Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
File:                     VGLTx682xAGqlwlNPyOJ14ddFOw.cer (raw, json)
Hash identifier:          UTh7DUN8rMdi4erpBplNimHrgMEu8EHabRmWKibZDrk=
Subject key identifier:   54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B372B64850672AA53DAF06DC4931BB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48003
                          IP: 91.208.239.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:72:b6:48:50:67:2a:a5:3d:af:06:dc:49:31:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:33:47:3a:3f:b7:13:d2:88:9d:b3:72:76:
                    5a:f1:aa:05:51:d0:41:f1:fe:54:7f:49:47:4e:11:
                    76:90:a9:79:03:63:00:34:31:71:68:cb:67:6c:f1:
                    12:2a:1b:2a:4b:ea:ab:75:b2:1e:ec:ec:70:a3:c4:
                    bf:90:e6:76:8b:a4:d0:7e:09:59:46:ab:ca:95:27:
                    04:f8:37:88:1c:0d:dc:7a:87:c3:46:56:a6:98:f0:
                    81:d3:47:bc:05:a2:fb:3a:c1:4c:34:16:a1:9d:a2:
                    61:89:62:7a:a6:cf:87:d3:28:68:c9:ea:7c:d4:2c:
                    57:3f:9e:61:e6:e6:c9:22:88:e6:7c:41:79:d2:80:
                    94:60:69:2b:c2:e7:ea:af:b8:89:8b:a0:9a:12:af:
                    98:7b:55:3a:c8:91:7a:af:54:e0:ae:b2:d5:30:84:
                    8e:55:ab:21:92:6b:98:ef:3a:9b:66:ca:45:9d:13:
                    ec:3d:7a:5d:ce:a1:a0:51:bc:bd:59:a4:87:c7:da:
                    24:d4:6e:2f:b2:ad:11:5d:3c:a7:68:b5:fb:40:ec:
                    e3:9b:91:11:15:91:df:d7:92:67:19:58:e0:27:e9:
                    e7:44:02:6c:7b:5a:5c:11:86:44:57:d3:85:f1:35:
                    d9:73:35:f6:ae:57:ad:87:e3:9d:66:b5:8b:73:a7:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.239.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48003

    Signature Algorithm: sha256WithRSAEncryption
         42:71:96:e8:48:46:12:be:25:45:5d:e4:01:fe:27:58:a1:76:
         f4:b3:29:fb:b7:46:92:60:04:f8:51:fd:c6:b9:3a:76:b9:8d:
         5f:bc:f0:9d:a1:c0:ea:f4:b0:25:8f:41:43:bf:be:95:fe:67:
         fe:a9:6a:3c:5a:93:c3:95:26:e2:4c:01:ac:e5:25:0b:3b:58:
         c3:7e:11:ab:09:c5:8d:1a:f8:01:dd:c4:48:49:b4:b8:71:94:
         29:f1:cc:12:68:f8:06:53:c3:9f:a9:50:25:00:66:f3:ba:de:
         35:61:df:ee:a1:a2:2e:2c:e8:04:7d:be:bd:56:1a:40:8a:9f:
         6e:8f:e5:3a:94:63:66:d8:c4:94:c8:98:6f:9e:bb:c3:2c:53:
         36:63:9d:3e:82:50:12:9b:7c:0f:c2:9f:d0:68:ca:c7:27:1d:
         b8:c8:57:64:42:10:95:56:4b:1a:c6:76:d6:75:7b:bf:31:13:
         ac:74:43:7b:26:46:33:5d:6d:be:6a:f8:bd:8d:52:65:e9:33:
         7d:46:a5:17:04:1c:d6:0c:dd:26:94:ee:0f:3a:ee:20:67:55:
         bd:30:a6:cf:3b:1c:77:ce:2e:9f:72:62:b4:a4:6a:43:75:b2:
         95:81:4b:8e:3a:64:23:e8:ce:da:b1:79:14:fb:e8:f5:12:b6:
         cd:a0:63:b6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQks3K2SFBnKqU9rwbcSTG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDYyZDNjN2FmMzZjNDAxYWE5NzA5NGQzZjIzODlkNzg3NWQxNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIzRzo/txPSiJ2zcnZa8aoFUdBB
8f5Uf0lHThF2kKl5A2MANDFxaMtnbPESKhsqS+qrdbIe7Oxwo8S/kOZ2i6TQfglZ
RqvKlScE+DeIHA3ceofDRlammPCB00e8BaL7OsFMNBahnaJhiWJ6ps+H0yhoyep8
1CxXP55h5ubJIojmfEF50oCUYGkrwufqr7iJi6CaEq+Ye1U6yJF6r1TgrrLVMISO
VashkmuY7zqbZspFnRPsPXpdzqGgUby9WaSHx9ok1G4vsq0RXTynaLX7QOzjm5ER
FZHf15JnGVjgJ+nnRAJse1pcEYZEV9OF8TXZczX2rleth+OdZrWLc6ehpwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFRi08evNsQBqpcJTT8jideHXRTsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzEzYzAy
ZS1jY2EwLTRkY2QtOTEyNS04YjMxNTIyOTc1N2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMTNjMDJl
LWNjYTAtNGRjZC05MTI1LThiMzE1MjI5NzU3ZC8xL1ZHTFR4NjgyeEFHcWx3bE5Q
eU9KMTRkZEZPdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9DvMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC7gzANBgkqhkiG9w0BAQsFAAOCAQEAQnGW6EhGEr4lRV3kAf4nWKF29LMp+7dG
kmAE+FH9xrk6drmNX7zwnaHA6vSwJY9BQ7++lf5n/qlqPFqTw5Um4kwBrOUlCztY
w34RqwnFjRr4Ad3ESEm0uHGUKfHMEmj4BlPDn6lQJQBm87reNWHf7qGiLizoBH2+
vVYaQIqfbo/lOpRjZtjElMiYb567wyxTNmOdPoJQEpt8D8Kf0GjKxycduMhXZEIQ
lVZLGsZ21nV7vzETrHRDeyZGM11tvmr4vY1SZekzfUalFwQc1gzdJpTuDzruIGdV
vTCmzzscd84un3JitKRqQ3WylYFLjjpkI+jO2rF5FPvo9RK2zaBjtg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:05 2025 by rpki-client on console.sobornost.net