Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
File:                     RoWpxIcmUu55Z7pfSieCDGcVKNY.cer (raw, json)
Hash identifier:          xMWHG2Fy2VKSVqjS405558pWrB2Hdel1LKvm4BJ/gqk=
Subject key identifier:   46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE879F65E5550C8C3853BA9FD02D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 146.19.202.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e8:79:f6:5e:55:50:c8:c3:85:3b:a9:fd:02:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:79:1b:9c:20:ce:c2:7e:9f:bf:62:4e:67:
                    6c:da:5c:0e:b7:02:9f:6a:fa:ba:b2:3b:8c:04:46:
                    bf:8c:06:ce:e7:ea:0f:8c:92:7f:07:9c:db:b3:de:
                    87:57:84:f5:96:40:5d:44:06:d0:11:37:fe:4b:a9:
                    21:5d:4a:b8:54:87:0f:cb:19:85:44:78:67:3b:43:
                    6e:1e:90:1e:48:d1:f9:e3:ef:8d:e8:81:5d:01:ca:
                    6d:87:29:4a:7f:80:e3:d5:12:a3:6b:38:52:23:13:
                    62:aa:1c:f8:60:88:2f:aa:5c:36:d0:29:02:7a:21:
                    4f:d3:92:be:0d:53:02:60:40:bd:49:ee:d1:3c:28:
                    8a:ed:99:b1:33:d1:16:b3:bd:2a:17:91:5e:26:2f:
                    44:95:6c:3e:a8:69:25:54:0c:f6:3c:e1:45:4d:ae:
                    f3:07:da:b1:67:d0:26:d4:16:f6:4a:cd:8b:fd:6f:
                    cb:1a:94:d2:e5:ac:0e:69:2d:69:f8:68:47:93:a7:
                    0e:5f:9d:a0:15:a8:93:63:95:74:e6:ab:d3:15:30:
                    4a:89:f0:97:d6:6d:03:1a:39:d0:13:9c:25:3e:2d:
                    e4:31:8e:70:10:f5:04:c1:78:3d:45:aa:f2:94:79:
                    a9:09:8d:e3:31:b7:78:32:e1:17:6b:ed:62:bf:6c:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:3f:3b:67:3e:44:1b:fb:cc:da:fb:c7:ba:60:cb:9c:7f:
         94:d6:2d:52:6d:4e:29:ff:a5:7a:26:b6:2e:ac:e2:ee:0d:0d:
         20:d6:4d:97:cc:00:45:8c:84:ee:e3:af:c1:66:65:6b:42:31:
         b0:63:f1:1a:e4:a5:80:57:c2:6e:41:95:32:ef:ca:43:7a:46:
         b6:78:bd:f1:07:6d:0b:9c:56:ea:73:3b:58:a0:f0:4b:8a:67:
         76:4a:67:a5:85:48:4d:c7:da:69:2f:43:37:10:06:c9:a7:17:
         05:2d:e1:f0:24:7c:62:46:5f:7f:b0:de:db:b1:78:08:e6:04:
         53:c7:d0:23:03:3e:68:ef:7b:dd:11:81:68:fd:9b:24:21:14:
         c5:33:c0:39:de:ff:eb:2d:34:fa:35:e9:ad:06:79:92:81:61:
         85:52:94:76:25:c2:f2:f8:61:91:9d:3a:80:27:58:a9:05:c6:
         0e:5a:cb:9f:cb:e4:35:00:4b:a5:f9:da:74:84:d2:68:00:6a:
         eb:cd:9c:1e:48:4d:d4:be:ec:8d:47:ce:4a:e5:37:bf:11:be:
         b5:c7:02:50:e1:b3:63:30:3f:5f:db:db:6b:34:40:20:9e:44:
         33:3e:64:65:4d:ba:ea:30:63:8c:42:84:4b:36:ee:21:d9:d6:
         40:ea:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net