Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
File:                     R1oGyte9DD25-KOB8euc1sdaqyg.cer (raw, json)
Hash identifier:          aZTgGw9edFE7YqQ5Ns8aAeXoyn6u7XreKNkkOw8j4ko=
Subject key identifier:   47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194F4C50F9CB0E0E6A356160966A3B7FECB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 11:29:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8270
                          AS: 49412
                          IP: 188.95.176.0/21
                          IP: 193.34.142.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f4:c5:0f:9c:b0:e0:e6:a3:56:16:09:66:a3:b7:fe:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 11 11:29:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:c3:8f:12:8f:4b:bf:6f:26:81:36:00:0d:
                    3e:73:9e:5b:16:4d:c4:a3:94:f6:ce:b8:e5:b1:3d:
                    2e:f6:91:de:fc:f6:fa:2f:a4:ec:18:04:68:57:03:
                    cc:b4:c1:cf:22:f3:53:82:f4:51:01:82:5e:cd:6e:
                    7c:f9:ec:aa:c0:2a:be:42:2f:17:da:42:db:49:39:
                    61:89:78:98:e8:0b:70:39:d7:35:b5:d7:ba:88:8b:
                    1f:f0:ee:dd:a4:8a:4d:94:34:59:4a:e0:2b:13:ce:
                    b8:26:63:05:5a:eb:7c:bf:88:5a:b7:8f:17:42:69:
                    ee:e7:3e:6e:5b:1a:86:e8:da:c0:97:8a:64:1b:a5:
                    be:d5:25:3c:e7:93:17:86:59:08:27:dc:91:ad:40:
                    1a:c0:9c:03:fa:20:e1:f4:33:59:22:c6:72:eb:72:
                    c4:29:b6:e1:ce:59:54:4e:aa:9b:39:ca:4b:d9:04:
                    29:e5:13:34:fe:35:5c:05:50:6b:d6:6c:bc:9b:d4:
                    e3:76:4e:98:99:89:ea:65:b7:13:9e:59:a5:9e:e6:
                    d1:78:d2:d6:b5:c3:46:84:10:d7:f5:7e:d8:5b:fb:
                    b3:1c:1a:30:81:93:c1:9a:37:5d:6d:ee:6c:0f:29:
                    db:34:96:c3:93:47:ce:69:23:94:f6:86:8f:ca:46:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.176.0/21
                  193.34.142.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8270
                  49412

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:8e:33:77:c0:53:a9:58:9f:a1:e0:69:e2:9e:12:d1:5f:
         82:ab:df:70:7d:b3:34:e8:5b:a7:db:81:49:c5:74:07:45:45:
         53:90:5f:54:fa:26:99:20:74:f7:a4:04:cb:04:06:90:1f:31:
         07:5b:3d:2e:4c:05:0c:fc:6c:81:a2:03:db:07:85:90:b7:51:
         33:97:17:11:3a:2a:ac:00:61:b4:f5:5a:2d:57:01:f7:35:88:
         8d:92:01:1a:d5:b3:e0:b0:f1:58:82:0a:a9:0b:ed:63:a6:26:
         39:17:2a:9c:fb:9d:2e:51:0a:3a:92:a0:92:dd:fb:95:61:d2:
         e7:3b:bd:8c:f2:5b:93:7c:02:57:1a:38:29:5b:9e:e2:01:ad:
         a6:96:af:bf:f1:56:06:58:0c:45:1c:a1:e9:5a:ba:d4:81:f8:
         26:d4:c6:64:3c:03:01:19:12:02:2c:af:f7:82:2e:99:c4:33:
         4d:f4:16:b0:9a:4b:34:85:ef:c6:e0:fc:97:fb:1c:ee:74:b9:
         56:02:d0:17:c9:d9:cf:d7:bb:f7:d7:4e:a7:44:b1:04:06:06:
         8f:4e:c4:3b:93:9c:ab:25:ca:d0:37:f1:cd:b8:d3:5a:ce:53:
         e7:00:e8:f8:37:b7:56:0f:d1:f0:b5:d6:a2:f3:62:82:1e:73:
         de:56:d6:fd
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZT0xQ+csODmo1YWCWajt/7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjExMTEyOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzVhMDZjYWQ3YmQwYzNkYjlmOGEzODFmMWViOWNkNmM3NWFhYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK3DjxKPS79vJoE2AA0+c55bFk3E
o5T2zrjlsT0u9pHe/Pb6L6TsGARoVwPMtMHPIvNTgvRRAYJezW58+eyqwCq+Qi8X
2kLbSTlhiXiY6AtwOdc1tde6iIsf8O7dpIpNlDRZSuArE864JmMFWut8v4hat48X
Qmnu5z5uWxqG6NrAl4pkG6W+1SU855MXhlkIJ9yRrUAawJwD+iDh9DNZIsZy63LE
KbbhzllUTqqbOcpL2QQp5RM0/jVcBVBr1my8m9Tjdk6YmYnqZbcTnlmlnubReNLW
tcNGhBDX9X7YW/uzHBowgZPBmjddbe5sDynbNJbDk0fOaSOU9oaPykbkqwIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFEdaBsrXvQw9ufijgfHrnNbHWqsoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2JkZmQ3
MC0zMDY3LTQ3M2QtOGY2NS1iNTUzMjIwMjhiYjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYmRmZDcw
LTMwNjctNDczZC04ZjY1LWI1NTMyMjAyOGJiOC8xL1Ixb0d5dGU5REQyNS1LT0I4
ZXVjMXNkYXF5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDvF+wAwQBwSKOMB4GCCsGAQUFBwEIAQH/BA8w
DaALMAkCAiBOAgMAwQQwDQYJKoZIhvcNAQELBQADggEBAEzbjjN3wFOpWJ+h4Gni
nhLRX4Kr33B9szToW6fbgUnFdAdFRVOQX1T6JpkgdPekBMsEBpAfMQdbPS5MBQz8
bIGiA9sHhZC3UTOXFxE6KqwAYbT1Wi1XAfc1iI2SARrVs+Cw8ViCCqkL7WOmJjkX
Kpz7nS5RCjqSoJLd+5Vh0uc7vYzyW5N8AlcaOClbnuIBraaWr7/xVgZYDEUcoela
utSB+CbUxmQ8AwEZEgIsr/eCLpnEM030FrCaSzSF78bg/Jf7HO50uVYC0BfJ2c/X
u/fXTqdEsQQGBo9OxDuTnKslytA38c2401rOU+cA6Pg3t1YP0fC11qLzYoIec95W
1v0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net