Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
File:                     luqxm-wiLHBaHrA6gN80FTnZfxQ.cer (raw, json)
Hash identifier:          P/98CukvW1zRi8Bf1OcAKTieHsSr7lNEA3P3v4m737o=
Subject key identifier:   96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D8008F5AC1ACEA6E6AF123EDCB98C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.202.119.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d8:00:8f:5a:c1:ac:ea:6e:6a:f1:23:ed:cb:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96eab19bec222c705a1eb03a80df341539d97f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:41:49:37:ee:54:49:b5:b9:8e:ed:56:87:
                    98:e7:d2:70:42:f6:3f:36:bc:61:2d:2d:04:78:18:
                    39:92:44:cf:5f:f3:65:98:38:68:6d:c9:b3:f9:f7:
                    d9:0b:3b:ec:8e:f6:95:cc:18:b6:9a:b5:26:4e:9f:
                    25:12:d0:0e:ef:14:e7:f6:ae:07:0f:1c:3d:22:62:
                    03:82:c8:40:8f:98:df:1c:d6:05:76:7c:58:69:07:
                    02:3c:0e:64:b1:16:cc:5f:b4:24:25:11:f8:e9:1c:
                    91:20:b9:f9:fd:6f:a0:7c:dd:0a:e0:be:24:36:83:
                    f9:73:95:7e:2f:14:78:a6:a7:de:cf:99:84:e6:f8:
                    f2:eb:f7:c6:40:39:5e:af:1f:24:fb:30:72:24:d0:
                    7c:4f:9e:80:43:6d:65:93:18:67:24:fb:db:93:f1:
                    d8:35:2b:5b:af:b9:95:57:69:a3:3a:12:5a:1a:d3:
                    b0:f9:eb:e0:a0:90:cb:05:14:9f:c1:9c:a2:12:10:
                    42:b0:64:c7:7e:ff:6b:31:40:fc:ab:20:ae:2c:6f:
                    f3:f1:bc:e1:3e:db:a0:9a:79:2e:9e:32:9c:a2:d4:
                    43:e3:d9:0f:52:5e:e7:06:e1:0a:38:60:fc:d3:7a:
                    62:95:6c:5a:47:c5:e7:c1:1d:00:06:b3:c0:33:b2:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:36:e1:e5:44:6a:62:b6:8e:e5:f0:e4:06:e1:51:c3:9d:af:
         65:29:2f:42:1b:75:9e:b0:24:80:f2:cb:53:f0:80:87:cc:b1:
         43:7c:c0:bf:77:d8:07:b2:c1:9c:68:b2:b3:01:e3:23:83:c4:
         4a:de:8f:40:42:d3:5c:1e:13:1e:20:67:da:54:d8:2f:30:28:
         8c:4c:17:57:1c:be:40:95:af:f4:73:a2:c5:e4:82:e1:2f:e4:
         68:4b:1a:a1:66:6a:1c:b4:18:32:ce:19:1e:61:7f:79:60:18:
         ec:18:cd:f9:d6:79:c1:e5:0e:2d:d5:6a:81:79:e0:a4:ff:e2:
         66:91:e0:63:89:5e:7f:66:a0:e1:ca:e1:bf:29:98:1d:06:87:
         b8:00:f0:77:21:7b:a5:57:a2:3d:62:24:f7:7b:57:f3:b3:2b:
         35:40:1a:5f:75:76:ab:22:dd:74:83:cb:90:66:00:8e:d3:7c:
         67:be:a7:1e:29:b5:08:de:c1:a4:80:ba:5c:c8:8f:ac:47:4f:
         6a:ef:cd:02:54:2d:d0:79:6a:99:c6:9a:68:96:02:59:42:97:
         e3:b2:cc:72:ac:e9:99:dc:d3:5b:34:a9:01:8d:a0:33:93:54:
         33:a6:8f:59:c9:34:49:69:bd:c4:8e:b5:ce:de:f2:8e:f3:ba:
         21:ec:98:32
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQj2ACPWsGs6m5q8SPty5jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmVhYjE5YmVjMjIyYzcwNWExZWIwM2E4MGRmMzQxNTM5ZDk3ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qJBSTfuVEm1uY7tVoeY59JwQvY/
NrxhLS0EeBg5kkTPX/NlmDhobcmz+ffZCzvsjvaVzBi2mrUmTp8lEtAO7xTn9q4H
Dxw9ImIDgshAj5jfHNYFdnxYaQcCPA5ksRbMX7QkJRH46RyRILn5/W+gfN0K4L4k
NoP5c5V+LxR4pqfez5mE5vjy6/fGQDlerx8k+zByJNB8T56AQ21lkxhnJPvbk/HY
NStbr7mVV2mjOhJaGtOw+evgoJDLBRSfwZyiEhBCsGTHfv9rMUD8qyCuLG/z8bzh
PtugmnkunjKcotRD49kPUl7nBuEKOGD803pilWxaR8XnwR0ABrPAM7Jf1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJbqsZvsIixwWh6wOoDfNBU52X8UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2Q3N2E2
MC0xMjI3LTRkZTctOTdiYi00MTAwNjFlMzU3NmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZDc3YTYw
LTEyMjctNGRlNy05N2JiLTQxMDA2MWUzNTc2YS8xL2x1cXhtLXdpTEhCYUhyQTZn
TjgwRlRuWmZ4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0GCSqGSIb3DQEBCwUAA4IBAQAzNuHl
RGpito7l8OQG4VHDna9lKS9CG3WesCSA8stT8ICHzLFDfMC/d9gHssGcaLKzAeMj
g8RK3o9AQtNcHhMeIGfaVNgvMCiMTBdXHL5Ala/0c6LF5ILhL+RoSxqhZmoctBgy
zhkeYX95YBjsGM351nnB5Q4t1WqBeeCk/+JmkeBjiV5/ZqDhyuG/KZgdBoe4APB3
IXulV6I9YiT3e1fzsys1QBpfdXarIt10g8uQZgCO03xnvqceKbUI3sGkgLpcyI+s
R09q780CVC3QeWqZxppolgJZQpfjssxyrOmZ3NNbNKkBjaAzk1Qzpo9ZyTRJab3E
jrXO3vKO87oh7Jgy
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net