Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
File:                     i0eqCfLGEPb0S051wc2dzTiE5V0.cer (raw, json)
Hash identifier:          BSwdT2D4HGOs7bRbOwOv69iQkDMconvGlA30/qu6N68=
Subject key identifier:   8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B2E1D58E81C6EC984159EB6A464CEEB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Mar 2025 09:28:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39454
                          AS: 48551
                          AS: 49676
                          IP: 5.253.225.0/24
                          IP: 31.193.186.0/24
                          IP: 45.94.252.0/22
                          IP: 45.150.150.0/24
                          IP: 45.159.196.0/22
                          IP: 91.217.177.0/24
                          IP: 91.234.52.0/24
                          IP: 91.246.31.0/24
                          IP: 103.216.60.0/22
                          IP: 146.19.104.0/24
                          IP: 157.119.188.0/22
                          IP: 185.63.114.0/24
                          IP: 185.74.221.0/24
                          IP: 185.86.180.0/22
                          IP: 185.128.40.0/24
                          IP: 185.149.192.0/24
                          IP: 185.159.189.0/24
                          IP: 185.228.58.0/24
                          IP: 185.229.134.0/23
                          IP: 185.236.36.0/22
                          IP: 185.238.143.0/24
                          IP: 185.252.84.0/23
                          IP: 193.27.9.0/24
                          IP: 194.147.212.0/24
                          IP: 194.147.222.0/24
                          IP: 195.114.4.0/23
                          IP: 195.114.8.0/23
                          IP: 195.214.235.0/24
                          IP: 2a05:ba40::/29
                          IP: 2a0d:9500::/29
                          IP: 2a0f:5040::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b2:e1:d5:8e:81:c6:ec:98:41:59:eb:6a:46:4c:ee:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 09:28:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:38:7c:61:de:f8:a2:d3:e5:a6:72:0b:ea:
                    a6:9f:a7:8c:5f:37:d9:a3:d8:0f:83:41:4f:29:25:
                    54:40:fc:56:2f:96:a3:cb:26:c1:f2:44:32:87:34:
                    ca:5c:5e:99:da:5b:b2:18:1e:b0:dc:52:9b:c4:d4:
                    3a:09:8f:1f:f9:72:ad:3e:bf:ae:d9:9d:db:5b:9e:
                    23:72:52:a7:5b:a9:2b:ea:7c:04:40:8e:b5:ed:9d:
                    ad:28:e4:4f:a0:8b:4e:57:74:7c:c3:2e:fa:28:76:
                    5e:63:54:a0:c0:d4:ae:d6:73:26:90:b1:80:6e:fc:
                    d5:7a:e6:cf:44:fc:86:9b:9b:73:e7:41:a6:50:80:
                    3b:34:59:17:06:96:32:49:ae:42:24:a8:52:ed:4c:
                    76:4b:59:3e:2d:76:d8:5c:d6:0c:ab:ed:30:dd:3d:
                    4c:1e:05:53:be:33:81:78:f0:31:bc:29:16:99:c3:
                    4e:2a:65:59:f9:54:f2:a7:a3:c8:ef:e5:b4:de:1b:
                    bd:4f:b3:9b:38:5a:a0:dd:65:2f:84:23:7f:2e:09:
                    d2:75:0b:42:e7:b0:10:35:70:e6:82:67:81:fd:29:
                    cb:b5:dc:b5:4b:22:1b:b7:75:7f:71:70:ad:a5:cc:
                    17:cb:27:a9:4a:8e:12:96:8d:08:17:70:01:b6:73:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.225.0/24
                  31.193.186.0/24
                  45.94.252.0/22
                  45.150.150.0/24
                  45.159.196.0/22
                  91.217.177.0/24
                  91.234.52.0/24
                  91.246.31.0/24
                  103.216.60.0/22
                  146.19.104.0/24
                  157.119.188.0/22
                  185.63.114.0/24
                  185.74.221.0/24
                  185.86.180.0/22
                  185.128.40.0/24
                  185.149.192.0/24
                  185.159.189.0/24
                  185.228.58.0/24
                  185.229.134.0/23
                  185.236.36.0/22
                  185.238.143.0/24
                  185.252.84.0/23
                  193.27.9.0/24
                  194.147.212.0/24
                  194.147.222.0/24
                  195.114.4.0/23
                  195.114.8.0/23
                  195.214.235.0/24
                IPv6:
                  2a05:ba40::/29
                  2a0d:9500::/29
                  2a0f:5040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39454
                  48551
                  49676

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:6a:6e:4b:1f:46:99:d7:aa:bc:a1:f3:ad:c9:f2:a6:23:
         e6:81:7c:3b:17:b5:86:b7:c4:9c:95:7b:60:05:3e:a6:86:db:
         a8:28:2e:b4:13:72:58:2d:d0:41:38:72:15:f2:a3:ce:c1:55:
         da:41:da:fa:05:48:55:84:2f:7d:6c:74:34:02:af:c9:9f:a5:
         37:68:77:f9:83:9c:5d:7e:d2:7d:5e:2a:50:20:82:b7:8c:66:
         82:dd:09:ed:9c:93:cf:55:03:42:21:a2:5d:17:65:41:b9:4c:
         cf:1a:3d:61:20:17:80:45:61:25:74:11:79:62:b0:c7:00:96:
         5d:e9:e3:f8:fe:78:fd:c2:98:ba:c0:f1:cb:49:12:5b:63:c8:
         18:4e:d6:c5:ef:84:1e:73:3b:af:53:94:16:c5:34:24:d4:d5:
         a8:09:d9:7b:69:80:f0:9a:42:f0:87:89:13:c1:76:87:0a:bf:
         29:8a:d6:74:e8:7e:43:43:ad:fb:fa:9e:ff:33:f7:78:4c:73:
         bd:24:bc:f0:f7:f0:0e:65:48:08:d8:25:da:38:f8:4b:11:42:
         96:ac:d2:42:06:d0:73:0a:05:08:e2:bb:84:22:0e:20:7b:a0:
         3d:5b:8f:2a:7a:d7:43:ee:03:00:81:dd:45:38:fe:7e:40:c0:
         ed:51:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:16 2025 by rpki-client on console.sobornost.net