Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
File:                     jNzyb3SGBYjKxrrhf5neItvEmuY.cer (raw, json)
Hash identifier:          nv+3nz0NAqBlzyB/U+UjmfH+Ttg8gL37qGLnjeTWSvA=
Subject key identifier:   8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019624780B059811F6F2C64DBF9554CD3052
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 10:49:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41114
                          AS: 62038
                          IP: 31.11.40.0/21
                          IP: 45.151.16.0/22
                          IP: 45.157.248.0/22
                          IP: 62.192.140.0/22
                          IP: 77.83.228.0/22
                          IP: 109.106.24.0/22
                          IP: 147.78.164.0/22
                          IP: 153.92.96.0/20
                          IP: 185.42.112.0/22
                          IP: 185.50.32.0/22
                          IP: 185.98.64.0/22
                          IP: 193.148.80.0/22
                          IP: 213.226.72.0/22
                          IP: 2a00:7aa0::/32
                          IP: 2a01:60e0::/32
                          IP: 2a04:bd40::/29
                          IP: 2a09:26c0::/32
                          IP: 2a09:4380::/32
                          IP: 2a0a:7980::/32
                          IP: 2a0d:e6c0::/32
                          IP: 2a0f:d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:24:78:0b:05:98:11:f6:f2:c6:4d:bf:95:54:cd:30:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 11 10:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:87:8e:73:1f:0a:e9:f9:09:39:d0:dc:1c:
                    80:b7:8c:f3:b8:ba:60:8b:a1:6d:76:59:c2:5a:61:
                    08:9a:8a:c8:ed:a9:4d:82:6e:e5:85:f8:3c:38:d9:
                    05:9c:5e:8e:0f:37:6e:a8:28:02:ce:22:c4:6a:32:
                    be:db:59:77:d3:14:b9:0f:2f:a3:0c:e8:b1:d9:de:
                    20:f1:43:e0:51:a5:b4:d6:12:71:d2:d8:ef:be:f9:
                    c1:ae:c8:fb:2c:d8:5d:9e:e6:dc:6b:6a:b9:a4:8c:
                    b0:fe:ab:33:bc:6f:c0:5e:56:04:54:85:3c:01:c3:
                    a9:de:db:41:62:6f:81:ea:ff:dc:12:0e:d3:d4:09:
                    fd:a7:a7:26:6a:8b:67:3f:2c:0b:a0:26:0d:26:d3:
                    fc:bd:42:78:ff:d7:cc:b0:f3:ca:23:82:cf:69:5f:
                    9d:ab:81:df:79:04:2c:3f:82:b5:17:06:fc:b1:ab:
                    48:da:9f:78:c7:e7:46:ef:e5:ef:70:f4:b6:dc:4d:
                    0e:53:d6:7a:c1:8c:6c:09:1a:0a:09:12:b4:15:6e:
                    42:07:36:7a:48:71:8b:3d:2e:b2:bb:9e:4d:27:94:
                    e1:0f:68:2a:bc:3f:fc:b9:f6:ba:1a:e2:38:15:25:
                    2c:f2:c9:32:e6:8b:c2:3c:9f:d8:3a:6f:0a:b5:fc:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.40.0/21
                  45.151.16.0/22
                  45.157.248.0/22
                  62.192.140.0/22
                  77.83.228.0/22
                  109.106.24.0/22
                  147.78.164.0/22
                  153.92.96.0/20
                  185.42.112.0/22
                  185.50.32.0/22
                  185.98.64.0/22
                  193.148.80.0/22
                  213.226.72.0/22
                IPv6:
                  2a00:7aa0::/32
                  2a01:60e0::/32
                  2a04:bd40::/29
                  2a09:26c0::/32
                  2a09:4380::/32
                  2a0a:7980::/32
                  2a0d:e6c0::/32
                  2a0f:d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41114
                  62038

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:90:6d:03:e7:72:db:5a:26:0a:ae:99:83:76:11:cc:8b:
         ac:f2:a7:36:c4:17:3a:03:70:ba:9e:51:c6:a7:b1:b8:36:8e:
         24:9f:19:5b:e2:11:58:30:b5:10:f1:e4:7f:f8:93:74:77:8d:
         34:da:1c:18:bf:d2:5d:e9:8e:f6:3a:b8:b0:d5:cb:d7:d9:08:
         15:8d:74:c9:69:1e:dd:56:3d:f9:9e:46:90:e0:f6:33:3f:e8:
         c0:84:85:4d:fd:0e:08:b7:8c:12:5d:d7:93:00:b4:b0:fc:e6:
         cf:7c:8a:df:5a:fd:15:f4:9d:c8:05:31:89:fe:c9:3d:0e:ae:
         f5:34:64:47:59:40:6d:6d:ec:76:7f:50:8c:c3:eb:99:9e:6d:
         f3:42:5a:91:dd:ab:d0:a2:6d:38:eb:58:96:5c:48:63:7a:15:
         39:61:54:61:d4:7e:cb:02:3e:02:2d:87:4a:8a:88:85:c3:d2:
         76:de:b2:68:89:5b:12:36:47:00:35:6f:44:b2:57:2a:e5:5e:
         19:0a:67:d6:7d:f8:45:20:e1:6d:2f:7e:af:e7:78:1e:2a:a4:
         56:63:b8:40:0d:e9:22:8a:87:fe:f3:cb:76:c5:50:68:bf:d6:
         64:2d:ae:86:21:52:65:ff:14:02:26:85:bc:16:ed:cb:91:f5:
         55:27:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:19 2025 by rpki-client on console.sobornost.net