Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
File:                     lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer (raw, json)
Hash identifier:          A+rAzkaFfk88KBRsokxaCqOQbWFeZjm3Jb1o5YZEJIo=
Subject key identifier:   96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9F87B82680D17B28347020E57C77A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210506

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:f8:7b:82:68:0d:17:b2:83:47:02:0e:57:c7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=960e68c8389b09dc345464a400af276568e7f96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:0e:c3:77:1f:d9:12:dd:39:54:70:41:3d:
                    d2:57:33:1f:3d:b7:68:59:0d:0f:bd:b3:5f:1f:7a:
                    0b:28:3c:2e:5c:af:fd:55:44:be:bd:ff:46:fa:9c:
                    94:b5:50:13:3b:95:f3:0d:81:6e:88:05:91:6d:82:
                    72:a8:d4:c6:fb:e3:59:27:e0:17:e4:8a:9e:84:79:
                    27:eb:8e:40:24:15:98:ad:22:22:75:9d:d7:49:1a:
                    8b:05:c4:0b:41:b7:03:e7:80:64:12:a8:5e:ad:86:
                    19:a5:19:5b:b3:2e:95:49:47:00:6a:fa:6c:49:70:
                    9e:b7:8d:15:c8:0c:db:90:e7:68:a6:19:d1:2a:ee:
                    7b:66:11:5c:09:aa:13:ab:0a:21:fc:ab:bc:eb:a7:
                    10:0f:4a:15:d7:84:97:5c:4a:04:c9:2f:9b:85:5f:
                    12:6c:02:0c:2d:04:f5:3a:d2:d2:0e:f3:de:48:c2:
                    d7:3a:6e:b3:f6:31:31:4d:87:a2:3d:18:89:32:fc:
                    a4:57:7a:29:59:3b:fd:5f:35:72:dc:2f:78:36:af:
                    7e:04:ed:8c:b4:3d:98:dc:72:09:ae:aa:82:33:50:
                    b4:dd:8a:b2:6f:21:8d:e9:50:30:be:7d:a8:dd:0b:
                    a6:46:e6:e8:cb:30:dd:cb:d0:1f:86:16:e4:3e:a7:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210506

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:80:75:46:59:38:e0:ca:96:53:d3:b0:0e:ad:4f:af:3c:
         9b:53:a6:80:c3:b5:64:dd:35:00:f3:34:c6:1e:86:51:d6:22:
         06:0f:09:41:c0:42:95:77:86:34:f6:8c:c5:b1:35:f1:54:35:
         6a:98:b5:e9:5e:b5:b5:df:5c:e9:88:cb:7f:e6:53:75:cb:d2:
         32:66:dc:3e:b7:19:9b:a2:cc:84:5c:55:49:2b:06:eb:e7:7e:
         36:22:fc:ed:4d:a6:36:82:f5:c8:0c:c4:d5:e6:15:b2:29:41:
         1b:ee:88:86:05:69:e7:51:06:4b:17:a8:9c:37:b8:9f:7a:39:
         b0:e4:4a:06:cd:9a:07:d5:cb:10:a1:45:75:fc:3b:87:8e:f8:
         ab:de:ee:b8:b1:b2:8f:52:36:ed:f7:c9:1d:37:08:b5:e7:0f:
         cd:02:2a:48:54:7b:a0:d1:03:24:f1:ea:fb:39:db:14:8c:b8:
         ba:a8:06:62:34:88:f5:e6:7c:04:f4:e8:bd:4d:01:28:09:7e:
         05:ab:bc:19:8d:bb:dc:3c:a8:1c:84:a8:76:33:10:5b:60:5c:
         e6:c5:24:a4:e6:76:92:14:68:7e:30:1d:42:64:d2:31:c2:c9:
         a5:f4:c2:bf:51:2c:d4:d4:ce:f2:7e:2a:34:3b:25:67:21:24:
         45:bd:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net