Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
File:                     MMQJYT_qCitELOES6cvbSF4BGI8.cer (raw, json)
Hash identifier:          R4OOk/O6wLR2mrugqm2dkyfN8IuxOPRXy5p2k96zcoI=
Subject key identifier:   30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143AFCEA1E15AC4064E811E2FC10B44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 1887
                          AS: 8308
                          AS: 15606
                          AS: 59832
                          AS: 204679
                          AS: 211155
                          AS: 211655
                          AS: 212422
                          IP: 148.81.0.0/16
                          IP: 192.102.225.0/24
                          IP: 192.195.72.0/24
                          IP: 193.59.0.0/16
                          IP: 194.181.0.0/16
                          IP: 195.164.0.0/16
                          IP: 195.187.0.0/16
                          IP: 217.9.160.0/19
                          IP: 2001:7f9::/48
                          IP: 2001:7f9:c::/48
                          IP: 2001:a10::/29
                          IP: 2a00:1488::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:af:ce:a1:e1:5a:c4:06:4e:81:1e:2f:c1:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:4a:cb:0c:e2:c4:a6:5d:17:78:0c:d5:1c:
                    91:07:65:7d:ad:94:33:06:08:20:14:2c:b2:8e:40:
                    97:d4:fb:b0:03:ab:4f:7c:ac:d6:ff:15:ff:f7:32:
                    ac:33:b9:76:04:a1:63:d1:b8:48:73:f9:26:95:7f:
                    6f:b4:68:74:10:33:7d:86:12:1a:bf:50:90:df:be:
                    1a:12:10:d0:63:64:c7:a9:82:27:cd:96:2e:c8:4c:
                    af:9b:11:5e:41:a0:b1:0c:66:d2:0f:c4:1d:d9:48:
                    e8:b8:d2:cd:f9:93:25:8c:b1:cd:b6:89:3e:6c:25:
                    8d:20:53:1a:d3:46:26:a2:06:1b:12:0e:76:43:b0:
                    9a:46:1d:a6:39:d3:c6:0b:13:73:43:91:f5:db:a0:
                    e3:57:0c:4e:56:f0:22:d3:3c:c3:08:d1:2c:a0:dc:
                    45:00:a2:66:de:3e:42:83:cf:a1:c8:64:d5:ab:25:
                    6a:d2:36:79:bb:65:32:36:26:1e:14:c3:65:89:df:
                    9d:75:c9:3a:2e:5e:13:26:8d:ae:17:88:cb:35:45:
                    52:9f:96:9a:07:9d:0a:d3:8e:0e:c2:52:7b:58:0f:
                    9a:33:56:eb:ac:ea:30:c1:b9:37:ca:f5:3e:50:f5:
                    c7:21:88:5f:83:50:60:2e:ab:71:bb:51:80:36:f6:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.0.0/16
                  192.102.225.0/24
                  192.195.72.0/24
                  193.59.0.0/16
                  194.181.0.0/16
                  195.164.0.0/16
                  195.187.0.0/16
                  217.9.160.0/19
                IPv6:
                  2001:7f9::/48
                  2001:7f9:c::/48
                  2001:a10::/29
                  2a00:1488::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1887
                  8308
                  15606
                  59832
                  204679
                  211155
                  211655
                  212422

    Signature Algorithm: sha256WithRSAEncryption
         98:67:10:29:cb:16:14:f9:bd:d5:c9:e4:d9:38:1c:61:24:ce:
         5b:2a:f8:6a:f3:7b:06:8e:16:f9:71:2a:8d:65:6b:24:2e:29:
         79:0a:62:1c:21:3d:af:79:cd:f8:1f:62:2e:df:6a:42:45:c1:
         fc:15:0d:8b:25:4c:08:61:63:c4:eb:cc:ae:46:ad:73:c6:42:
         9b:cc:95:62:25:87:68:26:ad:83:4e:6f:c6:db:46:2b:9f:05:
         30:87:db:db:19:59:8a:8b:e8:af:e1:6b:ef:9b:dc:5f:71:f6:
         11:5b:55:7e:01:9c:93:37:95:90:10:d2:90:a3:62:4f:9d:77:
         4d:da:bf:2e:9c:47:25:1e:95:26:74:ca:ab:80:11:5a:ff:e2:
         c8:e7:63:ca:8a:43:28:13:b5:8d:32:4b:86:1b:5a:d2:28:55:
         ba:4b:e4:d8:0b:7b:94:31:39:7f:ad:07:e1:dc:40:03:f8:e8:
         76:5d:d6:05:a7:c8:f7:68:1e:a3:91:21:ef:44:e7:b5:17:b2:
         a2:17:b1:dd:34:e1:cb:1a:f2:cc:6c:6e:c5:1b:a4:69:b3:bb:
         86:50:8d:1e:2b:94:77:cb:20:4a:6f:18:76:f1:ad:5d:9e:e5:
         29:f7:f5:ed:3a:de:88:a8:30:d1:11:be:a7:d4:44:bd:7f:68:
         e1:f5:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:24 2025 by rpki-client on console.sobornost.net