Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
File:                     at5urfJFy3ply0wF09VLzSYKB18.cer (raw, json)
Hash identifier:          YHrJ95+Edpv2uzwiAovFxo38WmLXGjUwZWQMlcF4D4g=
Subject key identifier:   6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427480B148892278C4287C7742C3824A0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199984

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:0b:14:88:92:27:8c:42:87:c7:74:2c:38:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:7b:83:23:b6:f4:05:34:dc:a8:45:85:01:
                    b1:6b:ce:27:84:8b:e9:2d:bd:08:b7:0c:6c:e7:c9:
                    65:a1:fd:14:7f:22:a3:ba:71:0f:24:f3:0f:ab:2b:
                    86:8d:0d:f5:05:39:e0:6c:d8:d6:45:39:7d:d5:d6:
                    0a:cf:f8:24:95:06:9b:26:83:bb:a2:d5:e5:2b:50:
                    74:c9:3a:6e:e1:a2:54:74:5e:f0:27:09:45:6e:b3:
                    7c:c9:c7:2f:6a:7d:82:12:fb:29:d1:11:53:7e:c5:
                    c3:06:ec:e0:d7:3f:be:d1:25:19:44:aa:70:df:a1:
                    dc:3f:53:fa:f3:7e:7a:27:01:78:c4:fb:b4:20:5d:
                    6d:93:5f:50:e0:6c:0e:91:2b:e4:ad:af:18:34:f9:
                    58:f2:a3:4f:f4:4d:78:33:df:5a:21:db:bb:94:e6:
                    5e:f0:73:0c:b9:18:6c:08:b4:c2:d8:0d:4a:1a:4e:
                    d1:78:fd:bc:53:d9:e4:ad:60:d3:69:3a:d1:bd:61:
                    e5:4c:ab:d4:f4:f2:8f:59:77:c3:98:6d:46:e5:19:
                    0f:4e:8b:f7:5c:4b:0a:01:49:be:58:a4:41:03:ef:
                    7a:35:10:89:03:37:0f:65:90:48:db:18:36:85:4d:
                    80:5e:98:44:de:cf:3b:c0:14:08:4d:53:9c:7b:fb:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199984

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:72:6e:29:67:df:54:c9:c4:04:8d:94:25:90:57:31:83:
         77:bb:7a:44:33:1b:d3:bf:09:1d:1d:62:2d:d9:5e:18:93:94:
         1a:42:58:3e:5a:5c:c5:16:5d:23:da:b1:41:48:dd:d1:31:10:
         f3:ea:7f:c1:7d:98:58:69:c3:1e:3e:6e:c2:ab:0e:c4:41:4f:
         64:2f:2c:55:08:89:ec:ee:02:6e:04:37:23:07:98:9b:38:eb:
         c3:8c:12:f9:05:9f:f9:4d:63:0a:bf:6e:47:6a:17:f6:29:92:
         78:01:59:2e:e9:d5:59:e6:b2:0a:7f:41:6b:ec:20:a1:f1:8c:
         b2:31:54:98:fc:e5:f9:3c:18:43:c9:23:1c:49:fa:d8:8e:5c:
         5e:3d:3d:f0:34:6d:71:b8:f8:34:df:b8:73:dd:b4:f8:7d:3f:
         ff:e6:ad:3d:16:24:7d:29:f3:53:43:34:2a:47:bc:f3:bb:7d:
         ed:25:70:74:42:fa:0d:87:2d:88:5b:0e:42:f2:63:8b:b2:04:
         08:c6:7f:3d:64:27:03:b4:2e:14:d3:bb:e6:70:f0:3a:25:eb:
         96:c5:3b:50:f2:d6:f1:72:dc:48:26:27:0c:f9:bc:ad:ba:3a:
         1f:48:b3:f3:67:a8:78:c9:e8:33:f5:69:ea:06:86:79:f1:d2:
         19:88:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:34 2025 by rpki-client on console.sobornost.net