Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.cer (raw, json)
Hash identifier:          hEh0jjtXa6UMLte8xmYlSiAnXCDC5CjWkhQ3E9hPHOA=
Subject key identifier:   26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD667360B7A2ACDF306D916FD4F6CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43088
                          AS: 57030
                          IP: 45.12.36.0/22
                          IP: 46.31.16.0/21
                          IP: 176.62.200.0/21
                          IP: 185.66.0.0/22
                          IP: 185.177.120.0/22
                          IP: 193.200.225.0/24
                          IP: 195.42.150.0/23
                          IP: 2a02:2530::/32
                          IP: 2a02:7f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:66:73:60:b7:a2:ac:df:30:6d:91:6f:d4:f6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:4f:52:42:a3:4f:02:dc:39:25:f7:79:b2:
                    80:0b:4b:28:e1:f4:4c:8c:e0:12:58:7e:04:ea:86:
                    f6:fa:66:60:ba:0a:9a:72:57:84:bf:94:38:45:36:
                    f7:f4:1f:49:da:f5:13:c8:b3:f6:06:04:84:b3:81:
                    53:48:11:67:04:4b:89:88:69:75:1b:9f:0a:b6:f8:
                    5a:c5:3a:ef:b1:2d:5a:3a:75:ce:a3:c5:46:b0:fc:
                    e6:31:30:b0:ea:a8:f4:19:08:1b:da:be:59:12:27:
                    f7:cc:f6:73:c3:1e:c9:a6:4f:08:9e:a8:db:e5:af:
                    dd:9e:21:a0:da:05:3f:e1:ed:98:c6:27:21:43:f5:
                    a3:7d:1f:9f:d6:36:ee:f0:ce:3c:56:5e:50:92:4a:
                    fb:7a:0e:a3:05:9a:33:fb:36:24:34:53:57:67:f6:
                    1f:02:10:22:e3:41:cc:e2:9b:2e:25:8d:47:f4:ee:
                    2e:c0:db:20:5c:78:14:a3:38:83:6e:77:11:fd:6a:
                    7c:6c:c0:17:84:5d:e3:6e:b4:8a:cf:d6:7d:09:fb:
                    94:28:d3:49:6f:7e:f1:6b:71:2e:03:97:fb:ff:ce:
                    ab:bb:ed:b7:11:6f:9a:63:18:8a:0c:1b:f0:01:42:
                    3f:84:76:a4:74:89:e2:00:74:48:18:34:e0:86:9b:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.36.0/22
                  46.31.16.0/21
                  176.62.200.0/21
                  185.66.0.0/22
                  185.177.120.0/22
                  193.200.225.0/24
                  195.42.150.0/23
                IPv6:
                  2a02:2530::/32
                  2a02:7f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43088
                  57030

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:26:f8:a2:9d:df:c6:1a:2e:b4:fa:4c:b2:10:95:ce:8a:
         bb:58:1f:12:b9:18:31:ac:cc:d1:2b:25:28:07:88:5f:13:b8:
         75:f2:1a:a4:35:34:3f:bf:16:11:fc:6a:11:a1:11:62:5d:37:
         85:ff:e3:e9:c1:eb:19:ee:55:14:12:b9:ac:1a:98:73:2c:50:
         1b:b7:6d:cf:bc:8c:0d:30:60:f0:7e:d5:3d:cc:23:38:15:59:
         46:5f:3d:4a:33:fb:a6:00:49:53:7a:23:42:d8:b9:36:27:dd:
         f1:82:c4:51:7b:70:bf:24:98:7a:47:85:d2:ac:9b:d6:44:3f:
         01:de:39:2b:e7:fd:18:fb:0d:89:56:5d:cb:34:b0:f0:b6:4e:
         c3:13:4e:80:74:ed:ac:47:1c:f9:1c:e6:d5:4f:c4:cb:97:9d:
         62:0e:8a:ad:34:c0:21:94:74:fe:61:06:13:ba:ad:5b:04:3a:
         7c:97:09:c0:20:9a:72:76:01:f1:67:15:73:7e:90:9d:04:66:
         39:f6:01:d8:4f:bd:9a:72:a9:85:d2:71:27:ec:0d:17:60:df:
         19:81:66:8e:6f:db:30:88:44:20:90:50:29:f7:00:1d:78:10:
         b3:19:ba:5b:cd:29:8d:7e:72:0d:c7:95:89:19:97:0b:90:20:
         b9:d4:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:17 2025 by rpki-client on console.sobornost.net