Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
File:                     ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer (raw, json)
Hash identifier:          nMB1S4miFPVwBxfZ1txqXq/EXZfX52Ooa68EFDhLdrY=
Subject key identifier:   30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B624072C6CE0770ECD9F9BED745476
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12307
                          AS: 42032
                          AS: 59808
                          AS: 204418
                          IP: 45.14.60.0/22
                          IP: 45.151.212.0/24
                          IP: 185.119.104.0/22
                          IP: 2a06:8a00::/29
                          IP: 2a0e:b580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:24:07:2c:6c:e0:77:0e:cd:9f:9b:ed:74:54:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:7b:16:0a:86:f2:c4:af:42:48:bd:2c:69:
                    6b:5c:fe:87:c5:41:57:1b:53:c3:18:17:06:87:10:
                    56:b4:b8:25:55:c6:6c:79:e0:1f:67:21:5c:92:02:
                    89:73:7d:91:8f:49:0b:7f:5c:b1:12:ef:df:f6:4c:
                    f3:de:8a:cf:1b:01:3e:ff:16:0d:36:0e:5b:20:5f:
                    ba:39:82:f0:9b:18:19:25:2a:12:b5:60:21:36:5f:
                    61:0e:4f:a2:82:93:06:e6:03:11:ea:33:ee:aa:35:
                    36:24:5d:c5:61:ce:b3:b1:42:b8:d1:53:b4:c9:6e:
                    5a:c0:9e:c1:90:7c:29:85:8c:59:6f:e9:0a:0a:2c:
                    4b:a2:77:6c:f4:ff:a7:46:2e:29:c5:75:c7:6a:38:
                    3d:9a:2f:85:ff:53:c1:cd:15:b0:8d:50:2b:3c:92:
                    85:a6:28:79:52:58:34:23:86:51:c6:8e:20:7e:d7:
                    72:98:15:0f:65:7a:6b:f4:74:87:6b:ad:1e:d3:b8:
                    31:a8:cc:ab:90:57:08:b6:98:de:69:7d:b8:04:03:
                    f1:f7:aa:bf:38:4f:54:f7:97:77:b2:35:dd:41:42:
                    ec:bd:2a:2a:5c:09:76:6a:88:3f:31:cc:5f:2d:5e:
                    cc:63:9c:a9:56:80:7e:d6:85:a4:e8:b2:fe:a5:0b:
                    32:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.60.0/22
                  45.151.212.0/24
                  185.119.104.0/22
                IPv6:
                  2a06:8a00::/29
                  2a0e:b580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12307
                  42032
                  59808
                  204418

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:01:d8:14:f3:17:a5:e3:a9:57:7d:42:f7:18:84:39:ba:
         42:94:e4:17:ca:9c:7e:b7:38:1c:5d:38:94:ab:09:8c:d7:87:
         86:fa:1e:83:62:5f:71:c9:8f:5b:b0:f7:3d:21:15:0d:4c:ea:
         d9:b5:19:f3:df:b8:f8:94:42:14:4f:4d:39:b7:ab:c7:d3:5e:
         83:f9:bd:cf:e7:db:22:aa:0f:0a:5b:d8:ec:5c:cc:dc:f7:62:
         7d:db:ba:4d:a5:d4:5d:10:0e:bb:9b:18:89:f3:9f:50:62:45:
         0b:84:27:29:be:66:b7:a8:66:4f:2d:e1:5a:ed:c3:0f:1e:dd:
         7a:b1:99:cf:ce:a1:7c:44:03:6e:b9:a2:dd:26:92:de:d4:2f:
         ae:ed:1c:98:8d:52:3f:08:46:88:f4:93:83:f6:e7:28:f8:34:
         85:1b:12:80:f9:f0:52:42:91:82:e1:28:8b:8e:de:67:a9:bf:
         71:73:ca:2c:3e:d5:81:91:59:88:3b:82:0c:44:b8:af:16:bc:
         cf:f6:10:59:c3:ce:7b:ea:98:1a:76:b8:b4:85:e8:8b:16:96:
         72:f4:2f:c3:f4:5a:ba:5a:63:02:74:b3:90:68:f2:70:bd:15:
         57:3c:2d:fd:25:64:87:4b:94:b6:fc:96:a8:4a:0f:59:12:b2:
         de:cf:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:23 2025 by rpki-client on console.sobornost.net