Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
File:                     QQHhBqnKexSmerQCd4NqGML3EL4.cer (raw, json)
Hash identifier:          +Fqo8dWHfwSSkigVNCyqPxTHrdOPEXPd+qu4WT3oOyk=
Subject key identifier:   41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0192AF5F8BC308C57F01BAA734162CB750CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 21 Oct 2024 13:58:47 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 211166
                          IP: 176.118.160.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:5f:8b:c3:08:c5:7f:01:ba:a7:34:16:2c:b7:50:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 21 13:58:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4101e106a9ca7b14a67ab40277836a18c2f710be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:9f:7f:d1:9a:fc:c3:b0:49:d5:a2:51:76:
                    7e:7e:76:b1:ce:a1:2f:eb:b9:ad:0d:6e:c7:57:4f:
                    9e:ac:90:db:8e:4a:89:23:2a:f6:0b:d0:56:b7:e1:
                    ef:67:11:6f:14:51:2e:58:1f:d3:7d:94:51:14:4f:
                    42:06:cd:0f:e1:5d:d0:a8:af:06:9a:5b:e8:83:1b:
                    2c:3c:b0:c4:4d:60:0e:a2:40:72:21:44:d3:37:ee:
                    e0:38:9b:cb:b2:57:fd:f9:46:a0:9d:6f:5e:b1:04:
                    b3:d6:2f:e2:fb:b6:49:38:3f:02:0f:91:11:42:33:
                    89:14:ab:a2:91:c0:18:c2:37:46:1b:68:cf:2e:8b:
                    4d:3b:5c:c1:b2:66:20:fd:d2:19:2a:dd:89:38:d2:
                    b3:9e:1a:68:96:a0:ab:16:f2:d8:ea:f9:f1:d6:c8:
                    6b:5f:7d:9c:63:08:48:a4:50:9f:64:11:60:23:f2:
                    4f:27:e1:ea:ff:dc:e2:99:bf:a7:51:1d:e5:2c:cf:
                    60:ce:35:04:a7:a5:22:43:3b:29:a2:3a:3d:fb:e9:
                    f8:7a:f9:59:b2:48:d0:c2:64:e1:b5:5b:27:2d:44:
                    32:bc:24:c9:8d:f0:9d:f7:15:e9:00:11:f9:1e:54:
                    bc:42:ed:1f:46:6a:ad:ec:70:d2:13:f2:41:e8:86:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.160.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211166

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:56:99:cd:0b:9c:8d:70:38:6c:26:ce:b7:89:41:a3:ec:
         fb:f2:2a:f2:0a:94:e6:87:15:78:7a:57:d7:e9:05:eb:d0:b8:
         5a:ff:84:91:c8:12:4f:ad:8e:b7:43:c2:4f:d4:6b:b1:c4:a0:
         e6:57:da:df:e6:69:03:09:b6:7e:45:5e:46:94:ee:6f:2d:00:
         c2:e6:34:3f:96:fa:4d:e1:db:05:ed:b5:af:8c:fc:91:93:e4:
         d4:2d:07:9f:f8:29:79:64:f3:03:3f:f3:53:86:ec:33:fc:eb:
         44:bd:43:12:45:59:cb:18:5e:2f:22:55:db:48:a8:9f:a1:47:
         9b:3b:7d:08:14:7e:f5:5b:fa:7f:a2:b3:28:77:5e:03:fd:90:
         11:27:f5:fa:8a:4f:0d:4a:8e:9f:74:19:df:14:a9:38:14:c0:
         7f:e6:f9:83:11:ca:23:d9:63:df:f3:ff:12:e6:29:8f:f5:01:
         bd:8b:ba:df:1b:19:10:1f:3b:f7:a9:0e:8f:7e:bc:13:54:8d:
         e9:35:7b:54:22:82:ba:fe:b5:26:0a:01:79:bd:8c:b3:19:4c:
         84:98:bf:ce:bf:23:5a:c8:e1:48:39:2c:67:c9:12:f7:22:6b:
         c4:31:0d:fe:c6:db:48:1c:5a:b6:ec:32:c0:a9:10:6f:13:53:
         a7:bd:c1:1c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZKvX4vDCMV/AbqnNBYst1DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDIxMTM1ODQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTAxZTEwNmE5Y2E3YjE0YTY3YWI0MDI3NzgzNmExOGMyZjcxMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylOff9Ga/MOwSdWiUXZ+fnaxzqEv
67mtDW7HV0+erJDbjkqJIyr2C9BWt+HvZxFvFFEuWB/TfZRRFE9CBs0P4V3QqK8G
mlvogxssPLDETWAOokByIUTTN+7gOJvLslf9+UagnW9esQSz1i/i+7ZJOD8CD5ER
QjOJFKuikcAYwjdGG2jPLotNO1zBsmYg/dIZKt2JONKznhpolqCrFvLY6vnx1shr
X32cYwhIpFCfZBFgI/JPJ+Hq/9zimb+nUR3lLM9gzjUEp6UiQzspojo9++n4evlZ
skjQwmThtVsnLUQyvCTJjfCd9xXpABH5HlS8Qu0fRmqt7HDSE/JB6IZHWQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFEEB4QapynsUpnq0AneDahjC9xC+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzBmNDE2
OC03ZGViLTQ1NDQtYWM4MS00ODVkODMyYTVmODIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMGY0MTY4
LTdkZWItNDU0NC1hYzgxLTQ4NWQ4MzJhNWY4Mi8xL1FRSGhCcW5LZXhTbWVyUUNk
NE5xR01MM0VMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCsHagMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM43jANBgkqhkiG9w0BAQsFAAOCAQEAJPVWmc0LnI1wOGwmzreJQaPs+/Iq8gqU
5ocVeHpX1+kF69C4Wv+EkcgST62Ot0PCT9RrscSg5lfa3+ZpAwm2fkVeRpTuby0A
wuY0P5b6TeHbBe21r4z8kZPk1C0Hn/gpeWTzAz/zU4bsM/zrRL1DEkVZyxheLyJV
20ion6FHmzt9CBR+9Vv6f6KzKHdeA/2QESf1+opPDUqOn3QZ3xSpOBTAf+b5gxHK
I9lj3/P/EuYpj/UBvYu63xsZEB8796kOj368E1SN6TV7VCKCuv61JgoBeb2MsxlM
hJi/zr8jWsjhSDksZ8kS9yJrxDEN/sbbSBxatuwywKkQbxNTp73BHA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:20:53 2024 by rpki-client on console.sobornost.net