Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.cer (raw, json)
Hash identifier:          PBVzxHO1+mQAPXrjHZAf0CTkRtL0tfAf6849tU8Qc0c=
Subject key identifier:   7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C2CB35988BDEC458AFB30027F0155
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213260
                          IP: 46.232.144.0/21
                          IP: 80.67.112.0/20
                          IP: 80.249.32.0/20
                          IP: 87.238.0.0/19
                          IP: 89.249.176.0/21
                          IP: 2a07:f500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:2c:b3:59:88:bd:ec:45:8a:fb:30:02:7f:01:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:8a:a1:3d:e5:28:74:89:78:bb:05:49:21:
                    cf:ec:22:eb:95:c0:79:12:15:c1:28:0d:e3:cf:9e:
                    2a:9c:23:e9:39:0a:80:cb:2c:03:50:00:8d:7c:9f:
                    05:d5:06:a5:44:88:88:31:6d:e7:64:eb:13:b1:63:
                    4d:d2:c9:45:1f:e1:c4:19:43:0e:3e:bf:2c:10:5e:
                    bd:61:3e:a4:72:94:2a:8e:d8:dc:ee:10:57:eb:df:
                    e4:fb:f3:ca:2f:71:a5:c2:1d:4e:04:1d:64:8a:dc:
                    78:44:09:75:7c:87:1c:85:eb:59:dc:ec:36:62:f4:
                    8b:4c:50:ea:75:cf:cc:74:e2:39:70:c4:db:3c:c2:
                    ed:02:0f:f1:65:9c:b3:44:74:93:11:9d:0a:c2:82:
                    17:cf:ee:37:a0:39:72:0d:e5:e2:f2:80:c0:df:41:
                    e0:e0:26:03:63:93:50:f8:ce:69:14:70:85:9d:ae:
                    ca:79:cb:74:37:9d:b8:03:75:55:e2:51:b7:16:89:
                    da:31:f3:1d:ac:21:74:d8:08:6b:ea:f7:6a:19:ce:
                    71:4b:18:e9:58:9f:05:59:96:53:af:54:de:e6:26:
                    25:9c:a3:e1:2d:a7:65:dc:05:18:54:64:af:01:85:
                    72:ac:f4:08:6e:35:ed:eb:92:7c:f6:ca:6f:ec:d4:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.144.0/21
                  80.67.112.0/20
                  80.249.32.0/20
                  87.238.0.0/19
                  89.249.176.0/21
                IPv6:
                  2a07:f500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213260

    Signature Algorithm: sha256WithRSAEncryption
         50:43:3b:b5:12:59:05:b1:10:2e:3c:2e:9d:a8:87:17:10:e6:
         6f:b5:83:04:23:db:a7:01:a6:5e:17:21:e7:b7:45:5a:45:64:
         13:de:a9:40:46:ea:86:d8:d9:b0:dd:fc:64:60:76:df:be:c4:
         48:fb:06:89:18:fb:c8:dd:4c:b2:e2:28:49:29:01:f8:e3:60:
         d9:ee:1c:66:32:6b:58:f5:e1:e9:50:01:ad:91:81:ee:13:4c:
         17:3a:85:88:2d:61:c4:49:3b:04:67:26:37:19:9a:ca:64:ba:
         35:49:ae:60:b3:0f:c3:aa:40:34:ea:e4:54:5d:59:64:60:6b:
         b2:98:7d:7a:ef:3c:14:ad:0f:15:97:db:8c:a7:b5:30:2e:fb:
         1b:46:43:c3:e7:e4:64:a9:04:2d:0f:43:35:a9:6b:c1:06:59:
         78:3e:b4:46:a3:ac:97:36:a8:b3:6a:af:c8:05:05:ea:f0:b7:
         05:6a:6d:68:05:b9:a0:8b:87:6f:49:72:61:6f:25:eb:8d:cb:
         71:6e:df:d0:4d:ed:b3:3e:58:a8:74:b6:58:63:0d:2d:db:23:
         08:aa:40:d8:3a:86:01:0f:d6:54:75:e3:2a:6f:5f:5b:07:de:
         dc:e0:5f:4e:b1:cb:1b:c5:d1:ee:71:ed:cf:34:05:d5:6c:47:
         46:f0:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:44 2025 by rpki-client on console.sobornost.net