Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
File:                     LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer (raw, json)
Hash identifier:          DsPNlW/23mqH5+OR9QprhHRfLz9ZexLllWc8TEsBPpU=
Subject key identifier:   2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195C8C4E4A7DD8D46C268697D0F2458908E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 15:28:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50308
                          AS: 61048
                          AS: 62300
                          IP: 103.146.96.0/23
                          IP: 103.147.170.0/23
                          IP: 103.148.140.0/23
                          IP: 103.149.84.0/23
                          IP: 2a14:ac00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:c4:e4:a7:dd:8d:46:c2:68:69:7d:0f:24:58:90:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 15:28:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:c2:d2:eb:ce:18:f4:2f:49:36:cc:d6:e9:
                    2a:f4:4b:13:2b:ca:c1:75:33:c4:67:a7:de:ed:1e:
                    69:3e:41:94:f4:1e:41:ce:c5:4e:1c:f2:a7:b2:40:
                    82:0b:a9:3d:a4:bc:82:78:8a:15:90:c5:dc:5a:48:
                    28:6d:50:34:c5:cd:f6:b0:8f:2b:d6:19:30:9d:ff:
                    97:98:ab:69:00:ef:5d:ff:ab:57:ca:30:a7:0d:c5:
                    7a:6c:fd:da:78:d9:0f:05:05:f3:11:08:68:86:46:
                    af:19:16:a4:fe:3b:2d:13:24:f3:90:2c:40:df:04:
                    fb:bf:74:56:16:f7:c9:33:73:09:ab:4d:13:a5:ac:
                    ca:35:7d:3b:fd:23:f5:73:b0:f7:7f:6a:f4:eb:d4:
                    0f:ce:61:a6:fd:86:1f:f6:4c:b6:60:f7:3b:79:07:
                    cc:b9:a7:7f:4c:24:4c:83:5b:07:49:d3:a2:63:54:
                    f6:7f:8c:0a:21:14:93:0e:e8:23:4a:a8:15:bc:d0:
                    96:fa:fc:a8:a3:1b:8e:72:1f:1a:4c:22:a9:65:2e:
                    23:d9:ad:fc:a1:fd:77:1a:05:57:2e:49:17:f4:2c:
                    36:75:ab:6b:49:94:41:4d:8f:5a:a1:11:84:24:d1:
                    0d:61:ad:de:08:46:76:ff:1e:8a:11:73:f7:5b:f8:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.96.0/23
                  103.147.170.0/23
                  103.148.140.0/23
                  103.149.84.0/23
                IPv6:
                  2a14:ac00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50308
                  61048
                  62300

    Signature Algorithm: sha256WithRSAEncryption
         99:23:01:25:3d:81:64:44:16:3c:f8:1a:4c:94:e3:74:d5:78:
         fc:a2:f3:1f:91:2d:9b:75:99:9e:76:f4:7c:16:71:74:c7:06:
         fa:53:a0:c0:a4:c4:d3:cb:f8:39:71:a1:f7:07:64:a3:35:9a:
         cb:32:e1:53:eb:4f:d3:13:7b:66:bb:22:ed:1c:bd:7c:11:92:
         66:c0:67:86:75:c1:4b:a4:de:7c:3a:34:f1:08:91:6e:32:88:
         4c:a3:66:6c:85:72:12:5c:03:ef:07:56:c3:b4:91:7f:c4:9a:
         85:6c:4f:3a:74:37:fc:d1:c8:2f:bb:84:fb:15:5e:8d:12:3a:
         83:8f:01:ec:03:31:ab:b7:35:fa:cf:e5:be:a3:8c:b3:ea:60:
         ad:69:45:e9:1d:98:b2:1c:6d:1a:e3:bc:b4:dc:0b:d0:c8:4a:
         f8:a7:4d:a6:ab:15:c5:47:a2:24:c0:4a:5f:da:29:39:d8:19:
         1e:0d:44:75:fe:c3:1f:44:73:87:4a:f8:19:1c:38:24:8d:fe:
         d8:89:80:ac:23:b2:39:af:5a:8a:f3:b6:e8:40:2a:15:e3:52:
         8a:f6:b8:93:d2:f6:4f:9b:c8:60:8d:4b:9c:70:4e:c9:b2:90:
         d8:83:d1:fe:ca:34:c7:be:56:ae:f5:08:87:99:9a:e6:20:1d:
         23:31:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:22 2025 by rpki-client on console.sobornost.net