Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
File:                     Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer (raw, json)
Hash identifier:          sek4IgQ7zsbbSKSit079vdKmrSOSjSwF2ZV40dcSBTQ=
Subject key identifier:   4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01960F9F28340FDA056174C63F4DABE4522D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 07 Apr 2025 09:40:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50477
                          IP: 5.149.200.0/21
                          IP: 46.19.112.0/21
                          IP: 109.236.208.0/20
                          IP: 134.19.144.0/20
                          IP: 185.34.244.0/22
                          IP: 2a04:6000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:9f:28:34:0f:da:05:61:74:c6:3f:4d:ab:e4:52:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  7 09:40:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:ad:9d:05:6e:3c:e7:cb:c2:90:23:13:6b:
                    ab:ba:06:eb:45:41:30:da:6c:18:16:8b:78:c1:b4:
                    ff:33:e7:87:fc:ca:fa:cc:92:1b:c2:ee:92:f7:7b:
                    d3:60:cb:54:fc:bd:f7:6e:91:70:a3:96:53:b5:8c:
                    d2:73:d3:90:2e:52:f5:a0:c7:31:75:4e:e1:c3:aa:
                    08:82:5a:bc:89:cc:88:0a:a0:07:e6:dd:e6:d2:1f:
                    91:01:62:3e:94:87:45:e8:93:7c:af:b0:ee:a0:e5:
                    c9:ad:c9:40:42:51:90:5e:4c:f4:47:ab:c1:38:f2:
                    1b:a3:43:43:5a:da:6b:e0:48:f8:4e:53:f6:8b:e7:
                    fe:0e:43:9e:24:de:9e:cd:77:a4:dd:56:19:58:63:
                    62:0d:1b:5e:b3:30:d5:81:8a:4f:f2:20:1f:87:f6:
                    94:b3:08:44:9b:99:ca:48:ed:9e:f9:73:cf:b9:d1:
                    1d:3d:87:73:9f:98:72:1e:93:71:56:6b:f3:2c:af:
                    37:be:fb:2a:ac:db:78:cf:93:7d:78:54:69:17:0d:
                    e9:34:68:3b:b5:d2:54:9b:8c:76:e8:63:52:2c:b8:
                    8a:80:55:60:e5:93:e7:7a:5b:32:bd:60:e9:fd:7d:
                    25:c4:27:a8:66:03:70:b3:e6:0e:03:fd:1c:ee:66:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.200.0/21
                  46.19.112.0/21
                  109.236.208.0/20
                  134.19.144.0/20
                  185.34.244.0/22
                IPv6:
                  2a04:6000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50477

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:44:d5:74:04:c5:bc:ac:26:9a:6d:eb:dc:f6:0e:17:7a:
         3a:2a:15:cf:10:f8:be:bd:29:e8:ae:52:5e:8d:be:34:22:a0:
         64:86:b3:0d:bf:a3:fd:f9:87:8e:69:90:44:e4:e8:fa:72:05:
         42:b1:8d:5f:62:c3:78:30:23:01:7a:03:9a:f6:cd:9c:ef:84:
         82:34:64:2c:ea:19:d1:9a:ba:05:20:b3:9b:76:5e:5b:eb:05:
         f3:e3:26:25:3a:cb:5b:49:64:39:4d:79:b0:b0:1f:c4:1d:b9:
         df:a0:cc:6d:2f:57:7e:84:f3:c9:b3:28:43:9c:5c:39:e7:7e:
         5e:b7:47:e2:f8:0c:21:42:51:bc:19:b9:ca:3d:c3:ee:02:f3:
         72:74:f1:73:04:fc:6b:09:2e:68:6c:6b:a4:2d:87:bd:9d:cf:
         da:ec:62:82:69:13:6c:7f:ac:77:38:cf:58:da:44:f3:b1:50:
         99:14:57:4e:5c:dd:46:91:64:98:f2:e5:f0:a5:62:95:c6:f0:
         98:3f:53:89:f1:e8:b3:1d:31:c9:71:93:02:41:ba:b5:31:7c:
         92:bd:6f:3a:21:61:8c:97:45:8e:86:0b:7c:49:ee:b2:ee:8e:
         2e:68:89:58:d5:c5:25:a7:f8:87:c2:a7:07:0d:50:45:cb:be:
         62:53:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:00 2025 by rpki-client on console.sobornost.net