Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
File:                     ejClouMyTV5BJmf58pb1KvKXu00.cer (raw, json)
Hash identifier:          UqxVPu9AifXwiC0o7HH0/IF/Ja6PVaa403FtKxOmo6Q=
Subject key identifier:   7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195C82DFA23CA2F941BC6F53254B571939B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 12:43:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201042
                          AS: 216319
                          IP: 194.13.142.0/24
                          IP: 2a13:4840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:2d:fa:23:ca:2f:94:1b:c6:f5:32:54:b5:71:93:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 12:43:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:bd:14:b8:14:28:15:ba:7d:18:ea:b6:af:
                    58:75:d1:95:d8:63:ec:a5:b8:fa:c5:17:88:d3:4c:
                    73:c8:d3:6a:45:28:32:38:47:1c:c3:f6:35:08:bd:
                    c2:1f:b0:11:f1:d0:d9:9e:dd:3d:5f:fa:4f:09:0a:
                    53:9f:e8:d3:42:f9:7b:3a:f9:b8:bc:e8:62:93:ca:
                    8b:04:07:42:4d:94:bc:a4:16:e8:fd:1f:4e:0a:9e:
                    0c:11:3b:59:45:19:1b:53:f8:80:49:65:a1:bc:b7:
                    59:01:4b:8d:a7:31:60:04:e3:4d:48:89:79:cd:3f:
                    ee:7f:bd:10:48:7f:28:ee:06:ec:d4:a5:99:a0:52:
                    b9:94:a3:b0:a0:ce:77:2d:a7:ca:34:1a:cc:6e:59:
                    69:3b:7d:62:95:1d:a8:da:d4:26:a3:1d:e5:93:3e:
                    79:33:5e:61:b5:7a:22:7b:2b:65:bc:73:e1:b7:fa:
                    e2:d7:3a:fe:89:9c:72:c1:63:cf:7b:53:a8:51:ed:
                    64:4b:de:39:c9:54:21:ca:be:fd:fd:cc:71:68:fa:
                    d0:41:21:1f:2e:9c:41:6e:21:45:7e:0f:44:61:d1:
                    cb:9a:29:ad:93:c4:7f:b4:eb:18:6e:50:01:2a:02:
                    32:f8:a7:4d:77:14:74:a6:f5:ef:92:d9:20:d2:8f:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.13.142.0/24
                IPv6:
                  2a13:4840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201042
                  216319

    Signature Algorithm: sha256WithRSAEncryption
         41:15:71:bf:62:b2:5b:63:4a:6b:c8:ab:6a:04:2d:31:4b:3a:
         c1:f1:a1:21:73:f7:09:d3:0c:8d:1b:52:57:de:e0:a7:1d:00:
         04:a3:ef:10:15:0c:43:e0:94:08:fd:c8:38:cb:08:78:56:40:
         f0:cb:56:e1:3a:9d:82:58:1c:1f:c3:34:fb:a1:9a:d8:51:94:
         12:4b:f8:16:7a:e5:de:57:7b:8e:de:8b:40:d4:26:03:8b:33:
         35:26:31:6d:d5:ac:e4:0d:32:a4:fe:a2:84:48:16:88:e0:4c:
         8c:e3:74:63:83:25:28:b2:73:1e:04:0d:c5:ad:b9:70:da:30:
         19:3f:61:be:8f:61:23:05:1b:3d:cd:2b:b8:1a:0c:99:f2:69:
         a1:aa:5f:b4:41:3b:6a:67:0f:f3:d5:26:b8:ec:a2:6b:8a:ca:
         7c:c7:5e:bf:0f:df:30:c4:99:a6:b3:d9:6c:6a:d0:e4:5f:96:
         00:52:64:3d:5a:38:24:f8:03:05:a2:fd:4b:38:bd:5a:73:45:
         b6:d4:5c:ba:e7:1c:df:3a:a8:2c:11:80:2d:ab:7b:0b:12:46:
         2d:30:0c:03:26:98:05:ba:83:03:0c:42:fc:5d:8b:a8:a6:af:
         a1:fb:a5:45:5b:8b:f0:41:ae:29:0b:37:ea:e9:d8:f6:26:2d:
         de:23:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:44 2025 by rpki-client on console.sobornost.net