Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
File:                     PxP6dbPOiUzEZAQaipX4WffBxNI.cer (raw, json)
Hash identifier:          qEs7HD4TIdzMROyqj0yq1/iGTkTy21C+Pp2x0d2eQ6Q=
Subject key identifier:   3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01955B096E82B5BA4FCFB608451642BF3EF9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 08:04:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.177.15.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5b:09:6e:82:b5:ba:4f:cf:b6:08:45:16:42:bf:3e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 08:04:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:72:b6:e5:0b:ea:f9:8b:87:e4:40:1a:63:
                    af:db:bb:e8:4f:27:19:54:0d:5e:b7:60:19:69:d0:
                    79:d8:64:b5:44:5f:a5:47:a4:92:a3:33:dc:f6:ff:
                    aa:be:cd:a4:3e:5f:2d:a9:fe:8d:2c:e6:83:c4:19:
                    b5:b4:c6:79:2d:df:82:11:ee:9a:38:3b:bc:f0:e0:
                    18:69:36:55:e6:00:67:0f:48:1f:b9:a2:7e:8b:4d:
                    b0:5c:1d:7d:07:0e:91:d9:30:a9:0f:b5:f7:e9:fe:
                    60:7f:17:84:cf:87:30:a1:d5:a8:e2:df:5f:0b:f1:
                    fa:83:69:7b:6c:75:c2:bb:51:0a:8d:b0:c4:06:b6:
                    ff:80:bc:f3:88:bb:f6:da:85:8d:18:ca:93:74:32:
                    fc:40:3f:9b:0e:1a:fe:9c:ec:e1:7c:5d:f3:dc:de:
                    c1:f8:07:af:85:6f:41:cd:91:c9:df:17:b6:82:b6:
                    ca:e0:00:ac:02:c1:8a:23:cf:43:ca:aa:11:9a:a4:
                    55:4d:6e:67:c9:98:1d:17:61:d6:43:d8:85:e9:4c:
                    3d:76:87:50:d6:08:e6:28:49:10:ee:21:6b:ab:5c:
                    33:fe:a6:cb:30:a4:f5:05:3a:85:3d:0b:4e:82:ff:
                    35:46:e3:22:3a:f3:71:b6:9f:fd:17:fa:1c:35:22:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.177.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:c1:10:f6:5e:6c:82:be:17:5e:b2:bb:af:b7:0a:9c:62:
         2d:c1:f1:bd:db:3b:d7:38:47:6b:5f:5b:ea:f6:f1:cd:1c:2f:
         3b:98:55:a2:5f:a1:00:cf:20:80:72:3c:49:a2:28:7f:7b:0a:
         f2:4f:ae:47:49:c2:ec:03:d2:ee:23:31:45:d2:fe:aa:77:38:
         be:b2:bd:88:b6:40:41:fc:20:00:b0:e9:47:d8:46:a7:48:ac:
         8f:33:79:62:9c:23:3b:25:13:ca:92:78:64:69:99:f1:72:11:
         b7:f0:52:8a:e2:d1:8f:15:a5:b9:77:6e:a5:a2:81:48:fb:e7:
         99:e7:8b:e0:75:b1:47:35:11:96:8d:26:87:64:98:07:de:fb:
         22:a0:57:b7:a0:72:52:a1:6f:6c:6d:e2:6e:0e:7f:c1:8b:ad:
         f5:9a:c8:d5:01:4a:39:1b:ca:1c:a3:42:85:f9:a8:8a:7a:e5:
         23:a1:c4:2f:3a:7e:13:26:14:3d:61:b5:df:cb:ea:4d:b8:f0:
         3a:ae:3d:25:0e:31:15:d3:59:e4:fa:58:e8:21:a2:f3:73:5e:
         ab:7e:bb:70:37:02:54:c0:54:8c:cd:33:04:ba:f8:75:3a:49:
         14:bd:62:6c:82:69:6e:d8:f2:29:08:dd:0f:b9:fe:b3:7f:b6:
         81:48:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:53 2025 by rpki-client on console.sobornost.net