Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
File:                     W67rTDpphRQSVf1fauGIQGc0j0E.cer (raw, json)
Hash identifier:          ekOEAgYy+xjZYynV00fEpbmop5DW87B1YkasXxrpdNU=
Subject key identifier:   5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195230A56CF118CC0348EE3C957433DBA9D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 11:07:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43684
                          AS: 48160
                          AS: 57762
                          IP: 91.207.142.0/23
                          IP: 91.233.132.0/22
                          IP: 91.234.224.0/23
                          IP: 185.85.160.0/22
                          IP: 2a0b:1380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:23:0a:56:cf:11:8c:c0:34:8e:e3:c9:57:43:3d:ba:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 20 11:07:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:8b:9c:84:01:80:84:2e:1c:6f:90:9d:c6:
                    bd:ae:1b:00:a6:43:a2:6f:ff:ce:14:31:7d:11:0b:
                    3f:7b:83:25:f5:cf:d2:7d:04:c5:0f:c6:06:91:50:
                    a1:c6:13:87:7c:7e:d4:b2:9c:71:5e:d4:9e:09:ee:
                    bf:0a:d9:e2:be:db:62:4d:bc:05:7b:ce:15:64:06:
                    61:31:2c:a7:8e:f2:4b:fc:e7:0a:7b:75:7c:a6:10:
                    a5:34:3a:90:39:38:bc:b8:c2:99:bd:a6:7c:8c:64:
                    b6:0b:59:dd:33:b4:ca:d9:20:0e:75:e5:dd:05:f2:
                    fd:68:1e:33:a8:b6:66:64:a4:c7:cd:05:f1:d4:3f:
                    73:e6:1e:58:cc:9f:87:a5:7e:ff:d8:2a:f1:45:25:
                    f7:4f:f6:6b:37:bc:ae:c6:90:dd:8f:13:7c:5d:24:
                    84:09:2b:d3:a4:11:db:72:bb:14:ff:94:6e:f0:3a:
                    6f:94:2c:8d:5d:f9:3e:ea:d5:a1:be:ab:cd:fe:1b:
                    ad:79:90:f6:08:28:6a:bd:47:1d:df:6f:a3:65:d5:
                    5c:77:54:7b:42:7e:98:9b:e4:85:37:cb:2c:97:cc:
                    07:03:75:6c:b1:ed:b8:15:c8:b3:b3:fd:f9:73:3a:
                    0d:98:95:b8:89:7e:65:60:4a:37:46:91:14:c1:50:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.142.0/23
                  91.233.132.0/22
                  91.234.224.0/23
                  185.85.160.0/22
                IPv6:
                  2a0b:1380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43684
                  48160
                  57762

    Signature Algorithm: sha256WithRSAEncryption
         17:13:8b:f0:c6:38:83:73:12:58:34:92:f6:66:43:00:7c:2d:
         6a:97:e4:09:87:d0:bc:d8:89:55:be:bf:4b:ea:cd:a7:c0:8e:
         90:08:0d:69:80:0b:84:fb:95:b7:a6:c6:8b:fb:33:af:18:d7:
         75:d1:51:35:49:22:b1:e2:34:b4:b6:18:ed:ce:98:53:06:8b:
         84:91:a2:80:41:1b:81:32:ed:68:d2:db:c3:8d:b7:4d:57:d5:
         58:f8:0a:97:f7:18:30:07:e7:9b:15:b7:d2:2f:d9:eb:c2:42:
         1f:da:01:1b:4a:14:c6:bc:65:69:ac:69:6c:c8:39:a9:c2:4c:
         cf:ab:05:05:d7:84:1f:24:e5:a1:bd:0e:39:52:bf:e8:b1:43:
         a9:ab:3f:7e:ac:84:4d:ef:47:85:34:d2:09:b3:43:82:7e:ac:
         24:9c:8a:8b:cf:3f:df:30:75:06:ab:a0:02:7f:6d:e9:21:92:
         88:b7:f0:88:37:56:cc:a3:e1:1c:18:44:67:33:11:7c:ca:2a:
         1e:45:fa:df:49:88:2b:94:21:dc:13:b9:3e:d0:3c:f3:33:ec:
         67:cc:9e:6f:b9:7c:59:18:eb:49:f4:52:8c:12:89:d2:53:69:
         29:b6:1f:e2:6a:c2:b4:8a:f4:3c:5e:8b:2b:9b:09:a2:77:96:
         76:90:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:07 2025 by rpki-client on console.sobornost.net