Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.cer (raw, json)
Hash identifier:          CXdAdqPIl2GUN8L2M+7aBd9ffU7Bnm50WRXy3cgD4nE=
Subject key identifier:   83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C414AB5E10C199C5C0821D5425B46
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203187
                          AS: 204845
                          IP: 185.82.80.0/22
                          IP: 185.238.124.0/22
                          IP: 2a05:8e00::/29
                          IP: 2a0c:2e80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:41:4a:b5:e1:0c:19:9c:5c:08:21:d5:42:5b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:e7:bb:5e:a9:be:d3:2f:d8:5f:c6:20:23:
                    4e:ee:86:25:de:80:ad:e8:fe:b9:a0:4a:f4:fe:5d:
                    fa:5b:4c:53:30:ce:07:47:2b:e3:6c:d0:be:65:77:
                    87:3f:d2:3a:59:fe:90:fb:2d:8d:b5:ad:9a:fe:df:
                    47:f5:f4:4e:56:3f:fa:41:d3:3d:7b:87:94:7d:9e:
                    dd:46:55:9a:ab:f1:3f:0a:5f:b6:89:c0:d4:96:6b:
                    ce:70:47:c2:53:58:e3:cb:d8:7c:d5:eb:3c:50:ce:
                    fb:3b:34:db:ea:3d:bc:18:02:ee:7f:6c:76:f1:d5:
                    ce:75:6a:bb:bb:91:d8:b6:36:c4:38:6f:ee:dc:b4:
                    c6:fc:c1:40:74:7b:6b:78:4d:79:f9:0b:51:91:59:
                    9d:fd:6f:09:b0:13:bb:51:e2:3d:af:1a:ea:17:ed:
                    44:c3:e2:05:88:c9:8b:86:54:63:88:a5:82:ba:1e:
                    03:30:c5:4c:53:ff:6b:a0:3c:4d:98:6d:63:b0:b0:
                    bf:d0:84:8e:d1:4f:69:78:4d:98:40:c1:4f:28:b3:
                    76:df:f2:ab:85:0b:fd:8f:61:9b:c4:dc:26:22:05:
                    74:8e:d9:5a:d2:84:e9:0e:7a:c3:8c:32:2c:ab:cb:
                    75:95:01:6d:8b:d9:73:7c:5f:a6:8a:40:01:d2:0f:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.80.0/22
                  185.238.124.0/22
                IPv6:
                  2a05:8e00::/29
                  2a0c:2e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203187
                  204845

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:a5:d7:cf:51:38:31:90:2d:f6:98:b1:be:e1:ce:08:82:
         28:9a:9f:3f:a8:ca:d2:60:e2:08:f7:9c:5c:94:43:0c:03:50:
         34:2e:75:94:1e:b8:91:e5:b1:f7:67:b3:93:66:51:e8:16:60:
         c6:d6:1e:3e:55:62:b5:87:e9:00:cc:f0:9f:5f:36:e1:71:ae:
         b1:35:5c:fb:7a:bf:51:e3:95:d1:0f:e3:96:42:f2:52:22:7f:
         b8:3b:c2:a8:e9:e0:12:94:75:07:50:a9:24:4c:86:f6:b2:78:
         40:6b:0b:0e:6f:b3:59:f0:c2:1d:1b:f7:f9:91:c8:be:ee:a0:
         98:d3:38:7e:d5:58:78:69:b3:36:86:63:7a:dc:b2:f8:c1:0b:
         5d:6b:51:80:e8:50:ed:05:b3:93:7c:13:3a:38:43:38:00:75:
         e3:52:ef:b4:f1:98:d5:45:24:80:ff:b7:3a:91:0a:bc:e5:6d:
         9d:15:63:21:cd:36:87:d8:c7:3b:66:52:85:10:03:f3:5c:df:
         9f:78:9f:71:5a:54:08:ac:fd:b3:4c:35:46:ad:5a:3b:ca:19:
         b3:ba:49:f0:51:c5:32:42:c2:34:70:ba:d0:7c:62:53:94:2f:
         3c:d9:0b:10:e0:04:a0:bf:a1:f4:3d:64:c8:f9:3a:df:7b:6b:
         17:ea:50:63
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZQfjEFKteEMGZxcCCHVQltGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzVkMzc0MDhhMjI1ZjFhODk2NGY4ZDcyYmM5OWQ5YmJlNTMzMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu43nu16pvtMv2F/GICNO7oYl3oCt
6P65oEr0/l36W0xTMM4HRyvjbNC+ZXeHP9I6Wf6Q+y2Nta2a/t9H9fROVj/6QdM9
e4eUfZ7dRlWaq/E/Cl+2icDUlmvOcEfCU1jjy9h81es8UM77OzTb6j28GALuf2x2
8dXOdWq7u5HYtjbEOG/u3LTG/MFAdHtreE15+QtRkVmd/W8JsBO7UeI9rxrqF+1E
w+IFiMmLhlRjiKWCuh4DMMVMU/9roDxNmG1jsLC/0ISO0U9peE2YQMFPKLN23/Kr
hQv9j2GbxNwmIgV0jtla0oTpDnrDjDIsq8t1lQFti9lzfF+mikAB0g+AgQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFINdN0CKIl8aiWT41yvJnZu+UzI0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzAyODQ5
Mi1kNjE5LTQyZGEtYWE2NC1jYjZjNjc0YzVhM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMDI4NDky
LWQ2MTktNDJkYS1hYTY0LWNiNmM2NzRjNWEzYy8xL2cxMDNRSW9pWHhxSlpQalhL
OG1kbTc1VE1qUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuVJQAwQCue58MBQEAgACMA4DBQMqBY4AAwUD
KgwugDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDGbMCAwMgLTANBgkqhkiG9w0B
AQsFAAOCAQEAdeSl189RODGQLfaYsb7hzgiCKJqfP6jK0mDiCPecXJRDDANQNC51
lB64keWx92ezk2ZR6BZgxtYePlVitYfpAMzwn1824XGusTVc+3q/UeOV0Q/jlkLy
UiJ/uDvCqOngEpR1B1CpJEyG9rJ4QGsLDm+zWfDCHRv3+ZHIvu6gmNM4ftVYeGmz
NoZjetyy+MELXWtRgOhQ7QWzk3wTOjhDOAB141LvtPGY1UUkgP+3OpEKvOVtnRVj
Ic02h9jHO2ZShRAD81zfn3ifcVpUCKz9s0w1Rq1aO8oZs7pJ8FHFMkLCNHC60Hxi
U5QvPNkLEOAEoL+h9D1kyPk633trF+pQYw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:10 2025 by rpki-client on console.sobornost.net