Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.cer (raw, json)
Hash identifier:          tzeLf6RZ8roG1iL/KEN4ixZvR6qKcrhcTCUQy3IkyZQ=
Subject key identifier:   79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA3BA0CE6EDE3E01D73C3DB5B3F399
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204297
                          IP: 185.253.180.0/22
                          IP: 188.64.136.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:3b:a0:ce:6e:de:3e:01:d7:3c:3d:b5:b3:f3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:2e:b8:50:69:ba:25:60:59:12:20:38:17:
                    da:1e:7c:00:1a:3c:52:76:28:70:b0:74:fa:2f:35:
                    d9:1c:fb:c6:01:8a:4e:75:71:b8:36:e2:9b:78:50:
                    a7:68:b3:a8:7a:4f:2b:bc:1b:1b:8e:57:fd:89:14:
                    23:c8:f0:cf:53:74:f4:fb:11:f3:e4:06:c7:fc:d0:
                    69:14:10:e9:b4:d6:4a:fc:b3:f7:9d:cc:cc:4e:74:
                    03:de:5a:43:c3:48:77:ef:85:f7:e0:79:e5:e1:ee:
                    11:77:65:b6:d2:3f:1f:cd:f3:b1:48:12:ff:d3:7c:
                    cb:78:35:65:8b:bf:f1:62:cd:4c:3d:90:70:ee:26:
                    94:df:d9:55:0e:b2:ec:93:99:47:14:f6:bb:e2:94:
                    0e:ae:60:6d:d5:df:b4:26:8f:61:4c:70:b9:88:ce:
                    e6:51:91:d3:f7:f7:5a:dc:ae:a3:1e:a7:8f:4e:2d:
                    7b:8a:dc:c7:3f:73:8b:19:4a:3e:d4:de:73:68:d9:
                    59:af:3f:b1:18:1e:0d:0a:54:54:1f:6f:34:c4:e0:
                    f1:2d:ad:20:0f:c2:5c:12:ca:ce:d7:cb:cf:d2:15:
                    20:bf:e4:bb:45:09:20:3b:a9:3e:9d:87:a9:27:6c:
                    e7:e8:7f:da:4e:25:95:0a:c3:fa:b0:67:ce:cf:54:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.180.0/22
                  188.64.136.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204297

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:04:fa:5d:13:a1:f1:c2:cf:95:31:94:97:51:28:1d:30:
         40:8a:67:b2:c7:c0:94:2f:07:cc:7f:21:b3:1f:6f:55:85:ea:
         f2:18:5b:0a:f4:17:17:11:1e:e4:d2:e7:60:04:9e:6f:b7:99:
         9a:ab:1c:b0:bd:4f:4d:1c:2f:7e:49:0d:3e:20:19:bf:8c:65:
         23:70:7d:c1:6a:1c:cc:13:9c:e3:68:24:84:17:35:2c:d8:e2:
         39:88:0b:44:35:b2:9d:6f:1a:6c:de:60:4c:a2:67:f5:6d:e3:
         3f:20:e8:b1:3d:23:e5:dd:a5:b4:8c:c3:9c:ae:06:4a:fc:2f:
         16:67:7c:f2:fd:62:a3:f1:c0:cb:e0:b8:90:f3:45:32:30:d1:
         04:bc:76:e2:cc:83:44:05:46:0c:78:44:27:e8:1d:74:03:95:
         34:c9:f3:ea:e5:21:3b:a1:2f:66:6c:ba:da:5e:73:32:94:f7:
         36:db:c8:de:c9:0a:27:ab:22:23:88:fe:5f:65:85:15:b8:2d:
         05:cf:99:1c:85:a6:2a:24:be:9a:70:39:e7:42:c5:40:43:e1:
         30:81:a9:b5:30:4b:1c:d6:2b:e0:2b:8f:4f:a4:b8:a0:c5:c8:
         5f:3d:d4:14:75:42:ad:8c:71:b0:49:6a:f6:8a:56:0e:f2:c7:
         42:05:66:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:40 2025 by rpki-client on console.sobornost.net