:e6:19:15:aa:ed:a9:b7:91:1f:b1:bd:e6:c5:e1:
                    3a:5a:40:c7:18:e3:00:08:dc:63:9f:d1:bf:6c:47:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.226.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58186

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:8c:9d:93:63:98:48:ca:05:aa:f4:03:f5:2c:de:29:b7:
         60:10:8a:b1:42:b8:31:2b:d6:79:33:6b:4b:0b:e0:5d:8e:51:
         55:02:c3:25:46:ef:7b:6c:1c:8d:52:ae:21:af:fb:78:24:8e:
         cb:33:fc:c2:85:43:9f:ed:06:27:eb:b4:52:e0:f9:4e:7d:d5:
         03:28:95:eb:2b:a3:62:25:67:9e:9c:a9:32:d0:2e:9b:a9:4c:
         db:fe:66:95:52:82:5d:ad:df:73:d4:e9:99:fa:d0:7a:58:ee:
         7f:48:0f:f0:f1:f5:24:9c:63:51:87:a5:28:c1:4b:b8:6d:1e:
         b8:6c:0e:17:1c:02:5e:47:04:64:8d:b6:0c:b9:08:09:27:6d:
         41:ed:16:5f:b5:12:4b:d2:d5:e0:74:7d:e3:ae:46:56:93:e7:
         26:70:03:55:f7:63:ed:fa:88:38:a1:5f:56:83:3a:10:5c:d4:
         2d:00:eb:71:bf:5d:b0:98:85:6d:5a:be:d6:d0:fe:49:58:9a:
         fe:75:00:46:f9:81:5a:de:9a:30:c8:6c:7e:f9:ba:34:a9:80:
         12:c2:26:65:98:1a:06:80:30:2c:4a:19:ba:e7:ac:52:3b:1e:
         72:a3:eb:f2:08:3c:8b:4a:c5:ab:16:f4:c4:06:85:16:9d:3a:
         9a:b2:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:14 2025 by rpki-client on console.sobornost.net