Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
File:                     YQfi4ugXHTGdobxks2w8mF5kbCo.cer (raw, json)
Hash identifier:          6VDRy5naaRO8OtSSKOoQZgiqZOVLAXkMsf717/H2SwQ=
Subject key identifier:   61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01951E8F7F89EC7A14ED733504823C590E95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 19 Feb 2025 14:14:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42868
                          IP: 46.235.8.0/24
                          IP: 46.235.11.0/24
                          IP: 77.245.144.0/20
                          IP: 185.87.252.0/22
                          IP: 2a05:c640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:8f:7f:89:ec:7a:14:ed:73:35:04:82:3c:59:0e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 19 14:14:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:e9:bc:c5:01:c1:19:3d:25:89:02:bc:f0:
                    9b:5b:0a:b5:46:6f:88:a2:cd:b0:a1:d5:26:f9:58:
                    a5:81:01:cc:bf:7b:5e:fc:1e:ba:aa:c3:32:ac:92:
                    51:2d:88:87:6a:dd:5a:b0:40:74:58:b0:ea:66:7d:
                    60:3d:5c:31:b3:36:5c:bb:62:da:b7:54:e8:d2:0b:
                    78:84:a5:6e:74:39:04:de:3f:20:32:e0:75:9b:b2:
                    ed:08:9e:14:a5:09:a5:90:5b:bc:b8:ce:fe:5c:28:
                    4c:ee:2b:03:b2:48:da:c1:90:88:ca:48:12:0a:a9:
                    05:61:0b:c7:4c:95:ed:1f:77:81:9f:5a:83:b7:7a:
                    40:09:55:21:51:53:4e:ae:e5:84:91:f6:7d:48:80:
                    e1:2f:23:58:54:36:59:3a:7b:58:02:7f:49:89:b9:
                    f3:70:77:32:d3:00:d5:c2:16:b3:94:62:58:66:34:
                    58:4f:9b:9e:a8:4b:ba:4c:de:b2:fc:17:e3:4d:e6:
                    9d:69:1f:c3:5c:b9:4f:aa:2f:11:eb:dc:d2:af:d2:
                    2c:2c:23:0a:8c:c5:3b:2f:c6:c5:41:e7:e7:56:9f:
                    84:41:3a:cd:34:d8:25:4c:0b:96:c3:e3:5d:56:9d:
                    f5:3a:c0:5d:f5:47:4a:ae:59:5b:c6:af:4d:3e:4a:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.8.0/24
                  46.235.11.0/24
                  77.245.144.0/20
                  185.87.252.0/22
                IPv6:
                  2a05:c640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42868

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:64:1e:50:ec:ea:f9:59:a6:97:2f:4b:35:e6:df:43:7a:
         a5:31:ee:7b:00:c6:bf:f8:7d:2a:1b:ba:40:fe:24:c6:d8:b9:
         1c:1c:d8:7e:98:84:8f:99:8f:38:1b:cd:27:6f:6b:3a:5b:47:
         92:f0:ed:65:b7:b4:b8:c4:ec:23:29:5b:30:bd:6b:f5:ba:f0:
         9e:80:52:90:75:d3:f2:e0:4d:52:da:53:ee:bb:a2:9c:3c:c1:
         42:8d:b5:58:ed:94:fc:3b:90:64:e0:0a:d3:90:b1:66:6f:ad:
         23:20:06:b1:63:40:e2:88:83:f9:6e:cf:32:ce:d0:5b:3e:98:
         8d:72:8e:1b:95:4b:a6:01:ec:24:f6:87:68:f4:aa:1d:23:19:
         98:82:89:88:fc:da:22:40:56:fd:1a:65:07:e3:16:b0:1e:c1:
         41:f0:68:95:18:88:99:09:27:98:26:86:10:9b:62:dd:16:33:
         1c:8d:05:8d:0c:92:30:0f:8f:57:34:09:72:b4:5a:ac:31:e0:
         87:2a:00:27:45:90:44:2f:00:90:fa:fd:9e:69:a7:4e:d1:d4:
         2e:79:ee:61:a9:8e:65:6c:0b:01:5b:50:85:a2:e4:ec:b6:da:
         46:13:0e:39:7d:85:f5:25:45:21:af:54:15:02:0c:e9:e6:bb:
         44:54:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:13 2025 by rpki-client on console.sobornost.net