Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
File:                     kVijd10MXrOPIPDvmjYRBhpRlbM.cer (raw, json)
Hash identifier:          fksemPBt7ZnBhG26TZhJ6X1FEkwTIc5ls/F0FahISIc=
Subject key identifier:   91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D97C98965E2CE6A3A1B75EA4917C39
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21188
                          IP: 193.17.128.0 -- 193.17.169.255
                          IP: 193.30.24.0/22
                          IP: 193.32.106.0 -- 193.32.109.255
                          IP: 193.176.56.0 -- 193.176.60.255
                          IP: 194.60.96.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:7c:98:96:5e:2c:e6:a3:a1:b7:5e:a4:91:7c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:e7:8e:37:d2:19:eb:37:cc:f2:75:b7:73:
                    df:4c:f1:8c:de:bd:48:01:60:03:06:bb:11:67:87:
                    d8:0e:f7:fd:7a:f0:fe:f5:77:5a:1e:98:60:a4:26:
                    ed:7c:ba:b0:90:24:74:a5:cb:80:72:88:f1:02:6d:
                    c7:c8:3e:c1:1e:da:52:02:c8:d9:df:8c:de:9f:23:
                    d2:44:ab:ae:7a:d2:bc:03:7a:df:38:89:04:fb:27:
                    b3:b1:f9:18:14:34:03:86:44:a4:71:a9:1f:21:81:
                    66:b3:b2:26:41:e7:af:2b:b3:20:ff:6f:d3:12:26:
                    30:66:7a:51:6f:9b:fd:83:de:83:84:f2:4e:d9:13:
                    26:7e:f8:f2:ec:87:fc:7e:90:79:9b:0a:02:54:35:
                    d5:98:bf:74:5e:25:84:27:4f:5e:81:5e:a1:24:8d:
                    42:77:57:48:6d:37:9a:ce:36:dc:e6:35:9e:83:18:
                    e4:82:da:22:2f:17:79:79:de:79:84:cd:bc:1d:bb:
                    25:a8:30:0e:fa:e7:ce:3d:2a:9c:74:47:b1:ce:c9:
                    62:c3:c9:8e:c1:4a:39:70:3e:d2:0b:65:a0:a7:6a:
                    c3:14:83:81:42:64:31:38:ae:35:35:96:c0:45:ff:
                    83:1b:9e:98:05:9e:7f:c3:53:e7:83:8b:27:06:75:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.128.0-193.17.169.255
                  193.30.24.0/22
                  193.32.106.0-193.32.109.255
                  193.176.56.0-193.176.60.255
                  194.60.96.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21188

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:5c:d7:e7:e4:2c:30:35:90:f9:25:15:08:88:3d:40:7c:
         8f:d9:6d:15:ee:c2:7b:95:82:ad:8a:c4:6d:e5:20:de:63:9e:
         b4:e4:92:fa:00:1e:31:b9:e9:da:ba:f3:ae:3a:13:1c:7e:da:
         66:de:07:79:09:c8:d8:a7:d1:fd:8f:49:64:bf:b4:3b:83:c2:
         7f:49:17:5f:5e:8a:d5:45:56:a0:35:dc:4f:1e:26:21:2b:30:
         a6:05:52:3b:e8:d2:68:65:45:d4:c2:79:d3:7b:02:b3:68:7e:
         a7:3b:b1:bd:6c:ee:c9:a7:fe:d6:d2:93:8a:04:ee:6b:07:91:
         71:6a:b2:43:5c:92:94:a4:02:1a:43:6f:37:d8:b4:ea:db:13:
         31:34:1f:ee:3b:49:f5:e1:5f:6b:16:67:4b:90:84:3d:64:6b:
         0a:d1:1f:8f:f5:0b:da:47:a6:94:43:fd:71:cb:cd:19:73:0e:
         14:59:f2:99:2e:3f:6e:18:71:5e:2c:8d:e4:50:37:19:a4:a2:
         ee:1f:56:89:b4:ac:83:42:35:e2:fa:c5:dc:ad:c7:98:d3:56:
         0c:f9:db:43:b8:a6:6d:62:2f:62:39:9c:e9:61:ed:41:c7:5b:
         fd:96:24:c5:d7:7c:fa:13:2f:0f:3e:f7:93:ce:24:9a:1e:66:
         eb:96:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:22 2025 by rpki-client on console.sobornost.net