Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
File:                     Yj80T9SpG_rRODCNUnFVu85Sr24.cer (raw, json)
Hash identifier:          IsEcEtjloBOYAv15uM9z+m1Pgerffy4nTKrcT6iBthQ=
Subject key identifier:   62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA0EF641861C1657392929ED272057
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8819
                          IP: 46.227.104.0/21
                          IP: 83.142.192.0/21
                          IP: 91.189.24.0/21
                          IP: 185.188.68.0/22
                          IP: 2a0e:6180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:0e:f6:41:86:1c:16:57:39:29:29:ed:27:20:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=623f344fd4a91bfad138308d527155bbce52af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:49:f0:6c:09:1a:65:41:39:33:04:5a:31:
                    07:a9:99:1d:17:fb:0b:80:22:ff:74:90:1a:a1:d0:
                    ca:01:8e:33:0b:7f:97:d8:eb:3d:9a:a7:81:97:53:
                    76:26:35:14:de:ae:67:47:46:3d:d3:a5:35:b1:ab:
                    a8:b1:f9:5f:93:a5:9a:6b:57:e3:e8:79:ab:83:2c:
                    3c:60:72:ae:66:0f:f7:88:24:4e:15:e1:d5:ea:b2:
                    ec:98:cf:ed:66:a7:33:f0:3f:3e:21:5b:67:86:34:
                    11:87:ba:61:28:a8:7e:91:8d:83:93:9b:95:cc:34:
                    23:27:47:b7:a2:6c:23:d6:e5:b4:10:ef:cc:3e:be:
                    2e:b3:f4:dd:9b:2c:28:82:9d:58:f8:4c:97:20:f7:
                    b8:ba:e2:71:e4:4a:6e:b6:4c:0b:af:71:38:ec:0a:
                    50:f4:ce:2c:bd:d2:eb:17:fe:37:b7:7c:68:82:1c:
                    1c:7e:19:60:3b:7b:d9:25:a4:b2:e4:25:67:3a:e0:
                    59:fe:d2:35:29:4d:34:84:cd:87:5e:ec:dc:a1:33:
                    a1:e5:3f:c4:3e:3e:5e:8f:03:fd:7f:ba:a0:b5:71:
                    28:03:e4:5a:90:26:00:bf:7c:98:62:ec:bf:ad:83:
                    96:a3:e2:a4:ab:11:bf:c6:c2:7c:85:2f:a3:89:73:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.104.0/21
                  83.142.192.0/21
                  91.189.24.0/21
                  185.188.68.0/22
                IPv6:
                  2a0e:6180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8819

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:5e:0c:81:5f:b0:6c:35:0b:ed:81:ce:2c:29:92:57:63:
         18:67:78:50:a9:5c:94:41:dd:1d:df:2f:be:5d:6f:44:bf:2a:
         b5:fa:09:59:a7:b7:24:0d:e3:6d:bc:94:eb:c8:98:8e:0c:b9:
         45:31:4c:a8:0d:44:c0:23:28:58:19:02:83:83:a7:15:f0:4c:
         bc:8b:f3:18:7c:6c:a6:f0:51:40:0a:d2:89:89:e9:6c:67:22:
         99:f0:99:d4:f2:e2:5e:c4:bf:ad:0a:62:00:64:94:f1:42:fd:
         a3:6d:70:0f:08:8d:2c:c8:61:de:f9:c5:18:af:4f:41:13:5b:
         21:3e:af:e9:38:c9:ab:8c:9c:05:77:48:b0:61:c8:62:54:16:
         ec:d9:6e:32:bf:84:e0:50:c2:80:11:02:85:30:b5:81:ab:5d:
         37:05:e9:7c:f2:89:1d:1a:8c:a4:2a:3d:87:0d:1d:b2:86:76:
         af:ae:df:41:53:89:47:5d:23:25:18:18:20:f6:fe:3b:8e:05:
         52:40:9e:d9:27:e3:1e:71:d7:5e:a8:ec:58:29:cf:33:e7:a8:
         b7:04:f7:f2:c6:89:38:29:6d:91:09:21:f3:8a:78:8a:7d:e4:
         ed:f0:10:b8:c3:81:3f:39:ac:ed:93:64:7f:76:ad:3e:4c:ba:
         03:cc:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:14 2025 by rpki-client on console.sobornost.net