Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
File:                     J2zuYEMhsPEryjZ7VMBzmqil8To.cer (raw, json)
Hash identifier:          jcD/7HJCxhpQd15/is0tGG2rXlCZfzUkfm6cbf+OeTw=
Subject key identifier:   27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA635C277464FA3D6BCC25FA25CC61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31332
                          IP: 193.22.165.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:63:5c:27:74:64:fa:3d:6b:cc:25:fa:25:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:4e:fc:f2:c8:d1:d8:95:86:68:88:6e:a7:
                    ea:3f:8a:d7:1d:6c:f1:ac:bf:28:59:cc:8a:4e:80:
                    df:09:57:9f:ea:74:05:4f:3c:51:c8:58:eb:1a:76:
                    78:da:43:75:e6:36:a0:a2:f7:80:04:5a:41:94:b5:
                    1f:7c:23:18:48:ea:7a:da:81:9f:13:70:53:e3:6e:
                    6c:e5:3f:99:e1:7f:2b:6b:a1:67:67:e4:78:eb:7f:
                    c6:7d:5b:9c:02:6c:e0:d0:67:60:f4:b3:99:a8:91:
                    d4:e9:30:bf:8b:df:f1:e4:c4:93:89:04:60:0b:be:
                    e3:a3:ba:68:6a:f6:75:7d:eb:9a:65:60:42:19:e5:
                    4a:0b:06:7d:12:47:2a:9b:3e:b8:a4:21:fa:c6:83:
                    0d:48:bc:bd:20:d6:9d:15:d3:29:1f:c2:45:2e:8d:
                    44:39:7e:5e:33:fe:3b:b1:0f:3c:70:e9:90:67:1c:
                    91:aa:0b:30:aa:54:6d:18:c2:d6:b8:76:40:3d:d3:
                    48:57:f7:62:35:9f:bf:25:eb:b0:69:78:a6:d4:b7:
                    11:ca:4f:20:82:07:b5:f0:d7:34:a0:a2:20:8e:ca:
                    49:86:4c:90:74:02:79:00:f9:23:55:39:de:e1:b9:
                    fd:6f:bf:f6:5e:99:9a:18:f6:61:2c:e7:9e:93:84:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.165.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31332

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:2b:55:1d:9a:e2:ef:89:83:6e:bc:11:7a:53:37:ff:6e:
         4a:6c:8b:5f:0e:6e:de:dc:8e:ab:6b:6d:a6:2a:cb:e1:c1:cf:
         de:e5:ec:a9:9c:af:e5:64:f2:0d:27:b8:fa:98:ed:d4:6d:83:
         d1:8e:c7:35:8a:c7:d0:cc:e9:b9:80:65:54:a2:65:5b:67:f8:
         24:56:2f:9f:b5:c3:3a:f9:34:f3:98:a1:56:aa:bb:62:6a:ce:
         da:75:62:50:65:a5:6c:da:21:37:fa:9a:bf:3d:77:7f:40:08:
         07:48:25:3f:28:f1:a8:86:d5:7f:71:a2:6f:27:ad:68:d7:ef:
         ca:c2:69:7f:e6:2e:cc:d0:13:a4:ff:c6:87:3e:d4:d5:48:4f:
         e2:72:ce:47:c4:51:0b:22:98:48:61:87:c3:bc:d7:46:9f:d6:
         40:72:0b:6a:22:5d:77:f3:12:ff:6f:90:6a:3a:c1:21:c7:64:
         a9:1f:29:b8:5b:a2:67:32:fe:96:3a:42:56:95:a1:65:89:9a:
         94:c8:08:d3:36:d9:39:c4:9b:14:72:31:50:63:45:72:a6:6c:
         f3:56:81:8a:eb:c1:db:4b:c9:f7:98:2a:a9:81:f6:15:cd:ad:
         6c:11:af:88:42:94:ec:f3:d7:8f:c5:28:a9:31:c5:40:2e:82:
         57:bb:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:15 2025 by rpki-client on console.sobornost.net