Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.cer (raw, json)
Hash identifier:          PlrZQWR67XG0ubQuUdo6bbYsci014Xi5OEgpBILWM3o=
Subject key identifier:   6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C470ECD556598F47276A57E4DD2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.155.144.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c4:70:ec:d5:56:59:8f:47:27:6a:57:e4:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:bb:6c:9d:74:6f:2b:2a:0e:3b:34:99:62:
                    22:38:36:09:b9:70:e1:64:42:61:24:36:cb:44:c6:
                    da:be:9d:72:7b:5a:35:17:53:48:84:c0:a3:61:2d:
                    e6:0e:da:d8:34:b6:bb:08:91:ba:ba:81:90:47:d9:
                    22:ed:b3:3c:ae:b5:69:c1:5d:91:48:16:ee:17:b9:
                    50:ce:b2:a2:44:66:d9:6d:c5:93:29:ab:5e:10:a0:
                    39:ff:b7:05:a1:cb:35:fe:91:d5:41:06:97:32:2d:
                    01:7c:47:a9:00:5f:01:32:51:7a:7a:30:d2:c6:0a:
                    c7:6a:36:85:95:b2:ae:d8:cc:7c:8b:a1:f8:d1:d2:
                    66:77:52:ba:16:5d:f6:18:58:29:f1:1c:a1:1c:53:
                    07:4a:2b:3e:6c:df:14:88:6d:91:64:44:96:46:aa:
                    d7:60:32:92:18:e3:10:9d:97:ab:b8:55:b2:03:e8:
                    af:1f:d4:ad:74:e1:3c:53:cd:66:83:f4:fd:1d:50:
                    ae:7a:97:d3:47:17:5b:d3:8e:9a:5e:91:8c:09:9c:
                    cd:7f:be:a0:14:8f:d7:45:bb:4e:10:c2:fd:e2:15:
                    f3:41:03:82:8c:71:6c:15:fa:12:1f:6e:d6:c3:92:
                    c5:b4:67:70:b6:1e:b2:83:ff:be:10:3d:67:51:46:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:e3:24:f7:1e:b3:04:63:09:24:68:d1:9f:4c:3c:73:f3:
         8d:4f:6d:b1:91:aa:a2:e5:d8:84:9c:e5:ce:51:0d:4a:30:6c:
         e6:9c:7b:6d:62:39:34:3c:3d:77:65:96:a5:00:4a:2d:0e:98:
         54:fc:4d:16:a9:86:72:b9:d1:37:e7:cc:c4:a8:2f:56:4c:c7:
         9a:fc:32:de:46:fc:14:5b:94:89:57:c4:0a:c7:f4:10:f2:2c:
         59:bb:3d:3c:06:fe:d9:4b:6e:a1:77:7d:4c:a2:c1:ae:fa:a0:
         f6:3b:ce:37:85:6c:77:1b:c9:79:86:bd:d3:fb:84:09:0c:53:
         17:60:17:3b:fc:67:86:ed:e3:60:ee:76:77:55:5a:70:2c:c5:
         b5:44:4c:81:39:20:d8:e4:a5:e2:a2:05:da:64:5e:fa:05:31:
         21:5a:45:1f:4d:2a:f1:c5:9f:e4:e5:e4:02:7c:93:9c:42:8a:
         47:90:2c:82:21:42:c4:7a:ca:64:9a:b0:24:cb:c8:4f:8c:b9:
         dc:95:04:42:69:a7:93:e5:40:7f:b7:79:a1:a3:df:4a:cd:c8:
         a9:30:ac:50:37:52:e4:36:70:e1:41:11:75:cf:41:cb:79:d4:
         1a:ca:f2:26:2e:8b:db:b4:36:31:6e:6f:ad:76:f3:cf:82:6c:
         ac:34:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net