Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.cer (raw, json)
Hash identifier:          Qe/nYmTFubXfkmow3PhiVLS16Iw3oIzHUPtrSygHffU=
Subject key identifier:   71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD2DF29D973383B2AE66EC7931670A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 5470
                          IP: 155.207.0.0/16
                          IP: 192.104.147.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:2d:f2:9d:97:33:83:b2:ae:66:ec:79:31:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:53:6e:ce:ff:37:d6:a6:02:93:61:01:5c:0e:
                    c2:b4:56:df:63:3e:4b:50:36:9e:26:ed:2c:17:c8:
                    1e:0a:4f:7b:8d:6e:6c:90:9a:94:ec:89:11:82:e3:
                    c2:c2:1d:ba:7c:60:c9:bd:c7:13:a0:8a:fa:6e:2e:
                    f7:58:cd:80:56:ac:cf:f8:23:55:7d:ef:ac:95:13:
                    b4:aa:29:26:ff:b5:c7:84:4a:89:0a:ab:4e:17:9d:
                    b1:3e:53:24:bd:f2:6d:61:0f:f6:94:13:ae:c7:83:
                    ce:02:eb:81:0d:cc:8e:ce:21:33:a6:1d:39:00:2f:
                    05:a9:40:f9:ca:f7:1c:be:80:96:97:c7:63:f3:b3:
                    47:02:ab:4c:3c:89:2e:e3:90:05:de:21:be:f5:52:
                    34:8f:b5:25:f4:ed:a3:90:78:1a:dd:01:d6:b4:43:
                    ea:ad:83:f6:37:7e:a4:d0:24:70:0e:b7:81:f8:5b:
                    7f:75:c0:d9:1b:9b:1c:e8:56:9b:03:99:91:97:9c:
                    ab:3b:34:bf:99:92:42:21:d1:d6:12:25:ad:7e:8b:
                    34:09:b3:1a:ac:b6:e1:2d:16:57:43:97:7e:d5:d8:
                    ce:6c:af:4e:b1:22:17:81:e5:23:e0:07:8c:f6:84:
                    b3:c5:b5:9e:cc:d9:e3:2a:bf:8c:66:3b:27:13:d2:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.207.0.0/16
                  192.104.147.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5470

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:5c:3d:e4:6c:95:d8:9a:a5:ae:c7:e6:22:2d:ae:0a:36:
         c8:dd:d9:43:b0:2e:10:c7:69:cb:41:d2:e3:bc:89:fa:ea:dc:
         b2:c8:96:47:9f:f0:40:10:c1:5e:96:ed:5b:c7:46:cd:68:18:
         82:6d:72:f4:a2:0b:49:ee:79:63:a0:52:b1:6f:0e:d1:44:12:
         71:35:1e:0b:b5:cd:e0:1c:03:df:32:28:a3:82:ff:f7:7b:01:
         1b:fa:c7:b3:21:8e:75:65:d1:ec:10:90:cb:06:45:66:42:c3:
         f7:9f:89:64:10:86:35:67:64:85:97:f0:e0:f4:41:72:f2:e0:
         1e:ad:ea:5a:67:c3:d9:39:2d:fc:dc:f4:af:47:41:77:8e:f7:
         3e:01:85:13:c7:10:cc:f8:4c:71:45:5f:fc:10:0a:39:5a:bc:
         96:2c:c1:c4:c0:bb:49:b4:05:d5:56:08:48:b0:17:54:75:66:
         b8:e4:47:e3:c1:0d:d7:26:f3:bd:71:43:c3:55:bc:26:fe:89:
         81:1a:85:fc:80:97:10:06:e9:81:5e:86:d3:e6:21:c1:98:df:
         99:af:6a:6c:91:5c:48:0f:00:1f:b0:46:57:e4:d6:5e:02:e0:
         50:20:aa:84:e0:0e:10:b6:bf:06:88:24:d7:50:b3:26:d4:7f:
         1b:df:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:03 2025 by rpki-client on console.sobornost.net