Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer
File:                     d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer (raw, json)
Hash identifier:          tldWk0sjykyrsmreH0s57AwrQYs81vmyjQlqK2rDkAI=
Subject key identifier:   77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C3F8D9D70B571C972CC9C4DBFB826
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210836

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:3f:8d:9d:70:b5:71:c9:72:cc:9c:4d:bf:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7763e47fc850acc8ffda06e3da23a4a444c2d6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:5f:f4:6b:b1:98:b1:ff:58:cc:60:2e:65:
                    41:35:d7:f1:a2:0a:f9:83:0d:b7:18:a6:de:0d:60:
                    ce:7f:64:28:fc:17:46:29:cf:a7:a3:c1:8a:a2:00:
                    6e:df:ab:3b:eb:cf:b2:ee:97:34:33:89:0b:73:fa:
                    08:cf:94:8f:22:85:c1:d9:5c:44:4d:5d:a9:b5:58:
                    42:80:5f:46:b7:c0:4d:b0:9c:27:35:e4:ce:bf:be:
                    87:a7:a5:80:5c:c1:00:ab:b2:58:d3:c0:ff:a2:bb:
                    55:10:ec:32:95:6c:5f:60:11:e0:34:ee:de:79:d0:
                    52:83:19:08:2a:de:80:c0:9e:0c:09:48:21:d4:6a:
                    0d:56:eb:1f:e1:c2:9c:8f:31:36:2b:41:8c:a1:69:
                    5c:3a:f8:f0:7c:1c:3e:c5:ec:61:b9:63:fd:2b:d2:
                    d6:42:70:77:49:6d:69:b9:35:6d:d9:a4:cb:26:bb:
                    3c:01:49:11:a4:4a:52:c8:00:5c:5e:95:3b:0a:b8:
                    d9:c3:de:78:c9:c4:72:08:5f:9c:3b:70:8f:14:c5:
                    0b:31:c7:11:79:87:5c:20:02:7e:13:e8:29:43:a4:
                    3f:c1:3f:aa:c4:7c:f5:ac:60:b8:df:fb:d0:4b:68:
                    dc:14:cf:8c:44:f2:7c:b2:fd:c9:3e:6e:9e:82:70:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210836

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:9a:ad:58:46:e0:09:d9:81:41:d3:f6:b4:18:bf:76:b8:
         e8:d2:25:96:c2:b8:69:36:0d:bc:82:57:9f:87:3d:8c:46:50:
         2b:c9:c9:18:8e:29:dc:96:bc:6b:57:b3:e7:f1:fb:e7:84:19:
         89:54:7f:98:11:4b:b4:26:95:18:7a:f6:bd:18:f6:52:e3:ea:
         53:63:d5:d9:50:b8:9f:7c:fc:1a:8d:b9:35:d1:64:91:69:ac:
         31:3b:08:41:e4:b6:14:d4:96:b5:c2:14:66:6f:fe:83:d5:4d:
         9f:1c:6d:77:59:6c:b1:b7:1b:88:3a:32:ad:5a:65:5f:81:f8:
         a2:2c:1e:12:e4:4d:81:ec:c2:69:6e:4f:2e:c7:58:26:b7:73:
         c4:2c:6d:60:06:b4:02:3a:51:d7:ca:f5:1f:bf:f6:a5:41:30:
         fb:a3:27:91:cb:7c:54:5e:cd:97:e0:9f:5c:16:a0:3f:8b:82:
         84:79:c1:c4:a7:6c:d2:b5:ac:5d:a3:30:ee:fd:a1:29:54:ab:
         83:43:5a:bf:13:b6:0c:12:8c:23:aa:df:85:28:08:b6:f5:07:
         e7:f6:be:8d:ae:8f:61:cd:c4:77:24:9c:6f:aa:5e:6b:b1:74:
         6d:29:15:f2:31:57:41:dc:28:d0:40:a1:4d:bc:60:29:45:b9:
         b9:45:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net