Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
File:                     J0zEEJs00UTL604gpr08B1kYIbU.cer (raw, json)
Hash identifier:          Hs9ZA06oJnC9DE5mbnEJs7CegMhQHndxBAyGJb6RJS0=
Subject key identifier:   27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067D8540EF29647AFC5A89400BF9F17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.246.44.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:d8:54:0e:f2:96:47:af:c5:a8:94:00:bf:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:a7:1b:a9:0f:56:6a:a3:79:18:06:57:10:
                    3a:bb:49:da:49:6e:6e:3e:47:b0:98:3a:f7:be:ea:
                    95:62:ac:3f:8d:aa:18:51:3f:b1:af:37:f7:70:70:
                    f9:37:f4:62:e3:fa:92:73:fe:49:f7:43:e6:3f:4f:
                    47:88:f3:c0:ae:0a:00:d5:a6:5b:b9:ad:f1:70:c7:
                    dc:26:0c:66:c4:b7:41:eb:68:df:d5:60:7e:44:d5:
                    3e:93:50:98:de:c2:11:b0:44:c3:1e:7b:94:1b:1c:
                    30:94:54:10:a3:34:93:fa:74:fa:f5:c5:a9:7c:11:
                    84:e1:b3:4d:30:60:4c:c0:24:19:d9:5b:9a:13:01:
                    f3:f2:41:95:8e:8e:49:42:b7:36:55:37:65:a7:c9:
                    b4:9b:b9:78:57:cd:cf:6f:b4:6f:de:5b:0f:d7:81:
                    90:e5:6c:0c:ea:aa:90:18:5f:29:b2:90:fd:39:d6:
                    a0:3d:e9:fd:cf:95:2a:d4:f4:8d:5e:3c:fb:7b:a6:
                    0a:47:65:b2:94:3d:87:03:89:6f:f5:6e:70:fc:13:
                    1e:4c:0d:e4:e9:2c:b5:46:03:80:78:45:ab:98:6f:
                    ad:af:ab:8b:9a:46:7b:59:f4:58:21:34:35:3f:03:
                    24:e9:28:54:9f:41:c1:78:1d:73:07:b0:e1:f2:65:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:0c:e8:e3:60:5e:cd:0d:6d:df:60:8e:ac:b0:38:f8:61:bf:
         1f:8d:dc:43:85:65:56:cd:db:d3:23:81:08:9e:95:e5:e8:73:
         72:33:6a:8c:97:d4:c9:0e:32:1d:bc:ca:0b:24:5f:06:f2:e4:
         9f:49:23:82:27:07:a9:01:0b:11:23:74:f7:6e:e5:15:f1:3c:
         03:ec:be:d7:b6:19:03:c2:5a:85:07:70:6d:a9:51:ef:b0:58:
         dd:e1:28:ec:60:b4:bb:26:27:bd:9d:59:c7:b4:1f:a1:cb:83:
         ff:39:de:74:fa:00:94:02:13:79:4a:1b:d2:3f:6b:f7:31:75:
         34:23:18:5b:a3:c4:1f:ef:dc:9a:f3:2e:70:59:27:da:ff:f7:
         90:a6:76:71:32:86:9d:e3:7f:55:6f:96:67:c2:f9:37:15:df:
         69:82:ae:cf:8b:98:dc:e7:4f:85:d4:41:86:7e:ae:a4:b1:9d:
         8a:44:c0:f7:56:4c:7a:d0:78:df:a3:ab:ec:a5:26:35:25:e5:
         26:61:97:cb:75:3c:3b:af:f5:05:ee:82:69:29:42:1c:cf:43:
         e4:f6:aa:80:8d:51:33:aa:ad:65:56:bd:36:95:62:b6:0f:11:
         cd:4f:59:09:0e:d5:80:22:d8:2b:e5:3e:da:4c:ca:30:9d:1b:
         41:e5:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:15 2025 by rpki-client on console.sobornost.net