Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
File:                     V0zKiZ71v0I38Pa90XeSIbIAUvM.cer (raw, json)
Hash identifier:          5HgwUhuAx0ZuKXuObqY4P1YqtLkYCNquLZqMfupiJH8=
Subject key identifier:   57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423695AB937A923B726C943C89EBA0284
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12365
                          AS: 48965
                          IP: 81.95.224.0/20
                          IP: 82.215.66.0 -- 82.215.69.255
                          IP: 82.215.72.0/22
                          IP: 82.215.77.0 -- 82.215.83.255
                          IP: 82.215.85.0 -- 82.215.95.255
                          IP: 82.215.112.0/20
                          IP: 89.146.64.0/18
                          IP: 185.1.250.0/24
                          IP: 185.78.136.0/22
                          IP: 2001:7f8:131::/48
                          IP: 2a00:8840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:5a:b9:37:a9:23:b7:26:c9:43:c8:9e:ba:02:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:dd:aa:df:f1:4d:4d:b1:6f:03:e7:31:d0:
                    b6:04:2b:4b:05:7f:8e:2e:7d:15:37:cc:f3:6d:be:
                    5a:da:5b:4a:21:7a:3f:3f:b1:66:0f:73:2f:45:41:
                    61:21:bd:b0:81:7b:e8:ef:13:bf:7f:6a:63:6f:87:
                    8e:e8:17:91:2b:32:91:3f:2b:85:67:66:cc:61:6f:
                    d9:67:e3:fb:86:04:d2:78:44:18:d1:07:47:49:2a:
                    f6:4f:ce:fa:f1:dd:7c:19:37:a3:8e:8b:9f:86:d0:
                    f1:6c:01:18:67:95:4e:c5:39:80:be:48:8a:b2:1f:
                    04:bc:b7:67:c4:f2:f1:e5:bb:ca:ae:a9:52:01:9a:
                    38:73:a7:c8:50:6a:5f:eb:ab:b4:d1:40:43:99:9b:
                    10:f8:9b:a0:c6:8b:a1:ee:56:e0:b4:ee:c2:a6:03:
                    ad:0f:32:2d:d7:4b:cd:46:77:09:d2:03:51:a5:cf:
                    cb:31:3b:45:e7:26:71:32:6b:42:32:aa:d4:c7:c8:
                    eb:ca:f2:bc:ce:4e:6e:3e:30:e1:96:cd:ee:45:d4:
                    9c:71:86:4e:ce:ab:83:32:db:bc:5f:37:44:e4:d2:
                    57:e3:f3:60:e6:3c:5e:ff:c4:87:3d:7f:73:24:d1:
                    68:b8:b7:31:8b:b3:ad:29:d7:89:ba:b5:a5:fd:ae:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.95.224.0/20
                  82.215.66.0-82.215.69.255
                  82.215.72.0/22
                  82.215.77.0-82.215.83.255
                  82.215.85.0-82.215.95.255
                  82.215.112.0/20
                  89.146.64.0/18
                  185.1.250.0/24
                  185.78.136.0/22
                IPv6:
                  2001:7f8:131::/48
                  2a00:8840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12365
                  48965

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:1a:4e:9d:d6:77:fa:c4:cd:c4:78:4a:e7:53:1e:de:ed:
         fb:ca:b0:67:71:60:b3:54:64:a2:1f:f4:a1:5b:89:d3:c4:dd:
         3b:60:de:64:2f:99:95:45:77:63:5d:d3:f2:06:bd:17:7a:c4:
         55:23:24:8e:ef:3e:5f:5f:8f:5a:99:08:98:e6:0d:77:c6:e8:
         16:b3:a1:0b:52:31:e1:f4:0f:6d:44:57:fc:c8:d5:3f:23:1d:
         0e:f6:26:96:12:37:f6:10:fc:e7:38:3d:ac:d7:eb:cb:b1:ed:
         42:22:6c:8e:26:4a:7b:d7:25:ee:cf:6e:bb:f4:32:0f:3a:57:
         7a:1e:e8:d6:53:97:c5:03:86:ed:36:f4:7e:36:1e:21:56:fb:
         f5:d2:31:4e:21:d9:44:18:41:c5:8b:18:f8:66:f8:3c:c0:ce:
         c9:5e:b9:43:72:5c:ce:81:23:c0:cd:9c:77:53:3f:9c:c0:5e:
         16:a2:21:8e:25:1e:c2:d7:17:22:09:d2:eb:17:75:d2:6c:bc:
         bf:ed:56:b0:2b:c8:16:ae:43:04:1a:73:26:ae:84:01:c8:c7:
         12:83:f3:f4:0f:8d:71:a1:b6:4f:8e:aa:5d:95:c8:17:b7:4d:
         01:79:41:a7:99:eb:85:45:96:89:69:4f:fc:7b:97:2f:51:6f:
         71:ee:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:05 2025 by rpki-client on console.sobornost.net