Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer (raw, json)
Hash identifier:          3B3PZKqVAkCZ6GxD6kVRqw0KvrUPaIe+F5KbsZll73g=
Subject key identifier:   3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A5370580702BA5B676A52ED7ED7B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208684
                          IP: 45.89.112.0/22
                          IP: 91.230.168.0/24
                          IP: 91.230.188.0/24
                          IP: 91.231.47.0/24
                          IP: 91.231.89.0/24
                          IP: 2a0b:2640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:53:70:58:07:02:ba:5b:67:6a:52:ed:7e:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:b4:e8:38:d4:cc:5b:43:f6:7b:91:8a:7e:
                    bb:5b:25:f5:e9:d5:e0:4d:fa:4c:1d:9a:f5:75:4f:
                    03:bc:97:a1:9b:29:43:f7:03:0e:23:60:ce:af:33:
                    a2:ce:b9:8b:c6:6c:da:19:c2:21:e5:8f:a3:61:57:
                    35:0a:75:ef:c9:ff:7c:2c:67:12:97:f0:0c:30:4c:
                    19:c3:14:4b:54:aa:b2:ad:a7:11:02:9b:d7:af:2a:
                    9e:57:83:42:0e:5f:16:fb:6d:9d:5a:34:ea:63:a5:
                    20:24:2e:61:f0:4a:6b:03:58:b2:9a:27:67:43:b4:
                    d4:98:b0:f9:e7:b6:8b:6d:38:e0:1c:3e:02:4c:5d:
                    1a:0d:11:7a:30:09:31:e7:4c:8a:82:cf:ce:26:03:
                    63:77:fe:f2:1d:06:1f:de:e0:93:1f:d4:66:3c:85:
                    f6:9a:2d:e3:8c:22:9b:97:a5:27:c2:bc:d5:42:a1:
                    62:f9:3e:f9:78:51:fc:be:6a:c7:9b:8d:21:28:93:
                    10:1e:88:8f:f9:e5:59:2c:aa:e1:70:a4:99:b3:ca:
                    da:e6:d7:a4:7e:65:28:cc:ec:74:fc:ab:26:1c:3d:
                    dd:ef:ad:3e:e8:84:b8:58:76:29:05:d0:ea:64:36:
                    2c:a6:af:7c:e0:34:ea:10:ae:27:ec:e7:57:50:d9:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.112.0/22
                  91.230.168.0/24
                  91.230.188.0/24
                  91.231.47.0/24
                  91.231.89.0/24
                IPv6:
                  2a0b:2640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208684

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:b5:c3:24:9b:6d:32:d8:21:e1:bb:a8:c1:67:9e:28:29:
         2e:51:21:ec:df:08:cf:b4:a9:98:03:d5:d8:d9:03:e1:68:a3:
         11:72:80:0b:3a:0c:b6:83:17:46:d4:37:a5:34:34:f2:1b:52:
         ff:29:1b:ca:c2:b1:66:cd:ac:20:c6:11:54:8f:b3:1b:66:d0:
         2d:fe:b9:a0:82:f5:f1:5a:dc:94:da:3c:9d:79:29:34:6c:43:
         27:b4:e7:34:c2:88:e8:bf:fc:69:eb:02:ab:96:5b:91:28:67:
         12:cd:1d:1a:6d:52:d6:11:8f:6a:dd:c6:dc:c1:72:c9:e8:db:
         df:08:ab:d0:58:1b:58:8a:25:3d:25:01:e5:82:35:1b:11:b8:
         59:a2:87:35:7c:18:2e:4f:e5:12:a4:bb:1a:fb:da:07:68:09:
         38:1d:59:56:ad:46:a1:8e:a7:a2:94:f0:b6:97:24:bf:aa:c8:
         33:77:60:61:32:7d:ab:29:b2:02:40:4c:f8:33:d4:23:49:ef:
         35:8c:6a:ee:ce:ad:02:97:fa:e3:f2:7a:6c:c1:ce:b9:01:f1:
         1d:a3:7f:f4:1e:d8:77:8c:9a:4f:cc:bb:42:df:c8:28:35:73:
         a4:89:5f:8e:2f:51:01:a2:26:3d:3c:95:32:31:af:ee:2b:97:
         44:f9:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:51 2025 by rpki-client on console.sobornost.net