Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.cer (raw, json)
Hash identifier:          yXdF4VX7y85oPSkkV0fcV3T65750in2RLylrtjMYdCU=
Subject key identifier:   69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194CC132507A6387D67343479E971B43648
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 13:49:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58051
                          IP: 45.154.196.0/22
                          IP: 193.105.184.0/24
                          IP: 193.105.207.0/24
                          IP: 2a01:fdc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:cc:13:25:07:a6:38:7d:67:34:34:79:e9:71:b4:36:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  3 13:49:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:6e:ae:80:3d:81:31:0b:86:89:5b:28:01:
                    0a:be:b8:a9:5a:f1:c5:15:bb:c8:f5:51:39:3a:46:
                    d1:d4:96:45:21:18:8b:02:93:07:61:a2:92:6a:31:
                    0e:55:03:52:3e:ea:b6:50:7d:4c:49:4b:ce:d0:94:
                    70:91:38:cc:9b:36:f9:54:02:0f:aa:4b:ae:dc:05:
                    af:3e:df:bc:5f:b9:63:59:ab:90:df:41:bf:6b:a8:
                    db:3a:a3:e3:38:6f:b8:f2:3b:06:b7:07:26:95:79:
                    5b:3f:d2:dc:b0:31:fc:60:e6:05:31:b8:e1:ce:e1:
                    ea:88:76:79:41:4d:92:30:c3:c2:59:d5:58:06:98:
                    df:c0:c9:4a:1a:96:d1:92:54:3b:19:43:2c:4d:76:
                    1e:3d:f7:69:e4:1e:c2:12:03:86:e2:91:40:b5:5f:
                    93:2f:88:c7:4a:e7:7e:37:82:93:34:c1:12:47:2e:
                    ab:f0:f7:b1:21:9a:a6:5f:c0:d9:c2:7f:48:73:c3:
                    ee:e0:e2:6b:20:9b:eb:21:35:38:bc:c7:23:c2:71:
                    13:40:da:e6:76:88:7e:b0:a6:35:fb:6c:63:f1:57:
                    4c:7a:e0:de:81:b9:10:63:a8:01:76:31:79:3e:1b:
                    2a:91:54:34:de:fa:27:b7:43:37:d7:a0:8f:5c:7f:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.196.0/22
                  193.105.184.0/24
                  193.105.207.0/24
                IPv6:
                  2a01:fdc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58051

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:de:cf:e7:72:81:95:0f:61:3a:17:49:cb:33:b6:c1:92:
         62:c1:b2:c5:f7:06:8a:31:4c:d5:16:c3:68:30:2b:07:3f:07:
         ea:48:1b:bd:7f:c0:fc:2f:b7:52:9b:00:1d:66:3d:fe:66:7a:
         9b:da:cf:75:ab:58:dd:d7:f3:cd:a1:24:a4:06:53:1b:c0:cc:
         a5:9d:17:5d:7b:61:a2:0c:dd:cd:6d:7d:11:48:64:6b:79:7e:
         47:ed:75:db:5b:95:84:6a:51:b8:9c:1c:36:5f:5b:07:b0:87:
         5d:d6:14:82:98:f2:3a:2f:86:1e:93:1b:42:05:a7:42:30:3f:
         bf:6f:01:75:85:fe:aa:7f:a6:20:62:e0:f3:4f:f7:82:3f:de:
         f8:c0:25:c8:cb:00:de:1c:29:2d:62:a6:ae:2c:10:6e:01:c6:
         af:5e:14:29:40:63:da:31:d4:59:75:0b:64:e7:45:b1:55:a2:
         0a:e1:28:32:e6:73:04:2a:7d:0d:1c:5f:ef:05:87:14:a3:97:
         6a:17:28:af:ac:8b:17:9c:ee:1e:e9:d3:35:5b:b3:61:f3:20:
         77:8e:a4:f1:01:84:ea:4e:11:a9:7f:63:b6:ad:fe:50:33:4c:
         08:a9:b9:17:60:91:20:5b:ad:75:1c:13:83:61:b4:75:d5:c0:
         21:fc:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:30 2025 by rpki-client on console.sobornost.net