Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
File:                     S92aEzqSSGoU7cTnYlsk-V04kcw.cer (raw, json)
Hash identifier:          ExUOlymSTIQ7SAqDxoTphrk0RPeypZVWhla5A2GlCgw=
Subject key identifier:   4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01944115FA096D4F2EFCB3BEEA8F1384F540
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 07 Jan 2025 14:05:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197931
                          IP: 45.128.98.0/24
                          IP: 91.216.98.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:41:15:fa:09:6d:4f:2e:fc:b3:be:ea:8f:13:84:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  7 14:05:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:4b:03:ae:f6:f7:a6:7f:97:63:75:6d:24:
                    06:56:01:48:4a:6d:a8:eb:14:59:2b:33:bd:ef:d0:
                    e1:b8:d4:78:c2:37:6a:dc:4c:d6:fd:0a:c0:ba:1b:
                    a7:54:9c:17:1b:aa:9e:2f:56:29:3f:97:78:8c:ae:
                    6a:0c:a5:b6:62:c5:47:4a:38:86:02:a7:c2:f8:2a:
                    40:66:bd:b1:6f:11:65:15:7a:5f:74:6f:d9:99:e3:
                    f1:8f:b8:66:dd:b7:7c:f7:be:c1:77:e8:99:5a:54:
                    b2:9e:fc:43:71:07:b9:6a:80:fe:48:cf:b0:c2:b8:
                    76:51:0d:01:18:7c:9c:da:5e:b2:a0:55:4b:c1:65:
                    02:7e:cb:26:4b:74:0d:59:47:5d:6f:2c:aa:23:3b:
                    15:27:84:e4:d4:14:69:d1:d9:95:d9:68:ae:4c:a6:
                    17:d1:20:0a:57:87:81:ef:da:0b:77:5c:3b:f7:4b:
                    70:43:85:47:fc:8d:a3:a8:e5:c9:94:95:61:17:58:
                    de:52:8a:23:4d:b8:94:39:ad:7c:9e:80:65:2c:92:
                    03:e0:18:15:6c:80:eb:4d:73:f9:b8:1e:3a:ef:ec:
                    01:c6:09:1c:9a:b7:ff:86:65:44:62:62:7f:99:9f:
                    3c:4d:29:4e:c1:34:c7:4c:ef:46:d4:6a:cc:e7:7c:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.98.0/24
                  91.216.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197931

    Signature Algorithm: sha256WithRSAEncryption
         84:81:6e:af:50:dc:da:d4:91:75:f1:9a:8a:00:6b:1c:3e:cb:
         8f:e3:c4:f7:31:f5:67:05:91:08:09:ad:95:24:ea:99:9a:3e:
         f4:04:46:77:77:ef:9a:d7:66:77:15:05:dc:70:f3:cc:a8:a4:
         8c:b1:d3:27:ee:15:9e:d3:f6:ba:8a:f9:37:7c:06:60:26:0f:
         1c:38:7d:6e:92:31:6f:08:dc:5d:69:71:f7:18:bd:9f:20:15:
         c3:56:56:15:69:80:70:29:37:30:dd:45:69:3e:49:49:0d:b1:
         ab:79:8e:b9:a1:77:d2:7c:aa:a8:64:cc:57:b8:c2:6a:3d:1d:
         d9:9b:c6:2f:21:56:22:be:30:b6:f5:f5:1f:ed:ed:c3:5b:8e:
         90:5b:e7:66:f0:26:2a:d5:0f:d1:2d:9d:63:ee:4e:66:92:2f:
         b5:77:f9:9d:43:3b:d4:95:0f:b2:34:36:f6:1e:ef:fe:16:05:
         52:52:b9:62:11:4e:a5:d3:ea:49:79:96:e7:94:8c:46:f2:00:
         82:d9:50:55:9b:bd:e1:ff:82:9f:6c:6f:c1:ac:f2:63:a5:a2:
         de:8d:ef:18:c9:80:cd:7a:ca:18:3e:66:04:f8:72:94:d8:5e:
         02:3a:89:a3:39:d6:14:b6:e3:7e:a7:2e:4c:38:09:fb:23:14:
         53:3b:35:43
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZRBFfoJbU8u/LO+6o8ThPVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTA3MTQwNTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmRkOWExMzNhOTI0ODZhMTRlZGM0ZTc2MjViMjRmOTVkMzg5MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi91LA67296Z/l2N1bSQGVgFISm2o
6xRZKzO979DhuNR4wjdq3EzW/QrAuhunVJwXG6qeL1YpP5d4jK5qDKW2YsVHSjiG
AqfC+CpAZr2xbxFlFXpfdG/ZmePxj7hm3bd8977Bd+iZWlSynvxDcQe5aoD+SM+w
wrh2UQ0BGHyc2l6yoFVLwWUCfssmS3QNWUddbyyqIzsVJ4Tk1BRp0dmV2WiuTKYX
0SAKV4eB79oLd1w790twQ4VH/I2jqOXJlJVhF1jeUoojTbiUOa18noBlLJID4BgV
bIDrTXP5uB467+wBxgkcmrf/hmVEYmJ/mZ88TSlOwTTHTO9G1GrM53z0PQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFEvdmhM6kkhqFO3E52JbJPldOJHMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzcwYTQ5
OS1jODdlLTQ1NDYtODk1MC1iNzA0ZWUyN2M2NWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNzBhNDk5
LWM4N2UtNDU0Ni04OTUwLWI3MDRlZTI3YzY1Yy8xL1M5MmFFenFTU0dvVTdjVG5Z
bHNrLVYwNGtjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQALYBiAwQAW9hiMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMFKzANBgkqhkiG9w0BAQsFAAOCAQEAhIFur1Dc2tSRdfGaigBrHD7L
j+PE9zH1ZwWRCAmtlSTqmZo+9ARGd3fvmtdmdxUF3HDzzKikjLHTJ+4VntP2uor5
N3wGYCYPHDh9bpIxbwjcXWlx9xi9nyAVw1ZWFWmAcCk3MN1FaT5JSQ2xq3mOuaF3
0nyqqGTMV7jCaj0d2ZvGLyFWIr4wtvX1H+3tw1uOkFvnZvAmKtUP0S2dY+5OZpIv
tXf5nUM71JUPsjQ29h7v/hYFUlK5YhFOpdPqSXmW55SMRvIAgtlQVZu94f+Cn2xv
wazyY6Wi3o3vGMmAzXrKGD5mBPhylNheAjqJoznWFLbjfqcuTDgJ+yMUUzs1Qw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net