Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
File:                     dvMR7xWBoA5DfNcEtigayGIa_FY.cer (raw, json)
Hash identifier:          FcAwoPMMXdLPOYPHNYKzAwqwH/E1+DI0Qf9pR7hHzJs=
Subject key identifier:   76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C754A3FE0AAE7BB266C96A50D9007
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8361
                          IP: 185.38.20.0/22
                          IP: 194.2.155.0/24
                          IP: 194.169.249.0/24
                          IP: 195.22.144.0/23
                          IP: 212.104.192.0/20
                          IP: 2a04:7140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:75:4a:3f:e0:aa:e7:bb:26:6c:96:a5:0d:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:96:0c:bc:5b:91:85:72:f4:75:51:66:03:
                    29:e7:ec:ef:4a:8b:43:f7:e9:77:4f:38:db:01:4c:
                    cd:ed:06:70:ef:03:10:8e:ca:5e:75:c6:5e:bd:88:
                    2b:fc:f6:80:24:b0:f9:a9:63:84:55:8a:eb:d8:97:
                    99:19:44:45:aa:b0:6a:f1:3f:9f:b9:9a:56:15:c5:
                    54:4a:aa:1e:15:3d:eb:41:9e:4f:46:30:b5:92:41:
                    69:f2:14:8b:aa:f2:76:5f:e9:3c:40:00:82:02:6c:
                    19:a6:0d:37:95:78:e9:3c:b4:5e:dd:24:44:da:0b:
                    59:6c:af:c4:58:30:df:e7:c5:ee:ca:22:bd:ba:1e:
                    6a:8e:35:f3:65:59:7c:a4:23:0e:c2:04:36:88:c4:
                    e2:6b:e3:28:df:24:d8:dc:3f:5a:d6:75:9c:0e:64:
                    81:aa:a2:88:e0:7f:17:65:81:bf:f1:8d:74:ad:59:
                    de:04:f0:84:7c:03:8a:13:d1:36:0a:ea:5a:39:d1:
                    f0:e9:84:c0:d5:a9:b2:1a:81:e6:ce:94:61:62:20:
                    d2:57:26:6b:28:49:b4:a4:a3:d2:7a:d7:b0:68:21:
                    10:05:70:12:db:24:36:33:ff:c5:4a:59:62:64:c2:
                    b8:0b:b1:da:ad:7b:e4:9e:61:d0:be:64:59:93:5e:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.20.0/22
                  194.2.155.0/24
                  194.169.249.0/24
                  195.22.144.0/23
                  212.104.192.0/20
                IPv6:
                  2a04:7140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8361

    Signature Algorithm: sha256WithRSAEncryption
         ac:63:88:e6:08:19:39:59:59:6b:1b:d6:3a:1c:ec:48:3f:35:
         88:d4:59:82:13:b6:37:ef:b1:27:d4:dd:af:c4:e6:1d:d4:a4:
         63:36:7a:3f:ef:bf:7f:bb:4e:5b:90:2a:6d:a7:a8:dc:42:0a:
         e7:29:85:75:46:c7:52:f2:b0:95:54:8e:20:be:04:9f:fc:82:
         35:4d:70:d3:09:97:bb:b4:f4:58:85:53:3d:63:ff:eb:48:bc:
         00:09:98:ea:eb:63:d1:f4:26:21:80:a6:ca:11:02:64:a4:9c:
         65:b0:ad:b5:6c:30:09:c8:02:f4:5d:48:a4:8e:bc:14:b7:09:
         1f:7e:95:8f:be:43:c0:0e:9f:a6:8a:fc:54:e6:6b:b2:6b:21:
         3d:bf:d8:32:cd:db:7e:5d:e9:b1:61:6a:6c:4f:43:3b:ac:b0:
         c8:28:36:d7:20:82:e2:64:2f:9d:45:fc:09:4d:c7:b6:7f:f3:
         66:d2:1b:20:b8:05:42:1d:ca:58:58:f3:74:f2:bb:88:6b:69:
         53:3d:ae:84:3f:fe:f8:68:a8:7e:ee:3b:25:fc:5d:bf:34:c2:
         48:91:fe:58:80:2e:67:f4:fd:79:f3:5c:35:7f:74:03:4b:ac:
         b2:4f:a9:df:c3:58:35:44:fe:2d:4e:d3:9a:27:6a:a8:08:bc:
         06:f4:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net