Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
File:                     e27QJ9N71hCaAxHihp00StlZNfk.cer (raw, json)
Hash identifier:          yuillTHHkCZ9s/g9SERiaspTN68ep5pF0gsR4y4buIM=
Subject key identifier:   7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C34B2CB0DBC029FE7F6149AC2BC12
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211468
                          IP: 185.190.38.0/24
                          IP: 194.169.166.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:34:b2:cb:0d:bc:02:9f:e7:f6:14:9a:c2:bc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:41:9b:79:79:f4:c4:d6:db:36:3b:87:ad:
                    a4:71:4c:50:e3:95:df:ed:18:bc:fb:4a:6d:e2:71:
                    7e:d1:2d:ad:e9:b6:b1:9f:3d:ea:9e:a4:33:8b:6c:
                    4d:18:51:17:f8:a0:46:d4:a6:cd:ec:b5:8a:d5:0a:
                    03:c6:69:cd:43:fa:9b:0d:22:c4:88:22:cc:50:8b:
                    79:f8:36:60:7a:2f:a9:8d:63:c1:2d:5f:35:e0:42:
                    bb:08:10:aa:d3:83:0f:62:bd:f1:d3:a1:45:fe:d8:
                    2a:3c:44:59:ed:b1:82:9c:ee:44:7a:80:cc:79:6b:
                    93:00:e5:39:fe:fe:f1:20:7b:73:68:87:96:b0:da:
                    8d:a3:3a:dc:2c:6d:d3:ac:8b:30:2f:33:10:39:1d:
                    9e:44:09:01:d4:83:6c:34:c8:fb:c3:45:28:c9:65:
                    32:85:69:37:66:18:5c:09:66:74:c6:3d:2f:85:67:
                    0c:8e:24:f5:a1:f1:b1:d2:e2:c2:1f:c7:6b:f8:e9:
                    c8:16:40:9c:3f:36:38:db:38:d5:95:21:65:33:ac:
                    79:60:b4:2d:c8:ae:3a:df:c0:e7:04:03:37:37:4a:
                    54:fd:cc:f2:82:81:4e:5e:36:8c:25:75:59:18:a4:
                    d4:81:4d:35:23:b0:74:32:6c:7b:68:e5:f8:2c:23:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.38.0/24
                  194.169.166.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211468

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:4f:f9:8d:54:70:da:67:a9:40:10:87:6b:04:61:15:d1:
         3f:27:c1:ca:e1:49:fb:f7:3b:53:22:68:b8:84:9a:12:ef:77:
         c3:d2:e1:36:3e:db:fd:8b:59:4b:f8:64:54:8c:1c:7d:f4:a6:
         60:ee:95:e5:13:0e:e7:6f:34:be:9c:fd:52:7a:a2:6b:cb:a3:
         df:1e:a9:ab:3e:6f:86:4d:61:d4:f2:79:80:67:3e:0f:eb:86:
         e2:46:a2:9b:c6:5b:84:d6:0f:6f:8e:2c:50:c9:25:7e:3b:d6:
         e6:27:b2:f4:d7:a7:9c:5f:83:de:c4:29:ed:ee:37:66:5d:41:
         82:0e:cc:f8:55:67:3a:c7:6b:70:9e:23:b0:60:e4:21:f4:d9:
         f6:2f:bf:ce:01:d2:dd:3d:51:75:95:b4:d2:63:d3:7d:e8:29:
         99:c0:04:12:41:b0:86:f1:93:c1:ee:00:22:89:a0:2a:24:e1:
         dc:d5:12:5f:b8:25:44:b6:0d:e8:73:90:a4:09:a4:44:90:b7:
         67:40:de:8c:7b:dc:07:55:8b:e8:8c:fc:f6:b6:48:7b:4f:62:
         8b:06:d3:5c:aa:df:5c:a7:d2:9c:f9:55:62:19:69:89:ad:7a:
         99:3f:f7:1e:22:be:ee:85:e4:3d:88:b6:4e:40:d2:cc:69:1c:
         c9:9a:c8:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net