Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
File:                     TXaD1upTn-8ba22910ox0F5fCiM.cer (raw, json)
Hash identifier:          Ekb2AEkGKLRHFfVNU2iEt57phRbSl5goBHZfJfTerho=
Subject key identifier:   4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C0EB7B2228F0B968F9958B66BD496
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39605
                          AS: 200271
                          AS: 200356
                          IP: 5.42.197.0/24
                          IP: 62.182.100.0/23
                          IP: 78.40.120.0/21
                          IP: 158.58.176.0/21
                          IP: 185.60.92.0/22
                          IP: 185.255.84.0/22
                          IP: 193.84.18.0/24
                          IP: 195.244.30.0/23
                          IP: 2a02:4b8::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:0e:b7:b2:22:8f:0b:96:8f:99:58:b6:6b:d4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:a3:b2:6d:6c:f5:df:7f:28:43:54:18:82:
                    33:1e:3c:9d:8c:91:b8:cc:da:bb:41:c6:74:76:d6:
                    63:9a:5b:25:42:1c:a7:4f:90:fe:fa:6d:8f:81:32:
                    be:e1:dc:5e:32:c6:df:82:30:ad:c6:36:77:ab:75:
                    55:aa:10:ab:1e:97:18:a9:8c:7b:f5:15:a0:66:ea:
                    3b:0e:79:2b:ea:bd:df:0b:28:5a:b4:ad:9e:87:3f:
                    79:62:2c:ca:a2:b0:f9:b8:b0:b9:ae:4b:51:e7:b1:
                    9f:3d:23:ad:a2:9a:6c:54:b0:e0:ee:e5:08:a2:73:
                    d6:af:a8:65:2a:bb:11:b8:81:0b:d7:a8:18:f6:7e:
                    f8:3d:10:c0:79:ce:7e:33:92:8d:7c:81:a5:c6:1f:
                    cb:8a:eb:f6:7c:cc:be:c7:bc:63:72:81:0f:c5:fb:
                    ce:0e:b1:25:f3:0c:13:db:d6:1d:9b:8d:7c:73:77:
                    3b:66:54:50:b3:b8:04:d4:61:3c:b3:ba:82:da:c3:
                    93:ff:00:9b:2d:75:84:d7:f1:f6:9e:92:d7:0a:51:
                    0d:92:fa:4d:1f:b6:dc:4b:15:9c:fc:62:9e:88:41:
                    ea:e4:5d:e7:07:84:c4:db:f3:62:1a:18:98:a9:61:
                    2e:47:52:ce:19:3f:65:1b:41:de:0d:8f:7f:b1:43:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.42.197.0/24
                  62.182.100.0/23
                  78.40.120.0/21
                  158.58.176.0/21
                  185.60.92.0/22
                  185.255.84.0/22
                  193.84.18.0/24
                  195.244.30.0/23
                IPv6:
                  2a02:4b8::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39605
                  200271
                  200356

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:cc:4d:dd:30:7c:7c:ec:e2:76:7b:17:9e:90:bc:79:48:
         c1:e3:c0:33:de:95:68:2f:f3:f3:d6:e5:05:2e:73:97:e5:ef:
         74:5b:27:ed:be:b7:52:7b:ba:2e:ab:59:bf:4f:c3:ce:9e:20:
         7f:6d:93:a2:70:90:ce:28:fe:98:2b:28:56:e7:ed:b8:d9:8c:
         9f:bc:2b:53:ef:19:18:3a:be:3e:55:71:f1:6f:b3:77:09:76:
         2e:1b:35:f4:16:97:04:5b:74:c2:44:9b:a7:9d:64:dd:db:f7:
         10:5b:a7:3e:da:b6:06:f5:de:d8:63:5a:d8:5c:44:95:36:d3:
         bd:6b:7e:39:14:17:94:89:0e:01:c9:52:87:c0:20:5b:64:ff:
         7b:37:3c:dc:85:8b:9d:78:24:0a:de:1b:ca:00:29:f6:da:68:
         f6:3c:8f:9c:ca:cd:7c:96:55:a2:49:6a:12:f2:47:56:e4:e9:
         d1:a3:84:6e:2a:a9:86:7c:f2:5d:88:05:06:ca:dc:d4:fa:d4:
         28:7b:0e:5b:2c:48:db:34:e5:e4:4c:f2:0d:f7:95:7c:33:2a:
         47:6a:4c:8b:d8:12:cc:51:e9:3f:96:65:62:b2:9f:d7:fc:04:
         de:1a:d2:74:e1:be:68:90:66:c8:ce:72:2e:e6:82:d8:66:5a:
         64:98:bd:46
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZQmbA63siKPC5aPmVi2a9SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc2ODNkNmVhNTM5ZmVmMWI2YjZkYmRkNzRhMzFkMDVlNWYwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q6jsm1s9d9/KENUGIIzHjydjJG4
zNq7QcZ0dtZjmlslQhynT5D++m2PgTK+4dxeMsbfgjCtxjZ3q3VVqhCrHpcYqYx7
9RWgZuo7Dnkr6r3fCyhatK2ehz95YizKorD5uLC5rktR57GfPSOtoppsVLDg7uUI
onPWr6hlKrsRuIEL16gY9n74PRDAec5+M5KNfIGlxh/Liuv2fMy+x7xjcoEPxfvO
DrEl8wwT29Ydm418c3c7ZlRQs7gE1GE8s7qC2sOT/wCbLXWE1/H2npLXClENkvpN
H7bcSxWc/GKeiEHq5F3nB4TE2/NiGhiYqWEuR1LOGT9lG0HeDY9/sUOmxwIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFE12g9bqU5/vG2ttvddKMdBeXwojMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U1MTk1
ZC02Njk4LTQ2MDQtOTExNC02OGIzNzY4ZjUwZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTUxOTVk
LTY2OTgtNDYwNC05MTE0LTY4YjM3NjhmNTBkYy8xL1RYYUQxdXBUbi04YmEyMjkx
MG94MEY1ZkNpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQABSrFAwQBPrZkAwQDTih4AwQDnjqwAwQCuTxc
AwQCuf9UAwQAwVQSAwQBw/QeMA0EAgACMAcDBQMqAgS4MCQGCCsGAQUFBwEIAQH/
BBUwE6ARMA8CAwCatQIDAw5PAgMDDqQwDQYJKoZIhvcNAQELBQADggEBAJY6zE3d
MHx87OJ2exeekLx5SMHjwDPelWgv8/PW5QUuc5fl73RbJ+2+t1J7ui6rWb9Pw86e
IH9tk6JwkM4o/pgrKFbn7bjZjJ+8K1PvGRg6vj5VcfFvs3cJdi4bNfQWlwRbdMJE
m6edZN3b9xBbpz7atgb13thjWthcRJU2071rfjkUF5SJDgHJUofAIFtk/3s3PNyF
i514JAreG8oAKfbaaPY8j5zKzXyWVaJJahLyR1bk6dGjhG4qqYZ88l2IBQbK3NT6
1Ch7DlssSNs05eRM8g33lXwzKkdqTIvYEsxR6T+WZWKyn9f8BN4a0nThvmiQZsjO
ci7mgthmWmSYvUY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:02 2025 by rpki-client on console.sobornost.net