Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer (raw, json)
Hash identifier:          mTWoeXwZve82yXz17SpbvLbjgbRKh2F4J9TEQiiwrp0=
Subject key identifier:   94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B3CBE20383F1D32EEE39718FC13A6D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215639
                          IP: 45.10.36.0/24
                          IP: 94.126.112.0/21
                          IP: 195.80.152.0/21
                          IP: 2a13:1c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b3:cb:e2:03:83:f1:d3:2e:ee:39:71:8f:c1:3a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:27:eb:76:af:e5:a0:89:a2:36:27:d2:b0:
                    04:d5:89:80:83:d0:22:03:c4:df:db:93:0d:81:03:
                    a7:76:45:ef:9e:d3:28:11:c6:c3:72:19:4e:f7:ff:
                    36:5f:db:5a:d4:2e:4d:45:d3:37:c3:88:39:2d:2e:
                    55:ca:8e:67:18:66:34:41:05:d8:b8:4c:01:fd:a0:
                    21:3f:f7:2a:ab:1c:38:f8:fd:bf:39:64:a8:35:5b:
                    a6:af:ee:34:96:ff:4f:ec:c3:38:f5:ee:af:27:96:
                    71:65:cc:88:64:c4:3e:79:1c:bf:77:01:7d:0e:77:
                    ed:70:d4:d0:5b:77:80:0b:d6:da:9d:98:84:97:27:
                    16:d4:38:8f:64:f2:ad:3f:ee:e6:1e:bf:1e:c3:c4:
                    0e:3f:51:fc:96:48:cb:96:70:99:5d:a2:a7:10:9f:
                    32:b2:25:75:e7:98:44:58:c1:06:5e:2d:8c:43:07:
                    7a:1f:5a:92:7e:75:2b:80:02:a6:d5:bf:f8:75:4b:
                    78:d6:68:17:6d:bc:4e:7f:c6:3e:79:a6:24:92:e4:
                    62:b2:a9:bc:70:10:de:9b:bd:00:4e:a7:ca:3b:52:
                    70:61:c2:80:e0:66:95:cc:c6:d5:2a:cf:35:87:d1:
                    50:bd:eb:74:62:f1:6a:4a:f5:3a:ea:cf:e2:17:40:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.36.0/24
                  94.126.112.0/21
                  195.80.152.0/21
                IPv6:
                  2a13:1c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215639

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:de:f2:e3:d4:02:67:e3:18:9e:d8:35:72:cb:80:e9:1d:
         d9:21:ce:a6:4c:af:21:8f:79:5e:0d:5e:12:2d:50:13:18:53:
         4a:79:89:c7:88:30:44:77:b4:6e:0d:24:21:62:cb:c2:5a:f8:
         d0:50:7b:ba:ec:87:be:39:2b:8c:19:c3:ed:70:98:23:a6:19:
         c5:0c:d7:ec:01:f9:e3:f1:4f:ef:e1:2f:9e:14:f5:13:72:b4:
         96:ef:a3:f6:aa:68:76:3a:83:f8:21:60:cb:3c:6b:55:4f:28:
         37:c9:ec:fb:6e:a6:30:4d:11:6e:6d:bf:af:fa:71:dc:e5:ff:
         26:b1:73:ac:3b:90:35:c0:55:98:75:b2:1d:bf:ea:15:3f:00:
         85:bf:bc:05:f3:e1:93:17:ab:6f:25:a7:89:2e:48:a4:0b:74:
         52:60:6f:4b:39:04:c2:de:78:e3:a4:d5:8b:ed:b2:c2:0c:56:
         74:32:6c:4c:05:99:da:dc:77:5e:56:71:21:1a:0d:fc:ef:92:
         37:a7:2b:38:74:58:40:5a:09:16:5f:d7:35:9d:14:92:8b:84:
         84:01:1b:fd:cf:5f:dd:68:2d:8b:9f:b9:97:1f:ab:a5:8c:49:
         95:97:f0:2a:03:14:db:7b:2e:1f:fb:ad:c7:3f:4d:e3:ff:51:
         53:9a:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:24 2025 by rpki-client on console.sobornost.net