Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
File:                     NgAOvu0kK5VkrclUhTI7lr1vXAI.cer (raw, json)
Hash identifier:          zIZHP6JoKAwJbmZcribpRMPbOlM9u/HU32+F3+OLcGI=
Subject key identifier:   36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B385D2474C62CA879810C27930CC85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213338
                          IP: 185.167.183.0/24
                          IP: 2a0b:9c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b3:85:d2:47:4c:62:ca:87:98:10:c2:79:30:cc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=36000ebeed242b9564adc95485323b96bd6f5c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:b6:ba:f5:21:e2:64:a5:57:2e:2e:37:e9:
                    10:b9:63:10:55:63:71:67:01:81:69:8a:fe:d4:04:
                    07:b3:1e:04:4b:ae:e4:77:08:2d:81:1d:48:37:86:
                    f3:03:59:1a:ea:19:59:e8:8e:ce:93:a9:8d:6a:e1:
                    61:a2:22:b6:0a:20:e3:5d:80:44:f1:79:d6:ef:ea:
                    5f:1f:b7:ca:53:14:e4:8a:57:5f:ae:e4:71:ec:8f:
                    14:e1:3c:bf:90:ff:9b:27:74:e2:c5:90:04:9f:91:
                    ab:2c:b2:77:ea:53:60:48:79:b3:ab:ac:87:64:f3:
                    f6:32:0a:e2:dc:7f:c0:dc:6a:43:08:f0:c4:af:45:
                    42:fc:e7:45:30:52:1e:6b:b6:b2:f0:4d:80:23:56:
                    66:d1:91:a6:8a:26:b0:77:ca:42:44:32:66:7c:9d:
                    6e:ad:62:ac:80:9c:dd:21:a3:d3:3e:0a:c1:88:c7:
                    6f:16:17:d2:71:9b:19:09:14:65:cf:71:27:e7:9b:
                    4f:eb:7a:5e:b4:b6:f9:90:bc:98:eb:e6:8c:32:24:
                    ad:06:dc:9f:42:08:5a:5c:15:fe:b6:9a:cd:cb:68:
                    aa:b2:ee:c8:1c:23:d4:b2:f9:49:a7:05:25:d9:13:
                    92:60:2f:7c:72:cb:d9:41:aa:e5:6c:49:23:04:6f:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.183.0/24
                IPv6:
                  2a0b:9c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213338

    Signature Algorithm: sha256WithRSAEncryption
         96:18:cb:9f:2b:0c:85:f9:6d:51:72:ce:ef:78:75:85:f4:d8:
         11:43:04:1e:e3:d5:d8:15:97:03:93:d2:cc:18:91:95:aa:9b:
         d6:e6:27:cb:e2:8c:5f:c2:4d:39:26:56:42:42:8d:29:23:dc:
         4e:44:86:27:a5:e6:cf:86:35:53:58:93:ce:ba:42:22:56:42:
         7b:fd:28:37:6e:14:1b:11:ec:95:3e:9e:55:25:c4:a0:24:34:
         8a:c7:67:f4:c1:3e:88:7f:77:54:d8:87:ed:1d:ee:1e:a7:b1:
         be:77:82:72:cf:b3:61:24:93:00:d1:93:fd:20:69:3a:4a:aa:
         8c:14:bd:9e:49:c5:0a:3f:eb:4b:b0:81:ce:a0:ed:59:45:18:
         50:0c:2f:99:3d:59:4b:d8:14:cc:db:73:75:18:7d:62:f5:f2:
         ab:08:b1:87:c8:35:61:6d:b8:e2:7c:b9:01:b1:1b:93:ae:db:
         35:a9:7e:59:e5:45:ad:ef:7d:9a:ab:84:78:b8:8f:22:51:aa:
         c3:f5:d2:dd:81:3c:9b:f0:0b:26:0e:8a:1a:fe:94:cd:aa:25:
         fa:24:ab:68:50:0a:51:98:2c:75:cc:23:24:c8:df:14:90:9b:
         c6:be:94:59:16:49:f2:c4:4d:0b:83:ea:d0:b4:12:8c:98:74:
         7b:d9:64:4f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQns4XSR0xiyoeYEMJ5MMyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjAwMGViZWVkMjQyYjk1NjRhZGM5NTQ4NTMyM2I5NmJkNmY1YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaO2uvUh4mSlVy4uN+kQuWMQVWNx
ZwGBaYr+1AQHsx4ES67kdwgtgR1IN4bzA1ka6hlZ6I7Ok6mNauFhoiK2CiDjXYBE
8XnW7+pfH7fKUxTkildfruRx7I8U4Ty/kP+bJ3TixZAEn5GrLLJ36lNgSHmzq6yH
ZPP2Mgri3H/A3GpDCPDEr0VC/OdFMFIea7ay8E2AI1Zm0ZGmiiawd8pCRDJmfJ1u
rWKsgJzdIaPTPgrBiMdvFhfScZsZCRRlz3En55tP63petLb5kLyY6+aMMiStBtyf
QghaXBX+tprNy2iqsu7IHCPUsvlJpwUl2ROSYC98csvZQarlbEkjBG+T8QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDYADr7tJCuVZK3JVIUyO5a9b1wCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2I3N2Ux
YS02NjNhLTQ0NWItOGU2MS0zNzAxNTBiNjY5ZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYjc3ZTFh
LTY2M2EtNDQ1Yi04ZTYxLTM3MDE1MGI2NjllNC8xL05nQU92dTBrSzVWa3JjbFVo
VEk3bHIxdlhBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuae3MA0EAgACMAcDBQMqCwnAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBWjANBgkqhkiG9w0BAQsFAAOCAQEAlhjLnysMhflt
UXLO73h1hfTYEUMEHuPV2BWXA5PSzBiRlaqb1uYny+KMX8JNOSZWQkKNKSPcTkSG
J6Xmz4Y1U1iTzrpCIlZCe/0oN24UGxHslT6eVSXEoCQ0isdn9ME+iH93VNiH7R3u
HqexvneCcs+zYSSTANGT/SBpOkqqjBS9nknFCj/rS7CBzqDtWUUYUAwvmT1ZS9gU
zNtzdRh9YvXyqwixh8g1YW244ny5AbEbk67bNal+WeVFre99mquEeLiPIlGqw/XS
3YE8m/ALJg6KGv6Uzaol+iSraFAKUZgsdcwjJMjfFJCbxr6UWRZJ8sRNC4Pq0LQS
jJh0e9lkTw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:49 2025 by rpki-client on console.sobornost.net