Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
File:                     OzdnJSANjYwAzw91FK8l_zYjEPA.cer (raw, json)
Hash identifier:          dsGeRFVBkWh/MaBEokMy7/I22v0FxsfV9FPbjCV8+7c=
Subject key identifier:   3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C7EBC10B217BE4FBF9266F85151BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50091
                          IP: 93.115.6.0/24
                          IP: 93.115.108.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:7e:bc:10:b2:17:be:4f:bf:92:66:f8:51:51:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:4b:e2:f3:bb:87:ef:70:ae:6f:2c:91:48:
                    5f:63:f7:41:df:1d:75:10:44:73:87:02:62:d1:c5:
                    5b:a7:fa:ec:26:4c:e1:cf:30:21:7e:2c:d4:1f:b2:
                    4c:ad:9e:28:d9:85:7e:eb:88:36:e2:7e:58:e6:da:
                    72:55:c9:83:84:30:d6:22:92:bf:c9:0a:c8:81:3c:
                    cf:90:6b:44:97:bc:dd:5b:90:cb:2a:86:f0:7f:5e:
                    c1:b7:43:eb:2d:99:88:b0:e5:56:d5:ef:68:36:8c:
                    0b:34:f4:db:3d:77:7d:5c:60:2f:01:28:64:cc:56:
                    a2:30:56:c8:75:23:df:44:51:d4:c9:30:38:54:53:
                    d3:bb:bd:0d:da:6f:0d:b5:e9:fd:2e:a3:3b:82:f1:
                    6c:40:0d:94:73:a8:5c:18:7c:5a:b0:22:19:e5:22:
                    4b:a8:d3:95:91:f9:f7:02:a1:aa:f0:b7:2c:bd:04:
                    22:8a:e4:bb:f6:92:4b:a8:05:d0:b9:25:36:f1:05:
                    84:3e:1e:d4:ba:41:0f:84:26:24:0c:38:1b:1d:04:
                    04:d7:5e:03:c5:50:29:a0:1d:b7:87:24:7d:0e:b2:
                    ec:2a:51:c3:3d:62:44:5d:dd:a6:8b:59:76:81:89:
                    10:69:2a:6f:68:18:5d:ff:61:3f:2a:14:67:e2:28:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.6.0/24
                  93.115.108.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50091

    Signature Algorithm: sha256WithRSAEncryption
         86:36:68:21:0e:ab:dd:7a:19:27:d0:18:b9:f8:42:03:d5:79:
         43:53:61:e3:bc:8f:72:b8:82:27:42:56:6f:be:c3:dc:6d:76:
         ac:ce:44:03:88:ca:9d:6f:33:7f:97:ee:f0:80:e0:c7:2a:48:
         ff:a9:8c:32:c8:d2:8c:02:74:48:47:90:87:3e:00:74:f1:aa:
         1c:dd:6f:ae:a7:5b:a1:cf:e4:b1:4c:80:c9:61:13:12:09:d9:
         83:4c:99:1a:3f:23:ad:5a:49:4d:ce:7b:c2:a2:fe:63:55:71:
         ad:5c:90:6d:32:8e:cd:a9:98:f6:83:a8:54:f5:70:27:a9:ad:
         2a:df:d6:11:ab:9d:9d:f7:a7:7d:fa:be:4c:44:b6:d7:ff:81:
         b2:b5:4e:23:f6:bd:c5:ac:8e:e6:ba:4f:7b:c0:bd:67:30:1d:
         2d:11:df:00:0b:3d:23:f0:17:d9:dd:79:0b:a7:29:4a:2c:4b:
         da:a0:34:5e:a3:83:a3:77:c3:81:b9:f9:21:0c:63:1f:09:2b:
         95:24:fa:bf:db:87:53:5e:11:ef:5f:b8:e7:c4:a5:7d:4c:43:
         fe:de:93:01:9a:3e:48:ef:7e:9e:c4:93:a9:46:c0:89:5d:0e:
         0d:42:29:90:11:47:1d:7a:2f:d8:e1:85:15:aa:e7:90:f6:d8:
         fe:45:3e:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:51 2025 by rpki-client on console.sobornost.net