Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
File:                     cG06u7R4t07yre-bt8QzbjQRHVE.cer (raw, json)
Hash identifier:          NYxhovb1SEPw+yAcD4WDZB/h9HDSKoQ84d7N/kaGyJU=
Subject key identifier:   70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9E454BCC42D97410C15E1DE4CD68
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213819
                          IP: 45.92.78.0/24
                          IP: 45.157.139.0/24
                          IP: 46.175.129.0/24
                          IP: 62.106.81.0/24
                          IP: 77.75.229.0/24
                          IP: 79.110.224.0/24
                          IP: 91.246.36.0/24
                          IP: 109.205.187.0/24
                          IP: 109.234.76.0/24
                          IP: 146.19.29.0/24
                          IP: 146.19.149.0/24
                          IP: 176.116.10.0/24
                          IP: 178.211.136.0/24
                          IP: 185.230.246.0/24
                          IP: 185.252.212.0/24
                          IP: 188.244.125.0/24
                          IP: 193.243.186.0/24
                          IP: 194.26.119.0/24
                          IP: 194.150.79.0/24
                          IP: 212.18.119.0/24
                          IP: 213.173.38.0/24
                          IP: 217.119.132.0/24
                          IP: 2a11:cc0::/29
                          IP: 2a11:1900::/29
                          IP: 2a11:23c0::/29
                          IP: 2a11:3ac0::/29
                          IP: 2a11:4f40::/29
                          IP: 2a11:79c0::/29
                          IP: 2a11:8dc0::/29
                          IP: 2a11:9500::/29
                          IP: 2a11:9b80::/29
                          IP: 2a11:a200::/29
                          IP: 2a11:b7c0::/29
                          IP: 2a11:b800::/29
                          IP: 2a11:c400::/29
                          IP: 2a11:e500::/29
                          IP: 2a11:f5c0::/29
                          IP: 2a12:2a00::/29
                          IP: 2a12:3100::/29
                          IP: 2a12:5180::/29
                          IP: 2a12:7a00::/29
                          IP: 2a12:9a80::/29
                          IP: 2a12:cb00::/29
                          IP: 2a12:da80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9e:45:4b:cc:42:d9:74:10:c1:5e:1d:e4:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:c1:e0:77:35:84:e0:37:45:1e:bf:c9:74:
                    11:6d:1d:07:35:8e:97:38:0c:34:c8:75:f0:6f:14:
                    56:84:7f:e5:0e:a5:50:58:1e:ca:6b:dc:c2:65:be:
                    2b:b4:34:32:6c:59:91:0c:df:22:f7:bf:e1:d9:37:
                    d9:c7:69:ae:df:24:37:4a:d7:ea:0a:84:7e:96:dd:
                    eb:5b:51:30:c4:6f:df:a9:22:05:5a:71:99:ad:6b:
                    ff:9d:d9:96:75:72:76:05:6c:df:e2:3a:34:81:83:
                    fa:81:29:3b:4e:2a:5d:16:b5:0c:e8:82:fd:5d:2c:
                    e6:db:d6:bd:b8:b4:82:8e:3b:87:3e:c8:81:0f:cd:
                    5c:d2:a1:a4:40:2c:ee:ce:ba:17:82:e4:a4:b0:ac:
                    39:16:56:41:e6:12:cb:3b:03:93:71:01:9d:6c:8d:
                    d6:f6:02:8a:79:e5:0a:14:68:b0:c1:d8:94:ce:da:
                    d7:99:8f:07:66:42:df:53:e7:1f:50:02:1c:22:1d:
                    9c:2a:8c:8c:f3:39:1c:39:70:c7:6b:2e:70:cb:f7:
                    83:7f:06:96:3e:9d:ff:f3:d1:69:3d:9c:03:d9:2a:
                    95:ec:6a:70:d5:be:32:9a:04:46:d7:bd:bd:bf:12:
                    a9:d2:c7:25:d8:83:41:d7:70:70:e4:29:a2:21:91:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.78.0/24
                  45.157.139.0/24
                  46.175.129.0/24
                  62.106.81.0/24
                  77.75.229.0/24
                  79.110.224.0/24
                  91.246.36.0/24
                  109.205.187.0/24
                  109.234.76.0/24
                  146.19.29.0/24
                  146.19.149.0/24
                  176.116.10.0/24
                  178.211.136.0/24
                  185.230.246.0/24
                  185.252.212.0/24
                  188.244.125.0/24
                  193.243.186.0/24
                  194.26.119.0/24
                  194.150.79.0/24
                  212.18.119.0/24
                  213.173.38.0/24
                  217.119.132.0/24
                IPv6:
                  2a11:cc0::/29
                  2a11:1900::/29
                  2a11:23c0::/29
                  2a11:3ac0::/29
                  2a11:4f40::/29
                  2a11:79c0::/29
                  2a11:8dc0::/29
                  2a11:9500::/29
                  2a11:9b80::/29
                  2a11:a200::/29
                  2a11:b7c0::/29
                  2a11:b800::/29
                  2a11:c400::/29
                  2a11:e500::/29
                  2a11:f5c0::/29
                  2a12:2a00::/29
                  2a12:3100::/29
                  2a12:5180::/29
                  2a12:7a00::/29
                  2a12:9a80::/29
                  2a12:cb00::/29
                  2a12:da80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213819

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:a3:5a:6c:f7:4e:b3:db:28:c3:ed:38:50:b8:3b:00:f5:
         84:f2:3d:d2:de:4f:9d:58:6f:36:45:78:0c:84:4e:1c:3c:87:
         d6:6a:f9:2d:41:7b:7f:4b:77:ed:ff:3d:6b:e8:f5:72:49:34:
         26:8b:37:07:8c:45:42:4f:26:a4:11:8d:8f:c9:38:48:0e:c0:
         49:c3:e7:fe:5e:d6:bb:74:57:d8:b7:2b:ee:ff:ee:5c:4a:ce:
         ce:64:b0:bf:2d:39:9e:52:b1:dd:8d:b5:b0:62:4e:11:bf:2d:
         96:37:64:e4:c3:d4:4e:28:c1:a8:cc:33:d1:61:8b:e1:97:cd:
         67:c5:14:86:83:9d:b9:1d:00:d6:8d:9a:4f:b8:71:f3:48:42:
         79:86:6b:da:66:57:2b:79:de:cf:00:90:9a:77:37:4c:a2:a0:
         b9:b6:74:fd:0b:40:03:7b:e0:3c:60:01:ec:62:99:4c:27:9a:
         ee:d0:01:60:60:f9:d7:42:f4:46:75:fe:52:a4:9f:3b:c9:d6:
         e0:ba:80:94:b1:5b:20:0d:7f:d5:c3:e8:4f:b2:ab:88:64:cf:
         a2:a9:67:05:81:04:7d:4c:fe:21:59:f5:3d:22:e1:46:6a:c8:
         4a:50:ed:7f:c8:f9:ac:e1:a7:3c:8c:15:c0:5b:3f:fe:59:63:
         28:e1:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:03 2025 by rpki-client on console.sobornost.net