Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
File:                     Wu3LM00555eBfi60dwPAGLTcSdU.cer (raw, json)
Hash identifier:          pw1BnIq7MpERMNq12LMpYMRjt71mjp9z1TQyYas9Sac=
Subject key identifier:   5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FA463B8155D114A0740DDC4682421
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39767
                          AS: 51983
                          AS: 61427
                          IP: 78.158.72.0 -- 78.158.95.255
                          IP: 185.90.140.0/22
                          IP: 194.88.6.0/23
                          IP: 194.88.12.0/23
                          IP: 194.104.123.0/24
                          IP: 2a05:e200::/29
                          IP: 2a13:6500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:a4:63:b8:15:5d:11:4a:07:40:dd:c4:68:24:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:e8:5b:71:a6:64:0d:c0:9b:6a:0b:d7:64:
                    8e:2a:fe:dd:d4:72:f7:d8:82:17:94:d3:73:e5:89:
                    bf:ea:e5:99:bb:d8:0f:be:8f:ba:5e:73:3d:5c:4d:
                    d0:e9:fb:c2:93:7e:18:3c:49:22:4c:34:76:92:0b:
                    33:9b:f2:29:10:d0:36:db:68:0d:61:2a:26:20:4a:
                    c8:6b:f1:9f:22:23:e2:19:40:c2:3b:1c:07:46:4b:
                    6f:6a:ab:12:13:94:45:4c:57:06:8c:44:3c:2a:97:
                    16:08:22:f6:15:cb:e9:2a:f4:9c:19:4c:2c:a4:31:
                    13:f7:f8:7c:46:8d:2d:96:d6:9c:02:8b:87:c9:68:
                    31:bf:9f:01:b1:f3:01:25:26:ac:b1:f2:38:73:a8:
                    15:33:4e:40:2e:a5:7b:8a:0e:bc:ec:60:8d:ac:63:
                    2a:66:ec:e0:39:4b:a3:0d:75:1b:77:5c:c3:fa:a7:
                    ec:53:f0:4b:49:eb:b1:53:76:87:e3:7d:93:a3:db:
                    84:8f:d4:56:40:f0:95:a2:01:30:44:27:26:55:20:
                    89:1c:ed:65:ee:e8:0c:3f:38:30:67:5a:47:8c:89:
                    e0:d6:b3:c0:3f:03:b0:bc:51:8a:93:f2:9a:a1:12:
                    f6:a8:0e:1a:9a:f0:e8:7d:9a:4c:33:67:16:72:35:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.158.72.0-78.158.95.255
                  185.90.140.0/22
                  194.88.6.0/23
                  194.88.12.0/23
                  194.104.123.0/24
                IPv6:
                  2a05:e200::/29
                  2a13:6500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39767
                  51983
                  61427

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:96:bd:fe:22:7d:5b:80:42:d9:ff:14:20:39:09:15:ff:
         3c:f7:88:bc:a7:ee:ec:81:40:7b:5a:db:38:cc:98:df:e9:20:
         21:54:4a:ec:c3:ff:fc:1c:e9:01:52:a6:18:55:9b:69:a2:43:
         82:bb:e1:f7:9d:fa:d4:9f:48:bb:ab:df:1a:68:f2:00:62:22:
         d9:02:cd:25:f1:de:c9:e6:d6:6d:0e:ef:87:a2:84:03:fc:de:
         dd:5c:5c:3c:e8:29:a2:25:65:21:4e:e0:75:12:b5:42:d8:61:
         e8:a9:6c:27:02:35:05:cb:c3:2d:68:51:41:95:93:1b:38:3e:
         8e:bd:1b:6a:9a:2e:e3:7b:80:ec:a3:0f:33:88:e0:b0:55:20:
         b3:05:62:5b:80:a2:85:42:b6:31:99:50:a5:3e:24:06:41:27:
         3f:c3:fa:45:c3:78:ba:92:06:26:f5:22:48:1d:98:20:bd:50:
         55:eb:c6:9c:2e:66:a8:8a:cf:de:74:8f:04:79:c7:93:f4:05:
         62:ba:29:27:08:1f:9a:8a:1b:a9:ac:cc:a1:8c:79:fb:73:aa:
         d9:d5:90:9a:9f:1a:be:78:d5:59:77:54:8f:47:67:8e:56:25:
         bb:0c:50:75:cf:de:81:32:74:d7:35:0c:55:21:69:a1:a7:43:
         9a:8f:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:09 2025 by rpki-client on console.sobornost.net