Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
File:                     _c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer (raw, json)
Hash identifier:          8nfxqUpYPvomjDgzybUusQLn+GrFTf8xah9wJM96REo=
Subject key identifier:   FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7540C0AEB2653496AE828C7E8B057
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34212
                          IP: 194.145.229.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:54:0c:0a:eb:26:53:49:6a:e8:28:c7:e8:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:37:70:22:36:7d:ac:cb:cb:f6:fe:ab:b8:
                    3d:e0:81:b1:2a:de:94:44:a4:73:a4:c8:1e:90:46:
                    4b:a3:36:98:13:13:ec:b6:ce:af:66:7c:53:e8:50:
                    d9:78:f8:16:c2:b6:69:a5:0a:dd:15:42:c9:c8:ea:
                    ed:e8:71:ef:17:a1:e1:16:c7:f0:77:2d:06:fb:55:
                    f2:33:1d:bd:02:fe:14:b7:c9:49:01:aa:72:3b:d5:
                    37:1a:78:b1:b3:88:9f:59:24:c5:1d:d9:74:47:e3:
                    d0:07:68:29:9d:53:4b:0f:4b:93:13:f5:27:d1:0f:
                    b7:d6:65:9d:c6:f1:a3:b4:26:a6:24:43:b4:46:f9:
                    9e:46:3a:ee:82:9b:a9:f7:7b:ae:f7:40:78:3b:0f:
                    23:8c:f5:48:5e:1e:46:52:2e:2b:9d:c5:62:77:b0:
                    c8:eb:25:3f:f1:68:ac:a6:4b:f9:18:e5:c4:07:43:
                    2b:64:9d:02:01:7b:f8:12:98:91:df:16:3d:5c:42:
                    5d:73:17:63:bb:57:5b:f7:43:48:08:1c:32:02:a5:
                    f7:9c:6e:01:91:5e:cd:e3:b7:6d:e6:2d:62:66:60:
                    19:10:dc:46:6c:d6:d5:8f:17:79:41:de:a2:94:ac:
                    84:b9:70:54:49:5c:70:ce:ca:5d:af:14:60:6f:e2:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.229.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34212

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:39:cb:8d:77:20:7b:64:e8:a3:6d:ca:cb:fb:d6:5b:95:
         57:c6:72:bd:0c:5f:15:34:de:7d:1a:52:11:c5:f7:57:f7:b4:
         06:6c:18:22:33:9d:ea:39:66:9e:49:64:de:f4:d0:d6:c6:50:
         f5:46:87:c5:f0:89:6e:1b:b8:df:27:6a:51:6f:4b:2e:cc:c4:
         60:ed:ae:04:4e:4c:4c:fe:bf:9f:7b:f6:b4:55:b9:96:fb:2e:
         53:19:58:10:82:ad:ee:13:c5:25:2b:ad:b2:98:f3:b8:45:cd:
         9d:36:01:82:83:8e:c4:cd:a8:c8:6b:2a:94:ff:a4:bd:8b:af:
         3d:a0:4a:6d:2a:71:3b:cc:07:48:5e:8d:66:77:47:7a:74:7c:
         9b:f2:ef:b1:04:68:41:7f:45:3e:73:d8:26:71:f4:fd:09:62:
         d2:72:1f:40:29:86:66:e4:a7:76:57:45:6e:32:f3:39:34:a8:
         aa:e2:65:70:32:c8:5b:f5:e8:60:70:a2:95:88:30:a1:76:4a:
         57:e5:26:0f:1c:4f:4e:db:42:d5:6b:13:36:57:17:bc:54:95:
         5b:48:21:58:ce:fd:2d:77:1f:18:cf:52:d7:0b:fc:b0:02:55:
         db:33:e6:21:95:b6:ed:af:3c:1f:9d:c8:a9:bc:a2:9e:83:64:
         a9:3a:7a:7f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQj11QMCusmU0lq6CjH6LBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGNmNzJiYjZjODY4NzUwODYyODlkZDI1MThmYjAzZjg4MjJlZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoU3cCI2fazLy/b+q7g94IGxKt6U
RKRzpMgekEZLozaYExPsts6vZnxT6FDZePgWwrZppQrdFULJyOrt6HHvF6HhFsfw
dy0G+1XyMx29Av4Ut8lJAapyO9U3Gnixs4ifWSTFHdl0R+PQB2gpnVNLD0uTE/Un
0Q+31mWdxvGjtCamJEO0RvmeRjrugpup93uu90B4Ow8jjPVIXh5GUi4rncVid7DI
6yU/8Wispkv5GOXEB0MrZJ0CAXv4EpiR3xY9XEJdcxdju1db90NICBwyAqX3nG4B
kV7N47dt5i1iZmAZENxGbNbVjxd5Qd6ilKyEuXBUSVxwzspdrxRgb+L3LQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFP3PcrtshodQhiid0lGPsD+IIu6dMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzVlOGYw
Ni0wYWMxLTRlMWItYjA3Zi03ZTAzM2I5ZGUyM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNWU4ZjA2
LTBhYzEtNGUxYi1iMDdmLTdlMDMzYjlkZTIzZS8xL19jOXl1MnlHaDFDR0tKM1NV
WS13UDRnaTdwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwpHlMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCFpDANBgkqhkiG9w0BAQsFAAOCAQEANNc5y413IHtk6KNtysv71luVV8ZyvQxf
FTTefRpSEcX3V/e0BmwYIjOd6jlmnklk3vTQ1sZQ9UaHxfCJbhu43ydqUW9LLszE
YO2uBE5MTP6/n3v2tFW5lvsuUxlYEIKt7hPFJSutspjzuEXNnTYBgoOOxM2oyGsq
lP+kvYuvPaBKbSpxO8wHSF6NZndHenR8m/LvsQRoQX9FPnPYJnH0/Qli0nIfQCmG
ZuSndldFbjLzOTSoquJlcDLIW/XoYHCilYgwoXZKV+UmDxxPTttC1WsTNlcXvFSV
W0ghWM79LXcfGM9S1wv8sAJV2zPmIZW27a88H53IqbyinoNkqTp6fw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:18 2025 by rpki-client on console.sobornost.net