Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer (raw, json)
Hash identifier:          UiPn3Wp3zC0yFIs0AgL5i8tsBioorT2vZBeKibKJPUw=
Subject key identifier:   93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDEE2D917701F954290E6BC8D26ED4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201884
                          AS: 210147
                          AS: 210677
                          IP: 91.103.248.0/22
                          IP: 213.109.197.0/24
                          IP: 2a06:33c0::/29
                          IP: 2a11:6fc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ee:2d:91:77:01:f9:54:29:0e:6b:c8:d2:6e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:51:4a:03:e2:5a:96:02:4a:3a:6c:98:09:
                    2a:90:bc:9b:14:e9:36:0b:73:cf:85:41:7a:38:f6:
                    ab:4b:56:3a:bf:c6:aa:55:24:58:fb:91:65:38:91:
                    f8:30:a2:45:aa:da:76:00:c3:a2:1d:9a:e1:a9:ce:
                    18:76:9d:db:29:39:d8:32:1d:90:4b:f7:e7:e2:3b:
                    e9:de:0e:eb:b9:32:b6:38:00:4a:c3:d6:6b:33:f3:
                    f4:65:4e:24:c0:1c:08:15:02:56:74:6d:5a:b1:cd:
                    ca:06:94:be:3b:95:4f:ca:b0:38:b6:e7:b1:a5:66:
                    ad:a3:00:5b:25:af:29:16:b9:66:86:13:f8:ff:bd:
                    71:24:ab:b9:15:d9:a3:8b:67:f5:bb:b4:ea:d1:2a:
                    f8:ec:84:ad:23:9b:ac:33:83:ac:8c:c4:7d:9a:94:
                    06:69:d6:27:e0:bc:18:d2:57:c6:09:42:eb:d9:a4:
                    d7:bf:34:62:26:e9:ba:bc:84:0a:46:2b:56:bf:cf:
                    a9:80:61:81:44:a6:a7:72:24:f5:b5:e0:62:4c:86:
                    dd:43:f5:8a:90:1f:18:8d:47:4e:ce:61:d2:da:de:
                    d7:24:46:bc:b4:65:10:29:e7:98:1c:4b:45:ad:44:
                    b6:fe:c9:f6:9b:6f:bd:91:b0:e4:93:79:5a:c8:59:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.248.0/22
                  213.109.197.0/24
                IPv6:
                  2a06:33c0::/29
                  2a11:6fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201884
                  210147
                  210677

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:d4:02:47:54:d4:9f:28:d8:7d:73:dc:55:13:8c:7c:07:
         16:6b:85:ac:de:73:5d:3f:42:4e:af:15:d2:9e:d6:b4:5a:01:
         40:c9:d5:d1:e6:f1:54:2d:3f:2b:94:9e:0d:58:49:96:d3:d9:
         76:03:47:59:a9:59:2c:90:1a:a6:f0:e1:72:42:41:36:5e:0d:
         8f:49:5a:72:b9:89:86:c5:65:26:91:d5:a7:df:0f:4a:a1:85:
         f1:ae:71:78:60:ed:40:7f:33:dd:06:db:52:2f:9b:90:fe:3b:
         f4:03:09:a7:b7:f6:35:9a:e7:b7:d6:b2:3d:af:2f:65:79:49:
         71:00:c4:b6:09:56:1a:81:1c:6d:aa:3d:e6:ee:36:07:ea:8a:
         75:1f:0f:60:5f:6f:d7:b9:00:9b:c0:ec:1c:46:2a:59:a8:72:
         9e:53:60:4e:db:fe:70:48:bd:bc:fe:57:05:dd:b0:22:30:79:
         2e:0c:d2:7d:97:26:32:1b:0c:a7:e4:01:03:e6:23:85:c6:b9:
         10:bd:b9:7d:20:79:b8:95:7e:ef:32:fa:f9:c0:9b:ef:06:03:
         19:59:4d:02:f6:68:c7:4d:5e:f8:6d:44:10:12:3b:b1:cb:3a:
         d4:90:61:34:43:b8:6c:89:0d:86:98:ed:fa:6d:98:85:07:7a:
         f4:4d:62:ae
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZQl/e4tkXcB+VQpDmvI0m7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2E5ODljMTdiMmRhMGM1MTQzMTU1ODIwZWJjNTZiZmU3M2EzYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ1RSgPiWpYCSjpsmAkqkLybFOk2
C3PPhUF6OParS1Y6v8aqVSRY+5FlOJH4MKJFqtp2AMOiHZrhqc4Ydp3bKTnYMh2Q
S/fn4jvp3g7ruTK2OABKw9ZrM/P0ZU4kwBwIFQJWdG1asc3KBpS+O5VPyrA4tuex
pWatowBbJa8pFrlmhhP4/71xJKu5Fdmji2f1u7Tq0Sr47IStI5usM4OsjMR9mpQG
adYn4LwY0lfGCULr2aTXvzRiJum6vIQKRitWv8+pgGGBRKanciT1teBiTIbdQ/WK
kB8YjUdOzmHS2t7XJEa8tGUQKeeYHEtFrUS2/sn2m2+9kbDkk3layFlp+QIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFJOpicF7LaDFFDFVgg68Vr/nOjrfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzFkZTg2
Yy01ZjFlLTQwMmUtOWVmNC02MzdiMjYxYWIxNzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMWRlODZj
LTVmMWUtNDAyZS05ZWY0LTYzN2IyNjFhYjE3OS8xL2s2bUp3WHN0b01VVU1WV0NE
cnhXdi1jNk90OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCW2f4AwQA1W3FMBQEAgACMA4DBQMqBjPAAwUD
KhFvwDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDFJwCAwM04wIDAzb1MA0GCSqG
SIb3DQEBCwUAA4IBAQBIrdQCR1TUnyjYfXPcVROMfAcWa4Ws3nNdP0JOrxXSnta0
WgFAydXR5vFULT8rlJ4NWEmW09l2A0dZqVkskBqm8OFyQkE2Xg2PSVpyuYmGxWUm
kdWn3w9KoYXxrnF4YO1AfzPdBttSL5uQ/jv0Awmnt/Y1mue31rI9ry9leUlxAMS2
CVYagRxtqj3m7jYH6op1Hw9gX2/XuQCbwOwcRipZqHKeU2BO2/5wSL28/lcF3bAi
MHkuDNJ9lyYyGwyn5AED5iOFxrkQvbl9IHm4lX7vMvr5wJvvBgMZWU0C9mjHTV74
bUQQEjuxyzrUkGE0Q7hsiQ2GmO36bZiFB3r0TWKu
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net