Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer (raw, json)
Hash identifier:          sUWKAc585buqS8bLGJ7pyRopoxeXQYC3FHMEy4mbXlE=
Subject key identifier:   FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA398D734A834ED5903C76E4C3B6F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207086

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a3:98:d7:34:a8:34:ed:59:03:c7:6e:4c:3b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:7c:7d:64:32:98:01:0a:61:7b:58:73:a8:
                    d7:56:3d:a0:94:02:50:1d:6b:b5:1c:b8:ee:57:f6:
                    70:a8:79:53:b0:43:1c:4d:10:a7:16:3d:21:71:63:
                    86:78:74:ff:ee:ae:c0:df:f9:62:d3:12:16:91:fd:
                    5c:94:10:e2:1b:f7:2a:a3:92:d6:79:db:2c:14:2c:
                    e9:1a:db:51:87:8d:55:28:3a:b8:3b:42:97:3b:e9:
                    15:d4:6c:98:dd:14:1e:1b:07:cd:5f:20:ae:f0:c9:
                    8d:0e:d9:66:65:16:4a:8e:3b:bf:c3:ce:a7:a7:d3:
                    9a:4c:52:a0:00:a2:7c:2e:a9:0f:ab:a6:52:03:4c:
                    2c:88:2e:52:99:a2:2f:67:10:80:60:65:d5:79:16:
                    ee:1f:fe:10:8a:93:fc:e6:ff:f7:76:97:ca:11:82:
                    53:3c:31:4d:59:70:2e:a9:1e:2e:5f:e5:ef:09:86:
                    62:dc:23:8f:51:22:b8:46:5f:e3:3a:45:c6:fa:27:
                    78:2d:54:63:dd:d7:76:f9:e2:9a:4b:1f:aa:ad:67:
                    12:37:e3:7f:22:13:01:dc:55:0a:9b:27:f3:88:58:
                    50:7d:74:3f:63:cc:ed:d6:c7:eb:45:13:4f:15:c7:
                    3c:10:8c:3a:0d:b8:a4:85:99:33:80:c4:84:21:27:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207086

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:c2:39:99:c7:e8:9c:53:b5:9e:fb:fe:db:60:53:cb:8f:
         80:f8:9f:df:a3:70:03:09:3a:85:d7:f4:a4:2e:58:e2:0a:b7:
         c2:57:01:ca:da:3b:34:6d:b9:2d:bc:38:00:ca:21:03:53:39:
         c4:f2:b3:bf:56:c3:64:9e:cc:b5:72:e3:26:1e:e2:31:b1:4c:
         5b:7c:a6:a8:5d:20:a8:39:fa:c8:69:69:c7:ea:1a:17:18:ba:
         f5:a2:de:0d:2f:a4:1e:dd:f4:dc:f3:9e:1a:58:c3:26:aa:e1:
         98:a1:79:a1:57:7b:eb:37:39:83:da:99:4a:e9:7e:5b:c2:a9:
         60:99:2a:62:b9:5b:05:98:00:73:8a:29:ec:e9:1a:16:e8:4f:
         36:e9:30:e1:24:01:08:c8:f4:f7:31:27:4d:db:01:24:a8:9c:
         6f:b0:70:da:8d:87:d4:21:ec:4f:7b:dc:04:0f:ea:e6:33:3c:
         36:55:53:9d:8e:eb:8d:ec:b5:14:a0:5d:9c:28:2a:1d:a1:ef:
         a3:ed:0a:57:70:67:87:e7:09:98:36:6e:a8:46:02:41:c7:30:
         1a:c2:10:d5:4f:95:ed:25:e9:ae:07:34:26:9c:63:a6:3c:46:
         6a:d6:4a:24:b2:c1:bd:69:c5:52:71:53:16:dd:af:c2:45:78:
         19:47:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net