Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
File:                     U1hROBB5ZcOJ82e1Wr15K1Meuco.cer (raw, json)
Hash identifier:          LGKhiZRX4Fsk+Z7tLjJPvyApRdfFe6iH/b7H4C/Wt8k=
Subject key identifier:   53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1D44265D609133B97BA81F3F7C2AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41369
                          IP: 5.250.160.0/21
                          IP: 77.240.16.0/23
                          IP: 77.240.24.0/21
                          IP: 79.171.224.0/21
                          IP: 80.242.16.0/20
                          IP: 89.250.48.0/20
                          IP: 93.191.120.0/21
                          IP: 94.199.112.0/21
                          IP: 185.87.244.0/22
                          IP: 185.145.172.0/22
                          IP: 195.60.252.0/22
                          IP: 2a00:f5c0::/32
                          IP: 2a01:60c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d4:42:65:d6:09:13:3b:97:ba:81:f3:f7:c2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53585138107965c389f367b55abd792b531eb9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:d8:59:46:5c:bb:8b:f2:0d:a4:ed:3b:c7:
                    74:d9:36:85:47:0f:89:4c:ef:01:3c:e0:80:06:8a:
                    9b:b1:9f:de:db:5e:47:3f:02:3f:55:0b:d6:96:e0:
                    7c:76:c3:61:d6:18:de:f9:d8:b7:14:64:f3:9b:ec:
                    d6:6b:d8:e9:e8:bf:76:a5:48:c8:30:56:95:25:c2:
                    60:f1:53:f1:00:94:1b:79:e3:2d:14:b8:eb:0a:84:
                    3e:51:21:2e:7a:17:92:62:11:95:54:ec:cb:57:8e:
                    e0:88:ae:4e:b5:48:80:9f:75:84:d4:c0:24:a0:3c:
                    61:8f:fb:79:fa:ed:2b:86:f5:c0:9f:30:c4:95:d4:
                    b8:a0:bb:c5:ff:62:3b:fd:34:bc:08:a5:1a:1f:99:
                    a8:32:56:1f:c0:14:b8:29:fa:47:4a:a3:ab:d7:f6:
                    e7:f1:c5:06:43:cc:a7:19:5a:1a:6c:94:1a:63:71:
                    15:23:5e:d3:d2:ad:38:24:9f:24:44:6b:ef:36:7e:
                    13:19:39:75:f3:4e:14:b6:3c:c9:a0:b0:f7:9a:64:
                    90:ed:c7:08:01:60:99:1f:1e:6f:fd:bc:b4:01:bc:
                    22:bd:6f:d9:15:b4:33:92:80:6d:0f:76:a3:b9:3d:
                    32:ed:85:d6:62:e5:e9:86:31:c5:be:87:a4:ff:0b:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.250.160.0/21
                  77.240.16.0/23
                  77.240.24.0/21
                  79.171.224.0/21
                  80.242.16.0/20
                  89.250.48.0/20
                  93.191.120.0/21
                  94.199.112.0/21
                  185.87.244.0/22
                  185.145.172.0/22
                  195.60.252.0/22
                IPv6:
                  2a00:f5c0::/32
                  2a01:60c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41369

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:8b:e8:10:30:3c:ce:22:7b:b3:c2:01:0a:0f:c2:fd:c2:
         11:8e:74:4d:de:f3:de:d4:99:5b:75:cd:dc:12:99:f4:81:c5:
         79:6e:06:b0:4b:8c:e1:0a:9f:e9:22:57:d6:fa:0f:b7:13:1d:
         08:89:dd:2a:fb:9a:70:46:45:0e:03:21:c5:35:f3:14:2a:db:
         85:e5:51:e9:fa:1d:e8:13:76:07:6f:a4:08:1b:0c:7a:2f:4a:
         14:2f:ca:71:80:f5:80:55:1f:c5:93:fa:31:d2:08:d0:e6:08:
         5e:71:f0:aa:e8:24:a5:d7:66:cd:4f:5f:af:93:c4:c6:be:84:
         82:61:3e:34:26:ea:b4:1a:be:91:02:47:af:74:f7:b8:db:ba:
         24:2a:59:00:54:5c:f5:1a:e2:6c:fe:9c:72:05:cd:ca:4a:fb:
         29:64:db:8f:e9:92:fe:24:af:f2:94:ab:a1:87:99:3d:50:72:
         1f:ff:ba:2a:7b:15:9a:8f:5a:57:cf:ba:ff:6a:02:25:d4:99:
         55:66:10:17:81:48:47:34:d2:61:15:64:48:d7:7a:32:db:72:
         46:67:04:c9:b8:a5:57:ff:83:50:95:7a:8b:8f:4d:85:cb:99:
         89:be:10:57:d0:9d:be:78:b3:b8:8b:13:5d:a7:9b:b9:18:9f:
         a8:2a:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:03 2025 by rpki-client on console.sobornost.net