Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
File:                     iuS5P-tx3eKCO3DH27eeD5m1bBs.cer (raw, json)
Hash identifier:          WXgpdYiib39PcMeyHmb7xj6x/THp8kFeEQKSl6eze+M=
Subject key identifier:   8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420687218CD546E2A2B19F18FFDAB3D4D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199162
                          IP: 46.245.235.0/24
                          IP: 194.180.6.0/23
                          IP: 2a13:da80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:72:18:cd:54:6e:2a:2b:19:f1:8f:fd:ab:3d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:d7:16:70:27:72:f0:8b:68:40:ee:81:e1:
                    bb:62:c6:b4:84:ea:a9:86:e8:fc:eb:8d:08:95:2a:
                    0a:4f:9f:54:0f:3d:75:f1:27:6d:a1:d5:5c:fe:00:
                    b1:83:ad:a0:6b:31:7a:8d:e8:87:38:b6:c4:53:e5:
                    2a:a9:00:73:73:3b:a3:de:cf:af:e6:9f:81:6b:70:
                    90:81:8c:01:13:fe:da:93:11:a2:01:19:6a:72:96:
                    4f:16:d4:cc:40:f5:b2:76:c7:43:2f:1e:94:26:9a:
                    7f:31:d9:36:2d:3e:1e:7b:45:1a:de:6c:c9:7d:0b:
                    d5:ba:30:b6:27:c9:ac:dc:2a:e2:11:b5:8a:a2:a9:
                    b8:af:c5:82:81:46:fa:84:c3:60:98:ba:6e:d5:76:
                    3d:42:ac:98:a3:06:7b:d5:68:e7:f6:1a:5b:31:a4:
                    be:99:66:30:c2:d6:f0:61:12:c7:4c:d0:ca:5a:ec:
                    2e:9d:8b:bd:db:31:04:c8:9c:17:6d:95:3b:5e:09:
                    14:1c:18:91:0b:24:e1:62:14:e8:d8:df:66:2e:78:
                    9e:b4:26:f5:0c:95:86:38:7b:ca:73:65:88:39:f6:
                    7c:45:ec:34:43:71:ec:b0:58:7f:03:79:f2:bc:24:
                    c3:f6:e0:6c:1d:b6:2c:97:44:9b:eb:ca:5b:a7:08:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.245.235.0/24
                  194.180.6.0/23
                IPv6:
                  2a13:da80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199162

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:4d:eb:74:49:30:9a:15:c7:14:2a:1f:c2:6d:c9:8f:d6:
         4b:af:c2:e2:2a:1a:6b:02:0a:39:b2:63:43:76:f9:60:f8:e3:
         1c:4c:05:f0:c0:87:b9:1d:44:8f:3d:33:0b:9f:41:17:8e:bc:
         e8:59:94:e7:f0:cc:db:ef:9d:69:7d:52:b0:f2:64:b1:63:7c:
         7a:e7:15:47:f0:27:bd:3e:9e:fd:ce:94:c2:99:a7:0c:dc:41:
         1e:7a:d4:04:06:48:ec:c0:85:0e:c2:e2:6b:b6:ea:38:73:6f:
         56:28:7a:b9:dd:12:01:f9:ea:84:1c:e6:be:2d:25:08:3d:5b:
         bc:a4:9e:cd:3d:35:5b:81:07:38:e8:87:af:e6:03:12:92:bf:
         54:5c:4b:05:71:90:20:43:1d:0a:bd:8b:00:a7:af:0c:cd:65:
         c8:0e:ec:f9:46:ec:9b:17:c3:32:7c:c6:7b:d5:3a:76:43:3b:
         5d:00:e9:94:0b:28:b9:d2:63:4a:0c:48:32:7c:e2:a6:f9:a9:
         c1:ed:42:29:73:8a:58:c2:df:de:ea:a3:46:fd:6c:fa:c5:aa:
         79:b4:aa:50:d6:16:e6:43:98:78:bf:1d:fd:a9:26:85:e0:7f:
         0b:69:30:e1:44:74:1b:ce:2e:05:88:d8:03:4c:d2:a5:1e:24:
         8b:d8:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:18 2025 by rpki-client on console.sobornost.net