Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
File:                     h19BKtsY1C-t0KhYc3GNrakx0cI.cer (raw, json)
Hash identifier:          ufA0IaFvXUIHsqc/vxuNo+SZDvVwWV3385EhDuRGb4g=
Subject key identifier:   87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942825D9F9A93EFBE2CF7AFACD8E9AF2DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.63.21.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:d9:f9:a9:3e:fb:e2:cf:7a:fa:cd:8e:9a:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=875f412adb18d42fadd0a85873718dada931d1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:90:00:5e:5c:e7:22:ff:d2:b0:30:cb:47:
                    ca:4e:68:88:bd:f2:b7:22:21:00:ae:2f:56:d2:ab:
                    88:3e:15:45:a2:91:65:fc:f2:4e:4c:ee:93:35:ca:
                    0e:35:eb:17:28:6c:d7:b4:ca:19:cb:42:83:e7:a9:
                    2a:d8:fb:41:99:eb:8e:c1:11:09:bb:ed:13:fe:46:
                    d5:90:f8:00:99:93:ed:51:ab:90:26:33:90:8b:a0:
                    5d:1f:82:be:d9:89:fd:b5:ed:0e:57:91:a2:db:e3:
                    f1:8c:86:13:45:e7:d6:7e:44:69:7d:b8:fc:0a:38:
                    51:be:32:18:54:33:21:35:ad:83:1c:59:e5:0b:dc:
                    e6:ee:56:5e:97:2c:7b:0c:8e:34:08:61:4e:81:a5:
                    a4:c8:d5:2f:92:0c:6a:5f:f5:ea:7c:54:72:bd:69:
                    e1:a5:bf:3a:b9:ea:53:a0:03:b0:17:5f:37:50:1b:
                    a8:2d:f5:da:e9:b8:71:bf:42:47:60:4d:4a:69:02:
                    9f:7c:e5:a5:c6:90:97:b7:92:20:2b:3f:d9:83:98:
                    eb:2d:44:ee:35:9f:5b:f7:9f:e5:bb:8e:6f:f5:5a:
                    6d:bc:b8:5f:db:41:b2:b0:8e:4e:20:31:cc:c3:45:
                    dc:2e:9c:95:19:c4:f7:d4:96:c4:94:ab:8b:83:39:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:71:33:90:4e:0d:43:03:db:73:a2:db:c9:30:09:0a:dc:
         80:e7:2e:8f:75:b9:05:b0:84:89:b8:f4:14:70:39:d0:3b:cd:
         48:62:48:da:5f:6b:53:1a:49:a4:73:d6:ac:aa:de:a0:21:04:
         d3:4c:56:ca:26:8a:f5:b2:17:65:21:4e:ba:42:4d:e8:c4:5d:
         13:ad:87:0c:86:97:e2:36:9c:4a:2f:50:fe:a4:d2:18:c9:6c:
         9e:9a:78:fd:3e:19:cb:4e:d7:08:fc:82:c7:13:ec:8d:fb:09:
         07:b7:50:46:e3:9c:2f:c6:3c:cb:44:11:bd:46:20:d5:be:4f:
         4e:09:01:36:b1:53:fa:1c:a6:41:83:2d:db:7e:5c:c9:ee:54:
         0c:dc:c2:21:a6:84:99:36:c7:42:9d:4d:c5:5a:6a:c4:3f:be:
         ad:eb:80:b6:99:65:cd:66:fc:a7:24:d8:32:25:d1:03:a3:ab:
         d8:96:c7:fc:4d:03:63:0f:04:6f:4a:5e:3c:56:b3:f0:c9:61:
         d6:ee:1d:a8:6b:31:63:45:de:10:7b:ed:b1:04:13:0a:a7:78:
         68:25:9e:af:ff:f3:dc:87:fa:2f:26:1f:88:f6:19:0b:34:81:
         04:13:1f:a1:c3:b2:02:d4:4b:83:92:ff:d0:9b:48:99:bf:76:
         7d:f9:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:13 2025 by rpki-client on console.sobornost.net