Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.cer (raw, json)
Hash identifier:          lGMJt2zFw9aW/iUu3K8aQELhRcIAJScUCuWjnDOqfvI=
Subject key identifier:   54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521CCE161A34C522AEC364B1E0E20DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35394
                          AS: 44293
                          AS: 204557
                          AS: 206189
                          IP: 45.85.136.0/22
                          IP: 80.67.44.0/22
                          IP: 130.185.88.0/21
                          IP: 185.72.44.0/22
                          IP: 185.79.36.0/22
                          IP: 185.87.96.0/22
                          IP: 185.93.44.0/22
                          IP: 185.93.152.0/22
                          IP: 185.143.96.0/22
                          IP: 185.172.168.0/22
                          IP: 185.186.28.0/22
                          IP: 185.196.56.0/22
                          IP: 185.217.204.0/22
                          IP: 185.220.44.0/22
                          IP: 185.236.168.0/22
                          IP: 185.240.232.0/22
                          IP: 185.245.176.0/22
                          IP: 193.27.246.0 -- 193.27.249.255
                          IP: 193.161.220.0/22
                          IP: 194.61.16.0/22
                          IP: 213.217.24.0/22
                          IP: 2a03:3d60::/29
                          IP: 2a03:5c20::/32
                          IP: 2a09:5000::/29
                          IP: 2a0c:8f80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:cc:e1:61:a3:4c:52:2a:ec:36:4b:1e:0e:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:6b:23:fe:50:5e:2c:81:a3:e7:92:f7:56:
                    e8:21:92:8e:5e:61:ab:e9:a0:78:c1:6d:42:ae:a5:
                    ec:a9:4e:38:99:c7:0b:e3:bb:df:fd:d6:12:26:91:
                    54:7a:04:a2:52:01:9a:0f:f9:e6:c1:e0:2f:45:3c:
                    9d:11:ba:43:a2:39:e8:7a:83:d5:42:82:11:9b:75:
                    06:c3:4f:b9:7f:08:86:01:a5:6c:4d:1a:c2:4c:5d:
                    3a:33:ff:d9:4f:37:d0:e8:dd:7d:62:2e:07:38:94:
                    90:1b:d5:8c:d4:9e:35:52:0b:00:9f:17:74:08:cc:
                    a1:ef:b7:88:bd:6f:07:be:35:10:29:f6:e2:09:d9:
                    6a:4a:33:c6:34:f3:3c:72:e2:96:c9:6b:af:9e:50:
                    da:27:08:90:13:11:47:05:d5:04:f0:7b:2d:b2:4b:
                    69:aa:51:a7:8c:bb:02:67:46:88:35:c6:37:f3:75:
                    a4:4f:2a:0a:4d:5d:eb:13:5b:a3:3d:dc:19:70:56:
                    66:dc:a0:5a:0f:77:1f:b0:9d:ee:13:21:35:75:cb:
                    3b:fc:c1:1b:84:5f:52:9e:12:42:41:0f:99:9e:b7:
                    81:6f:c5:04:da:53:ae:ba:2f:cd:ce:8c:1e:ca:81:
                    5b:8c:61:7e:2e:50:36:f9:9a:b5:36:3b:ce:c9:1b:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.136.0/22
                  80.67.44.0/22
                  130.185.88.0/21
                  185.72.44.0/22
                  185.79.36.0/22
                  185.87.96.0/22
                  185.93.44.0/22
                  185.93.152.0/22
                  185.143.96.0/22
                  185.172.168.0/22
                  185.186.28.0/22
                  185.196.56.0/22
                  185.217.204.0/22
                  185.220.44.0/22
                  185.236.168.0/22
                  185.240.232.0/22
                  185.245.176.0/22
                  193.27.246.0-193.27.249.255
                  193.161.220.0/22
                  194.61.16.0/22
                  213.217.24.0/22
                IPv6:
                  2a03:3d60::/29
                  2a03:5c20::/32
                  2a09:5000::/29
                  2a0c:8f80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35394
                  44293
                  204557
                  206189

    Signature Algorithm: sha256WithRSAEncryption
         52:24:03:45:6a:6a:2f:52:b7:fd:9b:d6:d5:b1:65:59:bc:9f:
         4a:3c:66:8b:a8:12:60:1e:17:cd:05:e3:9a:0a:53:71:d2:78:
         f6:e5:d5:04:44:cb:97:73:16:77:e4:8e:c4:57:d7:54:02:74:
         23:7c:b3:6b:c8:b9:24:9c:52:21:ff:dc:10:b8:64:2b:a4:b7:
         33:b1:85:75:c6:88:da:55:c5:d1:e1:27:ab:83:9a:b5:88:a0:
         f2:c4:23:f9:76:75:13:15:74:10:85:6f:f9:95:98:5b:da:56:
         77:86:f9:87:3a:07:ea:99:38:56:be:cc:af:6b:87:91:97:be:
         ca:a7:d9:df:6d:cc:c7:a6:72:b9:0d:95:48:15:d4:e1:39:cb:
         a4:fa:35:59:1c:1c:f0:a3:ea:14:82:05:d9:7f:3d:9a:f9:a6:
         59:68:1e:91:a4:d9:5e:70:e8:70:7f:ea:bd:33:64:7c:d3:2d:
         09:7d:a9:d9:f5:f9:14:06:c1:2d:36:b0:a9:44:34:37:34:59:
         9f:29:73:96:1e:aa:00:65:35:62:58:04:09:6c:32:8a:4f:49:
         49:e6:68:10:5f:07:c1:14:72:2b:b7:93:04:69:fc:4e:c0:6f:
         96:7b:c3:a9:e0:a6:ed:83:0b:92:03:d3:46:21:04:1d:9d:fc:
         99:fd:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:06 2025 by rpki-client on console.sobornost.net