Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
File:                     _FlUn23SuDFEuIDCPwb7o7JdOYY.cer (raw, json)
Hash identifier:          EYSexqcLd4wFlehSVPNpgzKdFeJDG+hZcF9ILvBw81g=
Subject key identifier:   FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1EECF530461B1DA5132F9902A1088
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198841
                          IP: 91.239.243.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:ee:cf:53:04:61:b1:da:51:32:f9:90:2a:10:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:c6:62:b4:3c:1d:97:e2:5d:78:e6:45:55:
                    ff:ae:69:81:cd:61:26:d3:f5:b5:9f:3a:f1:88:e1:
                    2e:12:34:81:86:6b:84:ad:0e:5e:e9:9a:b5:2b:ea:
                    68:ee:3c:a1:d0:dd:12:43:a9:c4:25:f4:e7:d7:58:
                    ec:e5:89:68:3b:cf:df:dd:98:47:4f:2c:d0:e8:a8:
                    93:f9:9e:46:74:e6:7b:4f:bc:55:a6:f4:4f:54:62:
                    8f:2d:b3:c8:b4:d2:41:a4:fd:5b:4e:45:63:44:93:
                    a7:8f:b4:6e:ab:ca:64:02:24:40:20:4b:23:9a:70:
                    41:60:c5:96:3a:93:53:12:73:fe:49:92:57:5e:fc:
                    08:0f:ee:aa:82:ca:48:81:20:61:17:d3:5f:85:35:
                    d3:d3:83:31:96:9d:64:0e:d2:3d:47:c7:46:e8:23:
                    64:f2:fa:ca:00:b1:ac:d3:61:45:3b:b7:6e:f5:d3:
                    bd:2f:d5:93:a5:cc:97:3c:82:bd:7d:f4:36:f9:91:
                    cb:b5:d5:ad:d3:e7:65:58:6d:f5:f5:05:a3:5c:14:
                    05:82:70:b1:c0:cd:89:9e:87:1c:9e:2a:8f:b0:d3:
                    e0:3b:5e:2a:30:71:37:7a:a0:03:56:48:4b:a2:c1:
                    90:c0:7d:af:c0:66:ef:60:44:14:50:61:4d:03:fe:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.243.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198841

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:df:cd:cb:a4:db:42:64:10:65:68:62:ba:af:13:1d:b1:
         c3:7c:24:90:83:61:de:71:7b:9b:ae:00:59:48:01:ce:e0:ee:
         47:db:09:1f:7a:5e:8b:7c:41:71:c6:a0:ea:90:c0:48:8b:15:
         1d:ed:65:6b:95:78:03:21:65:5b:78:c1:f9:48:17:e1:05:3f:
         e0:9a:c1:b6:c5:c5:80:68:05:8a:f9:0d:59:c1:09:ad:b3:52:
         49:da:7a:73:6f:c8:ce:6f:7b:3a:00:e4:b2:5c:3b:3d:57:05:
         18:27:61:d5:47:2d:60:2c:0b:2a:32:4c:10:d8:d4:59:63:2b:
         d1:c1:8d:5f:8e:ba:58:37:52:b7:6f:18:b9:6d:28:18:8d:73:
         c3:f4:51:1b:ab:c8:68:1e:37:c6:53:c8:bc:d9:e1:58:45:ab:
         a7:d5:81:d2:d2:ed:e7:b0:a3:e9:43:9a:c2:43:70:53:7a:f1:
         bb:ab:6a:41:ac:78:96:88:33:d9:43:c4:9f:a9:be:96:9d:7a:
         4a:c5:86:3c:07:ca:6f:2c:b4:77:2c:f2:98:11:cb:9f:fe:25:
         eb:e3:41:40:60:1d:58:d4:81:ca:2d:72:10:1b:5e:27:b5:b9:
         90:58:c1:29:79:50:90:b8:de:cf:65:04:07:99:25:75:01:e4:
         1f:26:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net