Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
File:                     eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer (raw, json)
Hash identifier:          DC3qz8Pz/tQ309QxaOmn+LWs69lYCQr+wtMPUGyEcAw=
Subject key identifier:   79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A185D049DF7C22EFB7893D02D25CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58277
                          IP: 185.247.220.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:18:5d:04:9d:f7:c2:2e:fb:78:93:d0:2d:25:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:c9:b3:1f:be:d7:05:db:b7:33:8e:2a:15:
                    c9:62:de:4a:10:02:6f:f4:3a:de:17:bc:48:c9:2b:
                    47:bf:e1:d2:35:45:b3:aa:d2:ac:fd:6d:f1:88:89:
                    c0:6d:5e:69:27:e3:d5:37:bb:66:f3:7c:ac:b4:1a:
                    fe:a9:71:a7:44:d7:94:ee:9c:c7:5b:a5:f4:87:de:
                    5d:5c:30:81:62:9b:75:c0:be:48:a6:66:64:ae:4b:
                    7c:6c:e4:d2:22:ca:74:27:86:21:8f:64:dc:0e:f1:
                    52:38:49:38:87:be:d9:11:86:54:3c:fd:21:1d:c9:
                    e6:c9:be:98:ef:f4:2b:8f:40:c4:62:4b:56:93:d9:
                    43:bb:4e:08:fb:1f:af:1a:4f:cf:ab:f2:e9:9c:8f:
                    03:61:d9:5d:a7:8e:e0:a1:26:5c:84:ec:f0:71:f3:
                    a4:a6:b3:2c:ba:0c:f6:4d:de:ca:22:2c:3e:d6:4a:
                    b6:a3:96:6c:90:92:7e:86:76:cb:fc:51:50:36:04:
                    ad:eb:cf:d6:f5:1b:af:c8:f9:a0:0a:76:ac:2f:a9:
                    fe:d4:e3:ba:9f:a6:78:b3:6b:9c:62:dc:24:26:b2:
                    94:b6:a8:46:e8:4e:4f:d2:61:c4:d1:f6:73:59:d4:
                    9a:69:3e:22:6d:df:ce:ea:ed:f5:a6:5c:78:f3:5d:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.220.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58277

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:28:08:23:7c:9c:85:99:7d:3f:19:69:1f:18:31:fa:51:
         32:9b:81:80:34:48:2c:67:2e:0b:96:87:1c:64:d3:0a:2f:7e:
         44:7d:ba:2c:53:1a:23:54:ae:4e:8e:a6:b6:c8:9a:18:e8:c0:
         dc:67:d5:d2:6b:ea:a4:8a:c5:dc:98:53:3b:02:87:b2:af:69:
         a3:27:23:1f:de:ac:36:8b:09:98:b6:ab:c6:84:88:6d:00:e7:
         a8:0e:b6:34:fa:d6:78:9f:ad:9e:c6:08:18:4b:ca:a8:71:24:
         f8:f5:f4:a1:f8:f6:90:2f:9b:b6:87:e9:46:2c:8b:d0:1c:76:
         3a:8f:da:37:d3:0c:54:ed:22:00:be:2d:ea:b5:99:89:c9:5f:
         bf:34:1b:31:44:c3:a8:44:d7:7e:29:b2:87:07:12:8d:a1:64:
         d3:e4:74:0b:02:6f:8b:72:27:e0:7e:d6:ce:12:61:7a:e7:a2:
         af:10:04:96:97:29:67:05:3d:c6:56:78:fa:e9:b2:6e:6c:bf:
         9e:1b:65:e7:b9:e8:32:bf:f0:b0:0a:51:4d:3d:4b:f1:eb:0a:
         11:5c:e8:c9:11:cf:6f:f6:01:d3:3e:bc:52:84:35:78:8a:07:
         e8:14:9f:0a:20:7a:84:f0:06:5e:cb:64:5d:ff:90:e9:a6:79:
         0e:43:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net