Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
File:                     licbYtGOSsd8YQlpDqrkzDTQ6bY.cer (raw, json)
Hash identifier:          /5pq0BgJn9A4FQsKEdSWSghdSsOIfs0m8rqN2RwtLio=
Subject key identifier:   96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC1BC9B1406BCD0B50044715406A79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213222
                          IP: 91.220.113.0/24
                          IP: 176.126.120.0/24
                          IP: 2a06:ef00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:1b:c9:b1:40:6b:cd:0b:50:04:47:15:40:6a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:80:5c:b8:8e:36:99:81:67:9b:4e:1d:a2:
                    b7:b8:46:b0:28:ba:12:b1:e3:b1:b5:0a:cf:eb:11:
                    70:51:5c:7a:9c:20:a2:00:ae:e4:9c:b6:70:32:c1:
                    78:5c:3f:1f:c0:72:1e:38:d2:48:e7:d7:d8:20:bd:
                    89:9b:d1:36:b0:68:ce:ac:5c:76:89:8f:90:47:6f:
                    23:40:09:11:52:b1:a4:83:7f:91:c6:af:02:1f:f4:
                    f0:c1:36:a0:0d:a2:8e:ee:c0:a6:02:87:83:e4:71:
                    2d:e2:bf:46:da:04:1e:d0:f6:96:9a:e0:8d:77:df:
                    06:ef:a5:e0:dc:9c:30:d1:03:02:1c:46:40:d5:67:
                    ca:af:02:82:af:89:ba:a1:c2:e3:b0:98:e1:36:76:
                    38:62:47:45:c4:dc:ee:b5:3d:c4:cd:2c:3d:b1:1f:
                    8d:fe:e5:96:6d:05:bb:bc:95:89:14:61:8e:8f:1b:
                    5d:f9:19:98:e8:e9:d4:81:57:af:77:32:af:51:dd:
                    58:73:86:4d:b1:eb:7f:da:fb:95:ac:93:b3:28:08:
                    2c:8c:4d:0e:a5:72:0a:95:22:93:5d:57:53:ac:f8:
                    45:30:42:1c:ba:25:1e:0d:37:c9:20:86:f0:b8:7c:
                    ed:6a:c2:2e:dc:83:4f:33:9c:ef:48:ad:2b:f5:1c:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.113.0/24
                  176.126.120.0/24
                IPv6:
                  2a06:ef00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213222

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:8c:08:37:1b:a3:69:4e:52:20:e8:c8:05:32:2e:5f:95:
         4b:2b:dc:0f:fd:41:13:49:4f:02:ee:e8:78:ee:00:1c:79:41:
         71:b0:c4:f6:3a:45:1b:bb:a1:c1:db:bf:e6:ba:10:b5:c3:fc:
         db:fe:a7:b6:48:7d:cf:bc:fa:16:55:51:b3:79:dd:36:b7:85:
         7e:b1:2f:4d:5d:f9:3b:f4:f6:57:9e:d9:ab:a1:2e:fb:1b:22:
         eb:b9:43:a4:3f:2d:d3:05:fc:86:73:f8:3b:e9:73:d5:45:68:
         48:8f:5f:83:9a:ad:8f:65:c3:70:c9:90:7f:a7:81:51:58:97:
         bf:84:83:0e:d6:58:9f:f2:84:d8:0b:ab:c4:d8:64:cb:cb:6a:
         e3:4d:97:d4:32:f9:3c:8a:73:52:26:bf:c8:ca:5d:1b:0f:70:
         57:5a:fb:8c:f9:1b:7d:c4:cd:1b:1d:0a:31:10:0a:db:92:e4:
         c4:3a:ab:c1:49:cb:da:31:30:13:95:56:39:df:e1:8b:22:db:
         f5:06:71:d5:e1:bf:fa:0f:c4:91:c7:19:71:51:6e:ef:0a:7c:
         19:4c:e9:11:84:d4:a4:50:f9:06:b6:2b:ab:f1:ef:f7:09:57:
         ee:3d:1e:7b:7f:ae:0d:5b:e0:4a:12:51:a0:51:b2:b4:59:57:
         b4:43:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net