Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
File:                     TlqjjuoyTivXq2Qn51lqn6QdsOM.cer (raw, json)
Hash identifier:          GLwxxwv/ydWxaf9Ows/8NvEAcij8obXGFiEMUjhwfT4=
Subject key identifier:   4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521AF025BFFC8142A1ABB3D0ECE7EF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60798
                          IP: 45.14.184.0/22
                          IP: 45.138.200.0/22
                          IP: 185.25.204.0/22
                          IP: 185.229.236.0/22
                          IP: 2a00:82e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:af:02:5b:ff:c8:14:2a:1a:bb:3d:0e:ce:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:2f:66:36:62:5b:a6:b1:14:39:79:b6:4b:
                    a0:5a:8c:5c:f2:b2:d8:27:95:7b:59:9b:e6:d9:a8:
                    06:c9:c0:97:6a:b1:18:af:4d:a9:58:20:95:1f:d2:
                    ac:9e:2d:5a:f3:e1:a0:36:a0:fe:96:34:f8:3a:9c:
                    3d:15:79:e9:16:3c:a3:85:35:97:f6:af:a8:f4:02:
                    ec:87:39:f8:4f:b2:18:d4:91:5c:44:b5:3a:5e:74:
                    87:a4:07:3c:79:24:7b:37:14:4f:60:68:18:87:2e:
                    bb:8f:e8:76:74:12:d7:d1:8d:17:e7:cb:3f:46:4b:
                    cc:9e:7d:59:a7:b2:45:63:c4:5e:83:b8:f0:c8:07:
                    13:a4:80:30:0b:72:21:73:3a:51:a6:8f:ae:62:89:
                    90:bd:e7:72:b1:4a:6d:a1:5b:42:9c:51:4f:91:fa:
                    c0:4e:16:74:73:30:98:e9:38:53:c0:8c:1c:2a:23:
                    e2:3b:33:c6:29:4c:aa:bb:34:0f:4e:97:52:40:e9:
                    30:91:b4:50:e9:89:2a:db:1b:0a:d0:71:98:01:fc:
                    14:5f:7f:d3:29:6d:95:af:da:a8:e2:ca:ab:68:8a:
                    d4:e1:eb:3e:be:7e:e0:ec:d1:ef:e8:91:ad:52:12:
                    a1:5d:2e:ff:4f:1d:0d:cf:f0:88:ef:99:5a:91:7d:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.184.0/22
                  45.138.200.0/22
                  185.25.204.0/22
                  185.229.236.0/22
                IPv6:
                  2a00:82e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60798

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:f9:54:ad:5d:9d:96:82:7e:75:92:00:61:f5:6f:d2:3f:
         cc:88:75:a3:3f:fd:05:14:33:0e:bf:23:f8:25:29:f8:9d:60:
         fc:1b:45:81:da:0f:d8:d1:bd:c4:70:8e:c7:74:9e:de:b7:1d:
         d0:b2:f2:a4:ac:73:c8:24:9a:81:fb:8a:a5:9f:98:33:b5:24:
         d2:5e:be:50:74:fd:ae:ac:15:ec:17:c3:f8:8b:8f:56:8b:e4:
         1d:59:d5:4c:c7:47:c9:79:aa:44:0f:96:34:01:8e:19:06:c6:
         4c:27:b8:80:c4:8a:6c:40:a3:2d:14:c3:00:54:ac:22:f4:87:
         24:1b:c8:64:c0:43:36:b8:63:c9:9b:35:25:f1:c7:51:36:7a:
         46:e5:98:a5:ca:91:8f:26:5a:48:b8:5b:cb:35:a6:8b:f5:5f:
         0c:55:43:80:2b:39:9e:4d:fe:26:82:7f:f2:be:78:0e:46:e8:
         b3:9b:ba:0f:3d:1b:97:f1:eb:10:e4:25:f2:8f:af:d3:49:30:
         6f:12:40:58:98:af:55:1b:1e:46:fb:54:65:a3:48:af:41:30:
         fd:ca:e0:8e:a6:cd:e4:4a:14:61:e5:93:97:fc:c1:00:0c:ec:
         cb:b9:6c:b9:4e:75:6c:6c:f1:bc:bc:e4:5d:5e:4d:aa:2d:f1:
         ea:14:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:02 2025 by rpki-client on console.sobornost.net