Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.cer (raw, json)
Hash identifier:          8xGGCWYtUR+k0Qq9VMk3rhzh9SuqNZ3XIW3pyMCCQ1I=
Subject key identifier:   79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961A40E5B9E72D5B11003D3734154DF4C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 11:13:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.34.193.128/25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:40:e5:b9:e7:2d:5b:11:00:3d:37:34:15:4d:f4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 11:13:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:9c:5b:3e:99:21:d1:d5:69:08:c1:ee:48:
                    b4:32:cf:31:f7:fd:19:b9:15:bb:f2:85:de:e9:7f:
                    09:f7:c0:fb:a1:ed:f2:9c:6c:8d:30:e0:af:0b:cc:
                    f3:97:3b:16:63:45:4c:e3:3a:d2:94:c9:8d:96:b1:
                    ee:61:1f:96:7d:9c:6e:d5:73:ba:ad:21:a9:62:6b:
                    ac:8c:1c:24:7d:8a:92:6c:46:ce:6b:33:cd:a4:00:
                    cf:46:e1:b3:c6:49:7c:40:ea:8f:98:ad:24:b4:71:
                    81:98:30:07:5b:b9:d6:93:89:fb:b6:b4:d5:8c:58:
                    91:c4:47:bb:e9:17:df:f5:15:7e:fb:41:d7:53:45:
                    16:5d:e1:13:c2:31:9b:f7:d9:88:33:72:80:d5:fc:
                    81:ce:82:53:f2:dc:0e:2b:f5:75:17:71:9c:bc:a5:
                    55:a3:36:f6:3d:51:98:7a:a1:c4:32:a7:24:2a:76:
                    11:7c:1a:c6:cf:6e:a8:a8:5c:81:c2:bd:3c:8b:60:
                    2e:96:67:e2:57:55:e4:7a:65:62:7e:04:af:b2:b3:
                    81:40:38:9c:59:e1:3a:ab:8d:cc:21:64:79:a0:5a:
                    94:fa:02:8e:25:e6:d2:04:0e:7b:3e:09:2b:9a:b3:
                    0e:f9:83:ae:06:0e:4e:30:0d:4c:e2:20:50:72:ab:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.193.128/25

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:38:39:04:e4:24:e1:ea:98:f8:5b:c5:14:48:1c:d3:84:
         a7:20:bd:1c:02:a9:66:a8:9f:ef:52:17:0c:d8:e8:04:2a:fb:
         85:aa:22:18:f5:7a:06:c6:1c:7a:8f:dc:86:de:d1:fa:a7:c1:
         ee:5f:73:af:b9:dd:73:fd:04:35:23:61:6e:32:ba:89:73:ec:
         db:4f:6d:ac:35:f5:20:e5:3e:97:c3:4f:65:2f:57:8d:e1:68:
         16:3f:e8:48:90:34:91:12:85:e4:39:40:17:39:a3:5d:19:4f:
         2d:5e:e2:c2:25:68:6e:d3:10:7f:93:af:a7:21:cb:1c:c0:ce:
         1d:06:b2:dd:13:3d:47:43:3c:94:f0:6a:84:96:43:6d:88:3f:
         3e:5a:44:02:8c:d2:27:7f:20:25:a8:4a:b7:fd:18:af:c4:4a:
         77:27:33:ba:9b:80:ca:84:f2:19:34:4c:68:84:92:b9:c2:28:
         1f:61:82:70:73:44:a7:90:50:27:d7:c2:5c:73:d6:7d:f0:c4:
         90:07:1c:79:ed:ab:26:71:72:55:9c:ff:97:e7:01:ce:81:14:
         50:b3:ab:cc:aa:a1:fb:92:7a:bd:d7:74:56:de:a7:3d:51:d7:
         7b:9a:d4:fc:46:01:f7:e0:60:90:5b:07:dd:03:7c:f8:e0:f0:
         6f:0b:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:40 2025 by rpki-client on console.sobornost.net