Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
File:                     _s8oKCHaV19okXZHzz4YmPnQpio.cer (raw, json)
Hash identifier:          wklw/D1UExjeiGH+PE7wFQ/jr3zH5T7Dxil+KWJ4uh8=
Subject key identifier:   FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1D653456307FB871AD052C7DAB3DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59560
                          IP: 176.116.145.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d6:53:45:63:07:fb:87:1a:d0:52:c7:da:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fecf282821da575f68917647cf3e1898f9d0a62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:48:e4:11:4a:66:d7:e5:06:cb:7a:7b:84:
                    64:0b:06:d2:9a:07:51:b7:75:27:56:74:32:1e:1b:
                    43:db:4f:84:a3:78:ce:c9:9a:21:90:99:42:cf:77:
                    8c:0e:60:b4:2b:66:48:08:db:b4:fa:c1:f7:00:3c:
                    7d:40:be:0f:45:0e:05:1e:9e:32:48:87:a5:09:41:
                    ff:85:c3:c9:bb:13:b7:c7:50:35:06:31:79:3b:17:
                    4b:c1:3a:78:8d:70:cc:31:e6:f0:4a:75:32:89:fa:
                    0e:23:32:ba:ad:01:c2:25:4b:9b:12:09:8c:ba:e3:
                    ae:39:be:8c:13:99:00:63:b4:2f:6c:c4:e1:2b:1b:
                    00:56:c3:90:4d:71:4e:6e:61:06:44:d7:4e:5e:5f:
                    42:09:ad:19:96:87:81:63:7c:fd:c7:24:b1:14:5d:
                    55:fb:d9:80:62:ab:e2:73:1b:71:a2:f6:d8:2c:2a:
                    b6:11:bd:f5:a9:94:36:e8:e9:e9:6a:e7:2e:38:2e:
                    44:bb:4d:4e:6f:b0:8b:d6:ba:cc:8b:19:3b:4b:59:
                    e6:a8:89:6b:f8:fa:df:d5:97:63:01:3b:f3:13:db:
                    72:cd:32:85:af:cc:05:de:a1:ab:27:63:c2:ee:2d:
                    98:19:89:87:45:45:f9:26:92:e9:73:64:3b:aa:cc:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.145.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59560

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:a2:d0:11:9b:45:b0:98:83:a6:51:4a:51:bb:f6:0d:78:
         4b:61:b5:e7:8e:b2:90:45:9b:50:11:26:cc:85:5a:53:ed:1d:
         09:3a:94:67:86:81:34:69:26:ed:13:73:93:e5:06:a6:16:5f:
         77:ee:fe:91:69:62:e4:81:8e:14:f9:ab:45:c3:45:49:70:c7:
         b6:83:47:43:d9:79:38:c2:73:51:24:51:35:cd:2e:9d:4c:86:
         f1:c4:e5:6f:34:1a:00:57:51:4f:86:c6:71:0d:1f:35:39:de:
         c3:e0:1e:53:8d:f0:86:19:39:b8:a9:85:ee:52:f2:b6:99:cb:
         78:07:aa:39:81:eb:f8:4a:bc:97:a5:2b:f0:33:5f:6c:de:3a:
         4a:12:4c:41:9a:36:56:ea:ac:ba:77:85:9a:00:54:db:fd:7d:
         2a:d1:e0:da:39:83:dc:a5:5c:96:52:be:57:67:39:ff:9e:be:
         8f:70:55:66:0f:9c:d6:1f:51:15:5b:89:e1:9b:9c:ab:8b:e2:
         51:b8:7b:58:3c:ab:d8:6c:c3:0c:a7:65:6c:82:9b:2e:8c:8c:
         9a:2e:be:a3:5d:46:15:db:d2:bb:2e:e0:56:b0:ed:34:30:88:
         2e:ee:19:3b:af:7b:74:39:69:ce:33:ab:ee:ab:8b:5d:01:17:
         bb:ce:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:18 2025 by rpki-client on console.sobornost.net