Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
File:                     hFNK68PtnHkETCI8iyXgEdq_L98.cer (raw, json)
Hash identifier:          tKWmSqSvLDeF0fzj1+z/2y/0ITN2GwSB+7rAIFSKlmI=
Subject key identifier:   84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195417B9B1FD8E37280C5F0E63790BBEBBD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 08:59:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12367
                          AS: 50146
                          IP: 46.34.65.0 -- 46.34.89.255
                          IP: 46.34.92.0/22
                          IP: 62.22.0.0/16
                          IP: 85.112.0.0/19
                          IP: 193.227.132.0/24
                          IP: 2a02:25c0::/29
                          IP: 2a02:2a68::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:41:7b:9b:1f:d8:e3:72:80:c5:f0:e6:37:90:bb:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 26 08:59:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:8f:df:81:05:e2:0b:c8:dc:b5:9c:19:01:
                    e9:75:e3:31:a5:45:a0:e1:a0:55:70:53:a3:2e:62:
                    db:da:e4:95:3f:b3:fc:64:5d:d1:f7:53:fd:b3:86:
                    46:ec:4c:f9:a1:6a:86:91:ce:d1:cb:5c:6a:fa:84:
                    95:20:f9:d2:d0:9e:70:30:3b:32:c4:1d:cb:41:5a:
                    93:3e:78:15:67:cb:71:b3:b8:29:86:2e:52:bd:a9:
                    73:ed:c9:25:53:c2:b2:aa:63:64:b0:b4:5a:9b:e3:
                    69:ed:b0:97:47:96:c4:67:7a:0e:8d:ba:0a:8a:a4:
                    8e:61:ee:22:f2:8c:8b:a1:92:bc:63:70:a0:e0:16:
                    71:b0:6a:42:3e:e7:c9:ac:e3:ba:70:fc:b4:17:e2:
                    de:68:a0:08:c1:fe:31:bc:84:2b:84:8b:88:03:12:
                    4f:ed:0c:0e:cf:fa:94:d8:1a:1d:5d:b7:49:eb:92:
                    f0:c7:a8:27:58:d9:f5:98:8f:0c:e8:a4:03:f5:c2:
                    74:f0:f4:8f:c3:03:87:61:b0:c4:4f:75:74:f4:66:
                    50:44:0d:aa:fb:19:a2:4f:e3:42:ea:4c:1d:b3:7d:
                    7f:9d:ba:a6:c9:87:b1:8c:3e:cb:ee:b1:3a:0b:69:
                    8c:0c:fe:87:5a:22:29:38:db:86:c8:a6:49:52:19:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.65.0-46.34.89.255
                  46.34.92.0/22
                  62.22.0.0/16
                  85.112.0.0/19
                  193.227.132.0/24
                IPv6:
                  2a02:25c0::/29
                  2a02:2a68::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12367
                  50146

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:53:04:a7:f8:fe:19:6d:9c:33:e2:3f:9d:ca:e1:81:18:
         b0:7f:9b:3c:8d:00:c7:c0:fe:37:61:4e:56:55:07:0f:9f:77:
         6b:3f:d5:99:65:bb:d6:03:cf:22:dc:bc:40:e7:c2:de:b1:5c:
         eb:07:25:93:bf:7d:97:d4:e7:0a:c9:d6:c2:1d:d1:e0:57:b9:
         1f:5f:6a:c5:16:53:93:9a:85:c4:82:02:53:5f:81:c1:60:1f:
         41:60:a1:31:1b:7d:97:fe:41:8e:bb:3f:5f:ee:fd:68:57:47:
         eb:d8:c9:bc:a6:08:9c:a0:73:ab:54:c7:44:5a:6b:9a:ed:a0:
         50:b2:04:93:f2:d5:ef:fd:60:1b:2c:7c:f5:6b:a1:23:d9:9c:
         6e:cc:e6:c1:e2:67:4a:9f:2c:4c:ee:d0:92:b4:a6:a1:2f:1f:
         1d:eb:fe:0b:53:71:f1:f8:e4:45:e0:0e:63:65:39:62:42:82:
         2b:ea:46:c1:64:d8:7a:54:7b:9e:4d:bf:21:31:a6:0f:95:9a:
         d5:c0:aa:16:d2:15:54:20:08:54:8d:04:d8:61:24:c4:2a:77:
         28:f5:c9:ad:1a:5f:c5:c1:b1:a5:c4:31:a0:8d:8c:0c:c4:2e:
         80:81:4e:30:35:83:7f:3c:61:cb:0d:82:92:a9:ea:88:24:aa:
         18:35:64:66
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZVBe5sf2ONygMXw5jeQu+u9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI2MDg1OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDUzNGFlYmMzZWQ5Yzc5MDQ0YzIyM2M4YjI1ZTAxMWRhYmYyZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK+P34EF4gvI3LWcGQHpdeMxpUWg
4aBVcFOjLmLb2uSVP7P8ZF3R91P9s4ZG7Ez5oWqGkc7Ry1xq+oSVIPnS0J5wMDsy
xB3LQVqTPngVZ8txs7gphi5Svalz7cklU8KyqmNksLRam+Np7bCXR5bEZ3oOjboK
iqSOYe4i8oyLoZK8Y3Cg4BZxsGpCPufJrOO6cPy0F+LeaKAIwf4xvIQrhIuIAxJP
7QwOz/qU2BodXbdJ65Lwx6gnWNn1mI8M6KQD9cJ08PSPwwOHYbDET3V09GZQRA2q
+xmiT+NC6kwds31/nbqmyYexjD7L7rE6C2mMDP6HWiIpONuGyKZJUhnxSQIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFIRTSuvD7Zx5BEwiPIsl4BHavy/fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E4ZTMy
OS0zYmQ3LTQzN2YtODEwNy1lYmRlNzQ5MzNjNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYThlMzI5
LTNiZDctNDM3Zi04MTA3LWViZGU3NDkzM2M3Ny8xL2hGTks2OFB0bkhrRVRDSThp
eVhnRWRxX0w5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF
BwEHAQH/BEUwQzArBAIAATAlMAwDBAAuIkEDBAEuIlgDBAIuIlwDAwA+FgMEBVVw
AAMEAMHjhDAUBAIAAjAOAwUDKgIlwAMFAyoCKmgwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICME8CAwDD4jANBgkqhkiG9w0BAQsFAAOCAQEAfphTBKf4/hltnDPiP53K
4YEYsH+bPI0Ax8D+N2FOVlUHD593az/VmWW71gPPIty8QOfC3rFc6wclk799l9Tn
CsnWwh3R4Fe5H19qxRZTk5qFxIICU1+BwWAfQWChMRt9l/5Bjrs/X+79aFdH69jJ
vKYInKBzq1THRFprmu2gULIEk/LV7/1gGyx89WuhI9mcbszmweJnSp8sTO7QkrSm
oS8fHev+C1Nx8fjkReAOY2U5YkKCK+pGwWTYelR7nk2/ITGmD5Wa1cCqFtIVVCAI
VI0E2GEkxCp3KPXJrRpfxcGxpcQxoI2MDMQugIFOMDWDfzxhyw2CkqnqiCSqGDVk
Zg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:13 2025 by rpki-client on console.sobornost.net