Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
File:                     _4MmzOvF_DL70ONP7n85u6iPuaI.cer (raw, json)
Hash identifier:          WXCXdLA3uHIqGm/j4w7+YCad74UQQ8tQRc4BGtqjd2o=
Subject key identifier:   FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F78889A270ABC90565B2769593B90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51811
                          IP: 91.205.180.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:78:88:9a:27:0a:bc:90:56:5b:27:69:59:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:1e:b4:c5:08:52:1e:36:31:da:20:46:ca:
                    20:ab:41:7a:db:2c:f5:ee:c1:52:0b:d2:f1:83:0a:
                    13:85:98:72:3c:72:0f:94:cf:a9:f5:9a:eb:77:41:
                    5d:08:bf:96:89:b5:2c:27:5f:c3:28:c3:e0:b1:21:
                    52:f3:2b:47:3f:25:60:7a:64:a0:cd:1e:d0:17:e6:
                    f6:65:08:eb:b1:47:5d:dc:04:04:d6:48:f2:2f:bd:
                    37:77:a0:46:21:48:13:17:c6:72:2f:89:5e:32:37:
                    5d:58:d2:96:9c:69:4a:47:bf:0d:14:16:3a:0d:0d:
                    56:e7:36:8b:fd:d6:e2:83:b8:23:d5:e7:db:68:de:
                    c9:ee:29:b0:2e:37:1e:08:8f:e1:e3:cd:79:16:70:
                    c0:fd:b6:db:27:67:f1:7f:22:3d:ec:de:06:52:ff:
                    5e:35:bb:1e:70:46:e0:99:bc:1e:02:1b:f0:90:a3:
                    8e:1f:24:af:0d:64:63:1e:c1:a1:e8:f3:44:65:ba:
                    23:c6:2a:bb:d1:a4:29:5a:81:fc:a7:19:d2:d7:38:
                    42:1a:53:9c:1a:40:10:23:ff:45:f2:87:f3:a7:44:
                    a9:d8:b5:be:9e:fd:73:6b:92:2e:0e:9b:18:ca:50:
                    77:8e:a9:1b:7d:12:6b:24:43:41:ba:a1:cd:5d:e8:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.180.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51811

    Signature Algorithm: sha256WithRSAEncryption
         21:77:ad:8c:c5:ac:69:6e:df:27:25:30:3e:df:bd:31:df:cd:
         81:13:cc:ea:50:92:99:5f:c5:20:e0:86:83:8a:4d:79:e7:59:
         0c:44:7c:af:a4:99:d8:94:94:04:4f:fd:30:42:7c:ce:c3:c2:
         64:c3:dc:17:b0:12:0a:c6:3b:14:67:eb:cd:4b:14:f8:83:85:
         38:2d:23:71:0f:5a:8c:34:01:7c:5c:3a:95:5d:42:82:06:69:
         da:d7:72:7a:aa:67:fe:1e:60:f9:81:a9:c2:7b:ff:d3:8a:5b:
         5b:e6:7e:fd:ac:74:55:be:d6:73:32:03:e1:51:7c:6f:78:d6:
         f8:d4:06:ca:a9:47:79:7f:a3:d3:62:f9:5a:c3:eb:ca:30:d7:
         58:d5:00:c2:e1:6f:05:53:20:d0:b9:07:2d:13:8d:23:91:83:
         22:69:c4:dd:67:cb:b0:86:00:59:a3:68:9a:97:18:d5:db:b2:
         38:4c:07:8a:9a:41:ac:03:18:68:15:62:70:a0:e0:52:a5:a7:
         19:89:e7:b3:2a:73:ee:f7:78:89:2a:d1:03:17:fb:cb:48:10:
         6b:42:d2:ef:1f:41:79:02:35:f3:f1:e1:66:b5:e1:94:04:8e:
         70:a1:a2:50:bc:4f:51:83:f3:c2:9d:86:0d:5c:2f:41:78:a4:
         4b:19:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net