Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
File:                     SqbchPRraQchSFpEBb_JOdolSWk.cer (raw, json)
Hash identifier:          vpTIDyi01eYiaABFo3iNSpWD+wA5+npfzL+vhgoAX0s=
Subject key identifier:   4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B84FC4436E56FFF96EE80883ECB038D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Mar 2025 10:46:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.245.232.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b8:4f:c4:43:6e:56:ff:f9:6e:e8:08:83:ec:b0:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 21 10:46:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4aa6dc84f46b690721485a4405bfc939da254969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:8d:30:bb:45:a5:b1:65:17:d3:5f:46:dd:
                    0d:17:b4:fb:9e:8b:2e:6d:8a:bf:5a:32:3b:77:20:
                    21:22:86:a8:d5:27:e6:fd:84:a6:99:d5:35:34:f9:
                    a6:32:2f:54:46:cf:84:da:ec:e9:b0:bc:75:f3:4b:
                    ab:78:17:50:d7:82:74:76:a7:31:54:1e:f5:f2:f9:
                    3a:dd:da:90:51:fe:21:13:8c:48:ac:d2:54:d2:b2:
                    29:d7:5b:09:ed:53:89:99:3e:9a:2f:cd:42:2d:48:
                    55:31:2c:26:6d:29:c7:94:61:ae:fe:c1:02:35:5a:
                    49:95:bd:a4:e3:79:d4:2d:8e:9d:83:0c:47:36:06:
                    72:35:c4:92:de:7d:b8:0d:19:ab:f4:cc:80:dd:57:
                    54:58:c1:98:45:cc:51:f8:c5:7f:54:7f:de:10:3c:
                    36:c6:87:8c:ed:d3:64:ee:d0:18:cc:32:f0:96:37:
                    48:f8:e5:91:cd:19:f9:c5:96:87:4d:b7:72:3e:24:
                    93:d3:53:62:d1:f6:44:de:47:b3:9f:49:cb:36:d9:
                    3c:f6:bf:e9:bb:70:46:5c:ae:f2:f0:5c:fa:64:c3:
                    44:f8:a7:e1:08:c7:99:ac:f9:05:d4:f6:44:25:cf:
                    97:e5:7c:ad:ec:0a:3b:de:aa:82:0a:d8:3f:81:36:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.245.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:76:1d:7e:72:3e:82:aa:92:6c:59:22:04:15:56:02:a5:89:
         bf:ff:70:26:e5:4f:e5:7c:f7:3b:3c:69:51:fc:d2:58:39:72:
         b9:14:b6:18:35:d7:11:d4:8b:2c:5e:fa:17:ce:6b:94:aa:a7:
         14:a6:d3:ae:4a:b4:ea:a5:14:5c:35:13:e4:56:b7:8b:3d:e4:
         f0:31:ff:c1:c1:58:48:ab:ea:3d:08:99:1c:6a:91:9a:e7:c5:
         84:24:58:01:3e:46:3e:5a:e4:8e:20:c2:4f:6f:fe:7e:a2:02:
         6a:1f:94:02:8c:0f:22:7b:40:0c:98:6d:06:ad:ea:3f:23:f9:
         54:1a:41:3b:c5:14:97:da:4f:f8:d8:4c:5a:8f:cd:6f:66:58:
         6f:83:c6:ce:80:6c:30:b4:6c:2e:f3:26:33:fb:5e:a7:b3:5d:
         1c:57:54:89:82:43:53:11:d5:ca:42:94:b3:bf:73:5d:3f:37:
         d0:a8:f9:ec:d1:fd:02:75:44:1b:44:22:6b:58:17:e3:bb:48:
         3c:ec:2c:3b:1e:11:6d:ca:c6:a5:79:e6:76:7b:64:0d:11:d4:
         f8:43:76:1c:89:bd:b4:a9:82:c9:ae:b7:e7:fe:dc:c9:70:79:
         f1:1b:a1:35:66:d6:41:6a:53:c6:fe:90:c4:ea:5f:bf:83:dd:
         d9:b6:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:00 2025 by rpki-client on console.sobornost.net