Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.cer (raw, json)
Hash identifier:          5ld2wEUi1BJ1LUWCy7eN86I2XkgIwVRvDqo50r0Os5s=
Subject key identifier:   52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1E700564AB70234253DFA7F7CC751
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198443
                          AS: 202426
                          IP: 91.234.204.0/23
                          IP: 194.48.220.0/22
                          IP: 2001:67c:10a4::/48
                          IP: 2a0c:c6c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:e7:00:56:4a:b7:02:34:25:3d:fa:7f:7c:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:b1:43:06:c7:1d:c4:fc:c2:f0:87:96:cb:
                    69:1f:e3:a8:f1:7e:c5:f4:ab:22:eb:51:5d:41:44:
                    80:cf:dd:57:f2:f5:18:b4:1c:b4:32:34:c3:39:fe:
                    d6:23:8c:08:87:e3:ff:8c:4a:6a:27:b7:2b:ba:b0:
                    21:75:14:7a:76:a6:76:93:b6:02:b9:34:22:ec:8b:
                    a2:6f:bf:86:78:c2:9e:d8:25:a0:a1:5e:7c:7c:6c:
                    3f:5e:d7:9e:64:7f:7c:d4:7b:8e:dd:4f:a7:f4:6b:
                    a2:4d:81:d7:24:47:8b:9e:5d:cc:bf:1b:95:7c:3b:
                    1e:f4:a3:9d:5f:4f:57:d7:a8:74:a0:d3:10:0d:43:
                    67:88:19:07:dc:4c:a2:5d:20:02:34:f8:26:95:c0:
                    ca:a4:60:90:b4:6a:ce:89:05:c7:47:9f:e7:d7:7e:
                    2c:2a:bf:a8:78:8f:66:48:86:3c:d6:94:bc:09:2d:
                    a8:7e:6f:10:86:3a:87:f2:8b:f0:78:31:37:e7:52:
                    1b:5b:99:f3:30:6a:30:3c:1f:86:8a:08:00:84:09:
                    4e:7f:0a:69:4b:1f:94:02:1b:5b:9d:53:46:47:07:
                    85:75:8d:8c:8b:20:8c:0e:fa:79:0f:50:d5:ad:06:
                    fe:d0:43:94:16:f2:5a:db:67:08:9d:f1:b5:ac:7a:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.204.0/23
                  194.48.220.0/22
                IPv6:
                  2001:67c:10a4::/48
                  2a0c:c6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198443
                  202426

    Signature Algorithm: sha256WithRSAEncryption
         20:32:09:40:3b:d3:d1:71:59:db:66:cf:d8:6a:3c:ca:d4:c7:
         ae:6b:81:b8:32:26:a9:02:16:8d:88:30:e3:fa:70:d2:b7:2a:
         56:3c:68:04:f9:50:a3:cf:b3:b0:6e:b6:44:bd:cc:0f:87:f8:
         ff:10:1c:40:0c:d5:fd:ad:13:0f:6d:03:d1:4b:db:d8:ce:0f:
         c1:82:fb:8d:a6:37:e7:07:f3:7c:d2:ad:a3:73:55:ab:8a:33:
         45:a3:f7:20:29:ad:ac:47:7c:3b:13:b7:06:5b:db:5f:62:bf:
         f0:c0:c3:6e:c0:f6:b7:c0:7f:49:d1:c5:db:1a:b3:5b:ef:1b:
         94:0e:07:a8:17:36:60:98:aa:60:a2:23:60:ee:f1:02:24:38:
         32:53:a5:a7:c3:17:64:d5:4f:db:97:a1:5f:78:3c:c7:9c:11:
         86:7f:9c:40:fe:72:24:5b:e6:c5:3b:9b:8c:2c:36:39:3c:1c:
         b3:ae:a4:26:7a:b1:21:e8:98:69:79:42:0c:2d:6d:51:a0:e2:
         27:81:65:ef:22:1e:f7:80:4f:5a:c0:e3:6e:c1:31:85:0d:29:
         22:50:cf:06:b3:f3:9f:ef:fd:f0:d4:b8:d5:20:b4:f7:43:06:
         84:d9:2c:ad:dc:3b:e6:7d:27:ad:5b:06:76:2e:82:f5:51:ce:
         c0:f6:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:04 2025 by rpki-client on console.sobornost.net