Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
File:                     N6lZHUhfwNCQKom-hBijuxJ1BqU.cer (raw, json)
Hash identifier:          MoyAKIwZ3YqDr81WJbgLC0gkB5PssF12ioEGlT4HoK0=
Subject key identifier:   37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B19563969F66B4D4DE303A8955D14D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.169.105.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:95:63:96:9f:66:b4:d4:de:30:3a:89:55:d1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:e0:6e:90:b8:72:2e:60:92:89:e4:b4:ad:
                    fc:95:4a:db:08:c7:77:cb:7f:ef:d1:18:a6:b4:c7:
                    2f:9f:45:35:7d:4d:63:bd:de:77:cd:ff:dd:f5:40:
                    ef:19:50:78:9b:99:ec:09:14:ef:8b:27:31:13:02:
                    4c:d7:62:44:26:74:51:39:78:53:fd:6d:29:3d:68:
                    ac:db:54:45:2c:2d:9a:de:92:50:7a:aa:11:53:88:
                    c0:9e:0a:3c:a6:51:89:14:72:13:b3:96:49:aa:3b:
                    26:6e:e0:90:86:34:a1:0a:12:4b:8f:4c:36:6d:aa:
                    ff:e2:b4:e5:78:2e:a8:f8:ee:87:43:91:37:b4:25:
                    c9:4d:10:81:c0:e0:da:aa:f3:80:fe:96:5e:ca:ee:
                    56:b6:3d:11:32:e1:71:a5:34:5f:c6:82:bb:29:10:
                    ad:b3:ab:a9:3d:c6:81:75:b1:ce:94:a9:9b:df:36:
                    88:1d:ee:ac:25:61:0f:a3:56:1d:be:3e:3e:01:92:
                    b6:c4:38:22:10:f7:20:5c:fd:bf:9f:eb:53:76:b0:
                    d2:6d:f0:76:59:64:43:d9:00:a1:25:55:39:13:67:
                    99:c7:de:1a:81:e9:95:10:b1:da:59:86:49:59:de:
                    9a:a2:53:57:59:55:4c:38:36:4d:11:e9:47:6a:3f:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:70:6f:05:b5:d1:73:c1:97:f4:80:a8:7b:fd:19:7c:5d:
         87:f7:5e:85:96:0b:a0:8b:7c:c5:d6:ad:0f:cd:1e:5e:52:05:
         60:0f:b0:a1:96:15:93:6e:68:da:df:55:b8:d3:89:2e:d8:18:
         93:01:9b:2f:e1:08:d7:8a:a5:fd:05:7b:53:e8:5c:ee:4b:73:
         3c:8d:ed:3e:71:72:3f:b2:c8:be:23:1b:3c:70:8d:03:a9:55:
         c7:d4:95:a2:b5:3c:b7:11:86:c7:b7:1e:22:4f:95:55:bb:34:
         67:81:17:3a:43:48:dd:d9:1a:e5:97:ff:1e:e4:c7:c4:4c:dc:
         b3:32:93:35:90:37:48:72:12:bf:c1:13:38:99:30:28:5e:92:
         b4:c6:59:c1:50:e1:93:60:23:8f:e1:63:58:0f:b8:aa:51:95:
         62:f8:7e:95:dd:19:42:ad:97:c2:5e:f3:f7:e8:93:95:62:0a:
         ab:7c:15:17:24:e9:ee:4b:9e:d0:95:2e:8f:34:50:42:34:73:
         00:54:c3:33:cb:05:35:4f:a1:c7:b1:4a:1a:a5:4f:cc:1c:e6:
         86:52:16:26:ac:cb:71:69:b1:3b:82:ea:85:0d:49:55:e1:0f:
         26:ab:38:7a:d0:8c:4f:16:18:a1:cf:8a:73:7e:ff:66:d2:3b:
         67:71:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:47 2025 by rpki-client on console.sobornost.net