Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
File:                     dPYRYnGtLREZYKLZYaqcFi-VgKY.cer (raw, json)
Hash identifier:          zhzMN4hm4ZL/9cAH7bim9apvzYV1KgHUlwI9JU2MxRM=
Subject key identifier:   74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D600D06E74AD04C2C0F6DBFC78B137
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212563

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:00:d0:6e:74:ad:04:c2:c0:f6:db:fc:78:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:c2:0a:b3:0b:29:6b:21:f8:79:3c:a6:44:
                    8a:fb:c8:6a:b8:90:5e:9e:34:2e:6b:11:28:29:27:
                    c1:8b:ca:09:f6:ca:ba:c7:5a:ae:e6:fc:e8:23:aa:
                    92:54:c8:35:da:de:df:88:5b:b1:37:f4:5f:db:27:
                    37:09:2e:f4:a4:a5:92:8b:bf:6c:c8:4b:f3:74:0f:
                    f9:cf:37:c0:2f:bd:07:90:29:62:66:82:ec:15:0d:
                    fa:45:50:9a:d8:38:1f:b2:30:e6:5a:c6:e8:df:b9:
                    3b:8b:71:e1:e4:1f:e3:29:08:58:a1:b5:9f:40:f0:
                    68:84:b4:13:79:40:34:bd:e1:82:a8:2e:9c:19:fd:
                    f0:6b:2d:f0:9f:34:58:53:1a:1f:26:be:4c:f3:51:
                    c2:99:da:87:e1:ea:36:22:b1:57:00:06:a2:5b:a0:
                    89:93:b3:9e:18:bf:c7:47:de:bf:59:98:8e:90:d6:
                    79:c6:8f:11:be:9f:38:ca:d3:6b:ed:9d:1e:0e:47:
                    08:cd:16:31:78:9a:d6:f2:df:e8:b5:46:c4:61:fa:
                    c4:55:2c:0f:e3:b9:d4:b8:80:52:90:89:35:5c:72:
                    da:db:3a:e1:2c:e6:24:26:78:d0:d4:60:1a:27:13:
                    ee:46:2e:4c:d3:85:1f:0c:1f:27:d2:67:09:24:42:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212563

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:1b:f9:1c:71:de:a9:3e:13:af:f7:63:af:43:00:b6:d4:
         ef:2c:1f:85:bb:3c:a4:d3:d1:20:31:46:e6:6c:83:f3:79:bd:
         f1:b5:f6:23:ba:a8:d0:53:7d:b7:66:fe:72:43:de:16:eb:53:
         e0:8f:25:0a:48:5c:61:b2:08:5c:b8:5d:68:0c:19:22:82:45:
         3a:1d:3c:94:32:0e:07:de:9d:aa:f8:44:ba:0d:41:19:45:8c:
         00:eb:88:54:20:cc:39:ee:40:79:4e:25:57:2a:29:a2:53:f6:
         35:69:67:01:c5:bd:71:1c:a8:65:ab:60:71:3f:a6:a6:97:86:
         39:5c:75:fc:4e:cb:09:56:da:11:a4:f5:9e:15:be:06:87:29:
         15:70:d9:14:8e:f7:2f:6e:d7:8f:3b:5c:06:06:6b:39:86:a0:
         ed:02:ec:10:6a:8d:b8:e5:bb:1a:85:93:2b:02:26:ea:98:f0:
         69:78:e0:76:85:da:af:ff:be:6d:c8:19:ec:97:12:67:10:44:
         0d:91:48:c2:c3:0a:48:55:72:9a:c0:b6:ed:1d:52:1d:d5:1e:
         d3:79:82:61:a8:70:ef:10:3b:a1:fb:5d:79:bf:92:db:d9:e4:
         47:c3:8c:0c:d5:fa:22:8a:2c:89:aa:d8:05:2b:6b:5e:1b:02:
         86:cf:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:20 2025 by rpki-client on console.sobornost.net