Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
File:                     UaLCwG3bhGaaiamfuHVglRNMh2Y.cer (raw, json)
Hash identifier:          GObbvxVm0ODvAiRLZgek5wZyIYJ23nDml0Wz099sKEA=
Subject key identifier:   51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194B6C6E55AEFA8CB9C5E30C4A00DC7AC2C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 10:34:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51330
                          IP: 93.95.30.0/24
                          IP: 185.192.181.0/24
                          IP: 185.247.127.0/24
                          IP: 2a12:b5c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b6:c6:e5:5a:ef:a8:cb:9c:5e:30:c4:a0:0d:c7:ac:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 30 10:34:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:f7:25:af:f6:47:21:ee:63:78:79:b9:07:
                    d0:21:0a:83:03:91:dc:60:54:10:33:2a:7b:b8:52:
                    e4:b6:18:50:b6:47:08:c0:d6:6b:b7:5c:3e:37:a0:
                    08:37:d6:88:93:11:fe:3d:a0:3b:cb:4a:4f:b5:2a:
                    88:32:c4:f4:5d:52:a7:b6:16:c9:d5:67:92:3f:8b:
                    17:cf:ee:b4:64:c1:b3:7f:6b:43:95:e5:63:13:80:
                    a0:b2:a2:55:af:2d:4d:8c:a9:26:73:48:06:4f:40:
                    68:d1:15:5d:c1:d1:f4:b5:5e:67:2d:1f:e6:df:75:
                    d8:7c:27:80:25:a6:e1:6d:9e:3f:3b:b1:31:19:ba:
                    8d:2f:3f:63:0c:84:b1:2d:be:87:a1:97:6e:e8:4f:
                    ae:be:8b:a2:31:a6:14:3c:d6:ff:a3:1d:34:45:0f:
                    59:66:8a:ec:a3:fb:6c:78:c2:f5:a1:37:df:49:96:
                    5b:a3:8b:7e:ee:e5:1d:5e:23:4a:be:3b:09:15:dd:
                    8f:3c:bf:57:a6:66:33:91:75:6e:26:24:91:ac:61:
                    25:68:db:3d:e6:6a:e8:1d:88:a0:a6:53:e4:03:5e:
                    cc:de:ea:b6:60:e2:f2:1d:b4:bf:8f:92:f0:ba:77:
                    93:c7:e7:7c:a6:c4:7e:74:55:06:dc:c6:8e:22:f0:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.30.0/24
                  185.192.181.0/24
                  185.247.127.0/24
                IPv6:
                  2a12:b5c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51330

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:aa:06:35:4f:e9:0a:56:8a:44:3d:61:8a:30:5c:47:fd:
         98:90:df:5d:fc:63:de:7b:a5:2b:fe:c6:ba:cc:d7:25:4a:0f:
         6e:22:fa:05:cc:fc:4d:82:12:97:ad:38:0a:79:5e:89:c1:dd:
         11:3c:f9:30:dc:47:f3:67:21:a8:93:84:c2:e0:ec:11:cc:22:
         25:54:e9:99:b5:13:ea:25:ee:82:1d:04:04:f6:e6:e6:f8:ff:
         ff:0a:1e:ba:94:69:6b:15:33:bd:82:f3:fd:aa:72:39:c0:7f:
         5b:71:41:ea:34:cd:de:f6:ca:80:38:4e:b1:fb:51:99:2d:d6:
         bc:9b:0e:14:b2:3a:fc:e4:09:67:ee:5f:d0:a7:03:9d:84:36:
         28:b2:1b:00:42:82:75:47:37:91:15:8e:ec:3d:1e:aa:54:c2:
         22:72:54:6f:6a:5b:36:c0:fe:21:67:af:a4:72:63:65:05:d8:
         57:30:5a:67:2c:f3:da:43:d7:1b:df:39:7e:da:d0:5f:03:f1:
         45:8f:76:bf:56:9b:8e:ef:f9:88:f1:c2:bd:fb:a6:14:78:55:
         8d:95:78:df:ac:d4:40:d4:51:63:87:7c:d9:14:f0:e1:16:18:
         fb:be:bc:42:04:ad:08:d1:e1:92:78:90:ce:51:b7:10:65:c4:
         6f:0e:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:04 2025 by rpki-client on console.sobornost.net