Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
File:                     Xvv25mASb_SQTgmcoK3t6fbOpXA.cer (raw, json)
Hash identifier:          uqYtibmnXYInCqkqQfnBWH68f+sqQbu/HfBFeG7g0kQ=
Subject key identifier:   5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA9BC67B81E004269BA97DBAB161B4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35169

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:9b:c6:7b:81:e0:04:26:9b:a9:7d:ba:b1:61:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4a:d0:5c:42:d9:6a:e5:94:4e:b8:29:33:97:
                    23:f4:b1:60:f9:7b:11:8b:71:c8:1c:70:f5:38:8c:
                    84:71:c0:5c:0c:35:60:83:17:77:03:0c:26:4e:e8:
                    7b:77:df:85:c4:73:5a:d8:62:10:0f:f0:bc:56:c3:
                    ed:24:8b:b2:04:d8:ca:ed:ee:9e:fd:71:0f:1c:2a:
                    07:9a:37:c8:91:8c:6e:d5:78:d6:e9:01:b9:03:e0:
                    4a:55:be:93:e5:2d:c4:ed:4c:86:7c:bc:87:d7:19:
                    b8:e7:1e:2c:05:2f:c0:82:cc:fa:b0:7c:13:8b:b0:
                    dd:6a:7e:0b:b5:87:85:55:0e:f1:cd:89:a4:67:51:
                    e8:fb:aa:48:95:e9:ac:34:61:e1:18:f4:8b:97:e9:
                    21:e3:39:41:73:ea:35:52:14:28:a1:43:57:de:9a:
                    54:8a:5e:cc:05:93:25:1c:f4:08:90:4f:04:98:a6:
                    9a:e4:7f:b3:63:da:df:4a:2b:97:d6:2e:65:63:46:
                    18:0e:e3:a8:c1:76:49:1e:32:46:d4:43:c2:99:f7:
                    dc:b6:0f:84:27:35:73:5d:f5:eb:94:22:01:32:e3:
                    f5:9f:93:5c:ed:e1:8e:32:09:da:5a:92:06:ba:1f:
                    f1:19:1b:97:5d:b9:1d:39:c0:85:82:5b:92:74:89:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35169

    Signature Algorithm: sha256WithRSAEncryption
         45:90:26:f7:a7:13:d0:b9:fd:7c:6c:00:b6:1c:2f:70:b8:e0:
         39:b1:ed:3a:80:9a:e8:3a:a5:47:2a:9b:79:ea:d1:41:5f:97:
         28:70:1c:10:11:a1:af:a3:10:89:5b:d7:52:e2:f2:15:fb:2c:
         70:c7:20:bc:19:d6:ad:11:1a:c5:13:93:4e:6c:d0:29:47:2e:
         21:97:16:e4:6e:73:03:40:89:35:31:da:b0:c7:ed:69:8a:16:
         e3:95:52:32:2d:d0:8d:a8:20:71:4d:8b:51:ea:9f:d2:66:ec:
         4f:65:d2:5e:ac:e1:57:f6:8d:71:b4:22:cc:d2:d3:94:57:e5:
         37:3d:5d:80:55:ae:45:21:f4:cb:04:18:7e:18:e7:1a:fd:fc:
         97:7e:5c:73:3e:22:37:d2:a8:4a:64:5a:d0:e8:32:bc:6e:0b:
         67:c4:de:81:f1:fd:0b:ae:e7:37:c0:00:56:ca:a2:7f:3d:66:
         26:97:fb:f4:6c:3b:e1:b1:84:e3:80:ae:f9:8f:9a:e7:fc:c9:
         87:e6:cc:d3:e5:4e:e9:97:7b:55:dd:8b:a3:4f:d4:eb:db:19:
         3d:9c:12:b3:dd:98:8b:e2:77:14:06:01:1e:aa:0f:4f:6f:53:
         8a:d4:00:40:47:11:b3:1d:d6:e9:30:9c:16:8c:08:4d:3a:e6:
         af:8a:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:12 2025 by rpki-client on console.sobornost.net