Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
File:                     ZmA0ymoWu9AUSr31zyRY-WixWJw.cer (raw, json)
Hash identifier:          ghNFjtyFvrBNT3kZd28vJZjH48V17wgY8wHM6Jm47oM=
Subject key identifier:   66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206824660B69953DF8555BA8653FCBC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8814
                          AS: 34170
                          IP: 80.69.48.0/20
                          IP: 91.135.240.0/20
                          IP: 92.39.88.0/21
                          IP: 158.181.32.0/20
                          IP: 185.92.224.0/22
                          IP: 185.105.196.0/22
                          IP: 212.47.128.0/19
                          IP: 2a05:8200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:24:66:0b:69:95:3d:f8:55:5b:a8:65:3f:cb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:d1:36:2c:61:e5:01:f7:db:74:3a:08:2e:
                    1a:d2:64:5b:77:61:7f:05:bf:62:5d:9c:f2:0b:d5:
                    c3:4c:71:44:e8:cb:da:95:1a:70:5e:6e:5a:c3:a5:
                    6b:ef:b6:31:35:48:f2:d1:f3:8a:59:c8:0b:04:e4:
                    72:77:a5:07:2c:98:ca:c7:6a:0f:a1:b9:92:d5:b8:
                    42:55:1e:a1:ad:76:21:6e:5d:c4:a1:1c:35:b8:0e:
                    34:e7:17:97:81:e3:39:53:ee:14:13:d1:5a:00:8c:
                    0f:a9:31:f8:f2:26:f1:53:7e:e0:57:fb:f7:8e:a2:
                    09:d9:f4:bd:15:3b:e0:c7:f4:01:f4:cb:5d:6e:9c:
                    18:88:59:a2:a9:f9:eb:d0:a8:7f:9e:20:ca:92:45:
                    18:0a:b3:a0:bc:4f:43:17:96:10:15:f7:80:8a:a8:
                    81:7c:68:8f:03:76:c1:1f:3d:47:af:b4:99:2e:db:
                    8d:e0:28:bc:c9:24:74:71:ad:d7:79:f4:58:3e:d1:
                    d9:6c:10:90:19:3e:69:4f:91:28:a7:03:c7:6e:7f:
                    0d:a4:64:2d:5f:98:f7:a8:6a:1a:a8:a6:eb:cc:15:
                    28:d4:1f:ec:18:0d:36:35:88:4d:3a:e8:7a:81:83:
                    3f:41:e4:fb:38:ab:d8:94:1a:eb:0c:11:b4:5d:ec:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.69.48.0/20
                  91.135.240.0/20
                  92.39.88.0/21
                  158.181.32.0/20
                  185.92.224.0/22
                  185.105.196.0/22
                  212.47.128.0/19
                IPv6:
                  2a05:8200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8814
                  34170

    Signature Algorithm: sha256WithRSAEncryption
         95:60:fd:54:6d:af:c5:61:84:fb:c2:f8:de:db:2f:0b:b9:29:
         1d:47:7b:ed:85:c0:30:b6:a4:bd:73:7f:f4:1a:68:81:25:83:
         11:06:d2:3f:95:05:40:8a:00:c9:5a:1d:83:77:2f:f8:56:61:
         cf:77:b3:40:9e:4d:81:1e:30:8a:20:00:fd:4d:6c:9a:39:1e:
         68:98:bc:e6:0e:6c:47:1e:5d:03:59:72:6e:70:c5:34:e0:66:
         19:58:db:72:69:ff:02:61:45:3e:8e:39:98:1b:2b:88:19:d2:
         f6:9c:42:67:c2:5d:78:64:2e:56:b8:4d:cc:d7:59:c9:9f:8f:
         ce:86:00:b8:99:12:04:de:e4:f0:5f:13:f3:f0:ce:88:48:f0:
         d3:07:01:b6:d3:14:95:f2:fc:2f:55:4f:a9:98:02:40:a0:cd:
         fc:84:87:5c:a1:73:11:1d:a5:c2:8a:fb:45:b1:32:c7:9c:a4:
         c2:f9:9c:cc:1a:64:ce:20:9e:50:a1:33:e8:2f:ad:23:51:cf:
         e2:c1:e8:25:b5:51:3d:7f:7c:d9:00:7b:bc:45:b4:04:00:92:
         ca:b6:45:ed:ce:1a:48:62:0b:a7:56:c0:74:bd:80:07:5c:f8:
         a9:09:d4:7c:a7:64:9d:da:33:aa:66:0b:bf:ae:83:0b:9e:ac:
         ee:8b:a0:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:16 2025 by rpki-client on console.sobornost.net