Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
File:                     e-714WwUZ9p6AvGSN2U65CsQllI.cer (raw, json)
Hash identifier:          grwipGNQAv5O/Ie1/fSAXPcCsZj5pk5YD40GztRYka0=
Subject key identifier:   7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252151D79DD352CC100C26A82380DFAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205890
                          IP: 91.196.144.0/22
                          IP: 91.207.72.0/23
                          IP: 91.207.94.0/23
                          IP: 2a0a:de40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:51:d7:9d:d3:52:cc:10:0c:26:a8:23:80:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:a2:11:e2:fc:19:8a:68:02:d5:be:61:41:
                    17:e8:68:97:d4:d0:b4:52:53:ee:08:f2:81:a7:c5:
                    7e:cc:ef:69:df:d5:a9:36:30:ba:c6:06:10:2d:0f:
                    ed:a7:c1:17:7f:44:e5:d7:af:68:25:27:15:0f:df:
                    09:dd:ef:10:1a:7a:91:81:9e:61:b0:a8:c5:2a:a3:
                    8e:18:94:ab:3f:32:55:7e:70:85:3f:40:ce:58:07:
                    38:21:2b:2f:c6:72:d3:6b:e0:35:e0:17:92:26:82:
                    06:e4:2a:ce:08:d7:6c:30:1b:db:42:b7:d2:e3:0f:
                    c5:f7:e5:13:a0:b9:32:3c:8f:cc:f0:35:71:37:e3:
                    a8:fb:7d:6b:c3:54:dd:c1:a9:8c:58:ae:ef:54:07:
                    2a:cc:b2:8e:cc:68:76:9d:6b:5b:df:95:57:5d:51:
                    57:7d:5b:46:d9:e3:0b:ed:6e:81:e7:b7:38:d2:74:
                    bd:84:c9:7a:09:04:95:61:81:67:b3:32:65:a5:c3:
                    a6:81:70:d0:e4:cf:be:db:40:ac:93:34:ef:44:91:
                    7f:58:4e:d7:64:7b:5a:aa:f7:9b:8b:42:ca:42:14:
                    a4:1b:53:d3:6c:cf:f0:9d:28:15:bc:69:11:9c:dd:
                    69:0b:cd:13:a7:2c:2c:92:61:29:2c:f7:1d:7d:62:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.144.0/22
                  91.207.72.0/23
                  91.207.94.0/23
                IPv6:
                  2a0a:de40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205890

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:bc:26:3f:4b:06:37:dd:d5:80:a6:61:5c:3f:7a:6e:53:
         34:f5:26:b6:da:a6:e4:7d:3b:75:e9:90:71:9c:84:c5:a9:da:
         de:69:44:2f:3e:2b:e4:f5:d6:6c:ed:d5:c3:91:ff:ad:ff:9e:
         c0:ab:dc:b1:0b:bd:3f:20:bc:29:5d:fb:fd:b9:1b:66:93:e7:
         bb:5d:c2:cf:f3:43:ed:fb:b7:5a:f1:8d:01:67:86:bf:fc:94:
         2f:5e:84:11:bb:98:ca:15:61:7b:db:36:83:aa:4b:38:b2:09:
         58:8f:16:6c:85:05:4c:c2:41:5d:2f:d5:e9:fe:e2:9c:48:6d:
         49:8f:5b:5a:d8:06:08:94:0b:26:e1:c6:80:98:c6:fd:b3:a6:
         ea:6f:da:74:ce:a2:6c:40:af:1f:5d:3d:de:dd:75:8e:6d:cd:
         d5:e8:1b:42:36:4d:05:4a:fb:69:ef:50:52:60:06:0a:47:08:
         1e:3b:9a:99:e9:f4:0c:7f:46:56:36:96:46:90:70:54:76:b1:
         90:8a:03:f1:a4:fb:2f:25:49:26:78:17:d0:ec:b1:16:24:d6:
         18:3b:d7:e7:95:2b:9d:ae:c4:ad:9f:14:d0:d6:d7:a9:1e:fe:
         2f:4c:35:94:92:c2:0f:c5:b7:20:99:05:87:3e:92:b2:1f:3a:
         5e:66:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net