Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer (raw, json)
Hash identifier:          1pF8v0wb2IBVhZpKdqkIH6ZqghF3o7MTM5cNxJT7IrM=
Subject key identifier:   7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F61D8B116D111B54FC44BA9B510C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196817
                          IP: 91.213.6.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:61:d8:b1:16:d1:11:b5:4f:c4:4b:a9:b5:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:85:b0:7e:86:9d:5b:fe:0c:bd:10:46:9d:
                    a5:17:97:83:52:d8:c7:02:ec:49:59:33:00:f7:78:
                    ca:07:2c:44:19:59:3b:48:ac:af:3c:8a:de:f1:8e:
                    ae:d1:5c:99:dd:9b:21:f9:d0:e1:e9:59:2f:d2:6e:
                    55:12:a9:e0:91:5e:64:4c:e3:74:c7:5b:18:28:c0:
                    86:43:e7:45:e8:66:83:03:34:af:20:23:52:cc:c1:
                    1c:e6:89:d7:cc:fc:ac:09:35:48:f9:0f:4c:9a:37:
                    7e:f5:2a:71:f8:b6:92:3b:67:4c:eb:34:e7:5e:37:
                    25:e7:5d:b7:ad:b9:33:64:46:dd:72:5c:86:e3:e0:
                    15:b2:5e:fc:d3:8d:6f:a4:cd:14:12:30:10:0d:90:
                    5e:5a:2b:b9:78:98:ac:0d:6d:97:ee:f3:e1:b2:46:
                    dd:61:b1:37:4b:fb:e6:26:39:0c:61:d2:b2:10:30:
                    49:c5:48:96:f9:89:71:ce:7e:d6:49:12:1f:28:64:
                    9b:2e:ca:58:af:d4:1d:0d:17:c9:ea:66:c1:77:3a:
                    18:0e:79:b8:77:d3:7d:61:29:90:cb:42:a9:b0:a2:
                    b3:a9:ce:a0:b0:a0:6c:fe:64:cf:d8:ff:53:6b:3b:
                    82:1b:47:5c:bb:0b:b6:48:9a:33:c2:5f:9d:2f:1f:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.6.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196817

    Signature Algorithm: sha256WithRSAEncryption
         93:61:4d:8d:ed:52:a9:71:4c:d7:ca:fd:a6:30:d7:70:e3:73:
         c7:ce:a8:7a:3d:29:cc:ee:a4:d5:43:a2:1b:e1:a6:72:4a:be:
         62:16:29:93:07:43:21:1d:fe:0e:a1:d1:a2:b6:3a:8c:20:e9:
         1d:1f:b4:42:77:fe:45:b2:53:14:c4:11:f4:97:67:c3:c6:c5:
         ac:01:2c:54:6f:e5:c0:d7:1f:69:70:79:38:ec:57:c0:2d:ac:
         69:d6:ef:13:58:52:fa:64:f9:de:fd:90:81:0f:89:76:c6:75:
         38:57:8e:d9:94:bb:be:c4:e2:55:47:25:72:33:59:11:63:62:
         63:bc:e2:11:d1:26:6a:2c:9d:b2:d1:9d:50:99:a5:39:30:91:
         60:80:b0:7d:58:51:7c:69:de:86:f3:65:d7:cb:28:ba:10:4d:
         05:8d:93:f1:f8:23:33:97:85:8d:32:da:9d:02:56:e3:cf:82:
         22:42:a8:5d:53:4e:7d:08:34:cb:9a:3d:9a:5f:21:95:e7:cb:
         56:e1:44:4a:3e:0a:9f:17:70:95:65:ed:32:f1:98:fb:50:8c:
         21:e3:8b:08:2a:83:f4:e5:ab:4c:68:28:87:60:ef:4e:23:f7:
         c8:8d:64:76:57:8f:bc:eb:30:5d:01:97:8f:59:56:f6:f0:ba:
         65:25:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:03 2025 by rpki-client on console.sobornost.net