Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.cer (raw, json)
Hash identifier:          tpuTp1qZA5SXSJX0iUy3COa95vht0JJzMuy5QSvHgvQ=
Subject key identifier:   82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5AFF9604FAE9611339CCA67062229
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199406

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:af:f9:60:4f:ae:96:11:33:9c:ca:67:06:22:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e0:f9:04:d5:af:8e:2a:04:fd:69:76:5c:2b:
                    25:37:5e:98:65:da:96:02:ad:d7:6d:85:ab:f9:ba:
                    7c:c7:d3:79:df:4a:c0:a5:16:ee:4e:21:d8:44:05:
                    50:ad:fe:50:90:8d:0e:0e:df:00:71:e4:d5:28:8f:
                    c8:7f:d1:83:99:7b:23:71:77:10:6f:cf:17:bd:2a:
                    9f:2b:8e:04:4c:04:85:4a:9c:3d:8b:9e:a7:34:f5:
                    25:6b:7b:71:bb:ea:d3:70:8b:03:26:4b:42:a9:fc:
                    6e:0c:bd:b7:07:48:d6:14:78:b8:86:7b:7a:11:a9:
                    44:99:be:37:e3:32:8f:20:33:d1:22:92:f0:03:16:
                    8d:f3:63:23:5b:12:f4:7e:a2:d3:fe:45:d5:1d:03:
                    f4:09:ea:b9:71:d1:47:0f:c7:7b:e2:15:28:44:34:
                    79:3e:73:21:47:95:30:71:62:23:e0:9d:2d:30:e1:
                    c8:b0:d8:63:4d:30:40:8f:36:b9:b5:d7:2d:c1:42:
                    2a:c5:a0:62:9a:8a:78:09:89:37:0a:fc:f6:d6:01:
                    28:7a:aa:cc:b8:03:fa:21:f0:f6:3c:7f:37:6d:2f:
                    d6:97:01:eb:2b:59:55:35:56:e4:7d:28:e1:ee:70:
                    bf:69:9f:ad:70:da:21:2c:9b:15:97:5c:c3:a9:63:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199406

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:54:da:eb:44:25:5b:b0:6b:0c:16:8e:35:a8:9c:db:80:
         c1:d7:31:fc:eb:db:5e:ff:ed:95:37:bc:b6:8d:c1:f6:92:46:
         34:ec:48:9e:b4:2d:e8:b6:57:a5:23:6e:ba:cc:75:aa:34:67:
         50:4e:b7:93:51:58:6e:f2:be:f8:50:aa:80:d3:9f:da:06:13:
         06:19:9d:dc:a0:78:f1:11:e8:3e:a5:cf:b7:b8:e5:63:7a:fe:
         6a:81:11:8c:9a:09:f1:1c:1d:42:f9:d5:e2:22:ad:72:20:8e:
         6c:a1:ed:9d:24:85:12:7d:51:e8:4c:da:5e:38:91:fb:b5:3b:
         f0:ad:6e:58:dd:a6:ce:6f:82:03:37:f6:db:f7:4e:77:36:6c:
         b3:7c:eb:14:bf:f2:b5:b9:ed:5f:e2:96:d4:88:ca:e8:66:4e:
         1c:76:9e:07:ac:35:ae:b5:49:02:b4:d7:d5:20:7d:a6:49:ef:
         41:39:f4:fd:4d:80:16:e0:c7:40:14:66:72:57:3c:ee:bb:7e:
         aa:11:f8:0d:50:4c:6d:5f:b7:18:3f:d7:a8:00:da:a9:b0:4a:
         5e:26:0d:7b:4d:e3:6a:fa:24:cd:9f:b5:c3:72:51:b2:6a:54:
         a3:97:40:1a:7f:0d:a8:b5:2c:ed:44:7a:d3:e7:07:df:51:38:
         f9:c6:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:12 2025 by rpki-client on console.sobornost.net