Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
File:                     RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer (raw, json)
Hash identifier:          JCyUi3MKV7E1ZxB/UqAf162CQtdW9gAkl7TrB9Zf+6g=
Subject key identifier:   46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274826D460A01C48BDD6F387CC62FFBC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213038
                          IP: 31.220.151.0/24
                          IP: 89.36.197.0/24
                          IP: 89.40.170.0/24
                          IP: 89.42.24.0/24
                          IP: 103.95.116.0/22
                          IP: 185.145.252.0/22
                          IP: 2a0e:9980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:26:d4:60:a0:1c:48:bd:d6:f3:87:cc:62:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:e9:df:f7:ce:ef:14:80:b9:f1:6d:d9:73:
                    46:71:d0:3b:dc:01:a4:f3:31:3a:38:75:2a:54:c7:
                    fe:86:62:d3:b7:bd:7f:9d:2c:86:5d:ce:05:47:d3:
                    8e:90:a6:bd:de:4f:52:b0:10:14:70:ae:91:d0:32:
                    32:51:65:7a:6b:e1:ff:7a:3b:ff:8d:63:75:c3:9a:
                    ca:69:65:e6:35:2f:3e:d5:62:ec:be:bd:a9:d3:3d:
                    42:bf:97:1e:57:cb:bc:58:77:c9:fb:18:45:22:62:
                    1f:24:d9:fb:b1:5c:14:c7:c7:b8:92:4a:9e:98:85:
                    2d:5a:82:51:4e:a7:52:cc:15:a7:fe:a3:56:80:52:
                    34:12:ef:af:ad:5e:52:04:cf:68:4a:f6:6c:dc:52:
                    6c:94:ff:a9:a4:16:10:26:40:f4:bd:70:84:17:79:
                    e3:da:b6:00:ef:5a:a7:ff:e9:c2:a4:0b:34:84:48:
                    0f:d8:06:b7:03:18:13:74:5a:2a:2f:ec:10:5c:3f:
                    35:6d:a6:b0:89:79:9b:13:60:28:ef:fb:e9:32:7d:
                    9c:0e:5d:91:f0:06:51:f9:1d:21:f2:d1:43:ea:3b:
                    17:58:7b:8a:f0:2c:07:d5:2d:70:8e:9e:af:4a:c7:
                    bf:ae:fb:5d:8c:a4:0c:9d:18:d9:91:9a:13:4e:58:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.151.0/24
                  89.36.197.0/24
                  89.40.170.0/24
                  89.42.24.0/24
                  103.95.116.0/22
                  185.145.252.0/22
                IPv6:
                  2a0e:9980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213038

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:b0:ae:30:8a:80:60:fd:1a:e2:38:8c:37:e6:86:0b:e2:
         57:d5:1c:99:c1:8c:aa:8b:3c:a0:c1:1c:0e:48:c9:86:87:84:
         c9:a8:45:1c:a4:8c:20:d5:c1:c0:03:61:f3:40:40:4c:59:50:
         19:ad:d9:e3:4a:e4:4e:78:37:14:c7:b2:08:78:bb:ab:e4:d1:
         40:49:8b:37:e8:fc:39:53:4d:e7:65:ee:ad:68:9f:ee:aa:df:
         d4:a9:8c:49:2e:79:ff:a9:44:eb:04:8f:48:b4:34:8d:7f:4a:
         b4:7a:16:b3:b6:a9:e2:28:35:1e:7d:e9:07:30:37:f9:cf:b5:
         e3:f4:6e:ae:04:59:5f:fe:c5:da:e3:39:5d:6d:58:d8:f1:9c:
         d5:55:35:f5:35:c2:d0:61:cf:6f:dd:75:b0:80:c0:0a:20:5f:
         a7:e6:bc:af:0b:74:36:e8:67:72:97:8a:71:63:1a:4a:d4:24:
         47:82:6d:5c:ed:a2:b1:9f:2b:bf:9f:9b:7c:00:f4:00:f9:24:
         8a:b4:fa:e6:15:95:f0:4b:44:64:60:9e:2a:4b:64:83:c7:5f:
         0f:c6:ee:a2:b7:13:d9:f4:d2:82:ed:dc:3e:dc:11:5f:2b:8f:
         8d:35:93:21:33:53:79:a6:43:73:df:9a:6d:c6:f9:2c:3c:37:
         17:ff:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net