Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
File:                     n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer (raw, json)
Hash identifier:          5lyVXbMs6SShc6Y56Z1X/edemuoEB59TZKb6Pn2412w=
Subject key identifier:   9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3F95EBE2ABA419386F519CD494657
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50984
                          IP: 91.216.75.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:f9:5e:be:2a:ba:41:93:86:f5:19:cd:49:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9f87521f15e0457288a9f196a8c8865c36922150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:0c:bd:0c:36:67:e0:d8:5e:c5:a7:61:44:
                    22:30:d9:6d:04:d0:0b:68:26:f5:66:af:50:3c:ad:
                    72:1f:5d:50:eb:5e:df:06:4b:a8:a7:68:b5:a8:ce:
                    f0:c9:00:ec:ef:00:24:c4:91:34:38:d4:cb:fc:46:
                    3a:07:08:c6:18:f7:63:74:5d:6d:2f:d7:69:f2:87:
                    a3:fc:1b:60:36:2a:0a:49:13:ed:cd:4b:5f:aa:71:
                    63:51:c4:a0:24:58:50:83:f5:13:3e:b1:26:f0:4b:
                    37:cf:1b:99:1a:39:13:56:6d:1a:b8:59:b8:0e:a3:
                    ad:61:03:65:74:30:6a:a4:d2:f1:6f:42:a9:f7:9c:
                    77:f0:09:ee:ce:ca:2a:d0:db:e9:41:ed:6e:cf:6c:
                    12:10:9e:2e:bb:43:62:13:e5:f4:e3:0f:1f:86:08:
                    f9:a6:70:ec:2f:b8:6b:75:24:4f:8d:63:ba:af:ff:
                    8a:6e:c2:f8:52:5e:c6:99:e2:6e:dc:0a:6e:30:b7:
                    4a:c0:39:4c:48:b4:24:8b:9e:4d:bd:8c:4c:6e:19:
                    bb:7e:02:90:2f:5f:60:dd:8d:df:59:73:cb:c1:e1:
                    32:35:da:8a:45:ec:4f:33:5f:7d:c1:24:2b:8f:5d:
                    3f:52:0f:6d:7b:4d:5b:40:c9:0d:dc:49:83:46:46:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.75.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50984

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:51:72:00:2f:ad:ee:9f:da:c1:34:21:98:9e:42:31:c1:
         10:3b:a4:cd:39:56:3e:3d:7a:34:a7:9c:02:45:7b:92:4c:99:
         d1:e7:cd:b8:fb:65:a0:93:33:9a:15:53:ef:2c:61:61:78:21:
         7d:b8:f7:84:ba:0a:c9:5e:66:7f:7c:b0:c3:be:fc:ff:6a:38:
         9d:e0:2b:63:0c:3a:20:d9:70:2d:08:23:fa:bf:49:20:85:9a:
         22:e1:e2:81:56:88:c4:3a:fc:b6:fe:3b:94:5f:2c:ac:15:79:
         64:50:3d:fc:11:ae:89:5b:b9:8d:65:ff:a4:5e:be:2b:c8:60:
         4d:7e:f6:28:96:36:70:f8:9d:2e:ad:15:0c:1f:c1:02:34:1a:
         f2:62:25:44:4c:20:48:e8:bc:f8:4f:5d:72:72:a3:d4:eb:98:
         0e:f3:ab:05:ca:b4:54:b8:b1:e2:ee:49:65:36:91:6f:12:f3:
         1f:46:05:37:d1:34:be:e1:d1:1b:af:46:6c:bd:e2:06:75:8e:
         01:8f:6c:5a:c9:4b:7d:4d:9e:38:2b:34:6e:46:6b:a3:5f:55:
         53:be:1f:27:72:9f:7d:42:2d:87:a6:68:4e:70:b5:14:e6:ca:
         6d:47:d8:43:1b:da:48:a8:1f:ad:16:1f:68:6d:8d:ca:c8:7b:
         6a:e0:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:29 2025 by rpki-client on console.sobornost.net