Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
File:                     lpMmVir3Dnnz1RJIjikOkkMtWgE.cer (raw, json)
Hash identifier:          UHo/8bfVkxG+XJoWv8rxhBURQJXFRx5RI8MDv9s/Aqw=
Subject key identifier:   96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DD12AE871DBC9D27D86D538BCA710
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212484
                          IP: 185.205.202.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:d1:2a:e8:71:db:c9:d2:7d:86:d5:38:bc:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=969326562af70e79f3d512488e290e92432d5a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:05:9d:11:33:2f:43:41:c5:6c:78:31:61:
                    91:97:8d:b4:ab:21:e8:0a:83:a2:12:2e:9d:dd:8e:
                    50:20:7e:b7:f5:9d:81:2d:b5:e2:b8:43:87:6b:da:
                    d1:cb:31:bb:da:47:52:1c:b8:cd:ce:ae:a4:91:56:
                    57:00:14:d7:70:78:16:87:7d:6d:97:5f:58:0a:14:
                    b7:7f:a3:cb:e7:e1:94:30:68:06:52:1a:e2:8e:52:
                    9d:5c:f9:5f:c4:4f:a0:44:89:73:ea:2e:2e:ce:cd:
                    8c:76:cd:5b:49:33:34:ae:e2:61:d7:67:87:f5:ee:
                    20:09:55:7b:b0:be:85:14:1a:0e:4b:bf:24:1f:c1:
                    c5:2d:ac:2a:93:b2:f2:97:bf:fa:b1:0b:f4:87:15:
                    62:a0:02:c0:cf:18:f4:74:d9:54:56:43:29:4f:e3:
                    2e:2d:a2:38:00:84:59:9a:e8:3b:c3:d2:7a:81:c3:
                    51:6f:5e:8e:f0:a5:53:55:5d:aa:df:8a:87:47:0a:
                    c1:2e:3e:59:3c:83:f2:19:8c:15:10:80:b2:3a:16:
                    20:55:8e:82:1a:16:81:a7:31:ac:55:51:b1:30:5d:
                    bd:ee:d5:73:f5:87:20:bf:2a:40:b8:9e:0e:85:e7:
                    5d:df:d9:09:c5:f9:de:30:ea:b2:f8:f3:a2:31:73:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.202.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212484

    Signature Algorithm: sha256WithRSAEncryption
         14:46:2d:68:83:d8:e8:7a:d3:bb:ce:04:30:e3:06:a7:21:c4:
         ba:41:91:ea:2c:a0:4f:63:fe:12:d2:2b:ee:c5:86:da:54:10:
         a5:1d:89:88:c7:5f:2e:e4:32:6c:14:0c:96:8b:32:18:fd:ff:
         c2:1c:83:0b:fb:58:71:cc:69:c1:07:52:96:e2:f3:d0:2c:53:
         bd:57:53:33:57:61:d5:35:04:5c:07:4b:a4:c1:db:83:8e:00:
         6e:e4:e4:a1:cc:60:96:62:01:5f:6a:1f:5f:b9:8c:2d:78:0d:
         0a:53:d1:22:60:46:7c:2f:ce:cc:3e:4d:ca:91:d0:5b:90:96:
         50:99:54:19:4a:57:91:86:bd:d1:97:77:11:84:63:4c:4e:7d:
         cc:39:82:57:b3:00:8d:91:75:fc:5e:66:03:09:66:5b:50:56:
         97:6b:37:db:ba:af:a6:a2:af:89:aa:62:4c:ca:3a:c5:c5:72:
         25:08:f1:f9:32:b7:bd:f8:93:6a:8a:54:73:28:db:5b:08:7b:
         e4:47:82:29:3d:95:2b:3e:4d:e6:a3:f2:8c:fe:49:af:36:67:
         18:66:b5:19:06:45:e2:7a:63:df:3f:78:b9:70:66:67:d6:3e:
         50:7f:4f:25:5f:57:60:61:38:4b:4c:7c:a5:8a:1d:94:c8:bd:
         78:43:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net