Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.cer (raw, json)
Hash identifier:          GPbBSVuOD3bMkiws/T2q+m28TaMlrj1hSvbw36h9y3A=
Subject key identifier:   9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214469A41CA3CA73F3FEDD7CDCB4131C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43060
                          AS: 214414
                          IP: 91.196.76.0/23
                          IP: 94.158.48.0/20
                          IP: 109.207.240.0 -- 109.207.251.255
                          IP: 185.196.216.0/22
                          IP: 2a04:1b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:69:a4:1c:a3:ca:73:f3:fe:dd:7c:dc:b4:13:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:ed:2d:34:db:ef:57:9a:43:9f:e8:ce:e5:
                    91:c8:de:bb:bb:af:c6:d2:1d:58:ca:d9:fc:97:07:
                    42:00:de:5a:ac:bc:46:0b:1f:fe:ce:da:b2:63:cb:
                    11:d2:9c:60:aa:ab:87:9b:9a:bb:b6:3b:f6:a5:22:
                    d1:ce:aa:77:39:89:69:30:52:5b:c9:ea:73:9d:43:
                    0e:52:ef:db:84:c8:77:0f:80:95:f9:d0:48:64:b3:
                    60:97:7d:12:54:b2:b2:7e:94:79:8a:e6:98:65:86:
                    24:30:38:e0:4e:25:e1:6b:55:ac:1b:04:49:00:07:
                    a7:86:0b:51:67:83:c2:38:06:8a:f6:56:8b:fa:36:
                    fb:14:61:84:d2:03:32:cf:71:ee:6b:3a:1c:8a:94:
                    57:69:16:4f:28:51:f8:c8:a5:87:ea:19:28:f0:d8:
                    a9:08:ea:23:1f:aa:fb:6b:bc:08:0c:5c:22:a4:67:
                    a8:73:a3:c9:28:5a:c0:02:dd:30:cf:9b:a1:9b:e4:
                    24:a1:fc:ac:13:1e:52:0f:a3:a1:c0:e2:8c:83:4b:
                    3d:e0:a8:89:c3:82:36:0b:5d:fb:ee:5e:d6:d6:21:
                    4f:f7:4f:73:93:43:29:fa:6f:b1:d0:f9:34:fc:20:
                    0a:5f:a8:2b:66:b6:7d:f1:16:17:f2:cc:36:dc:61:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.76.0/23
                  94.158.48.0/20
                  109.207.240.0-109.207.251.255
                  185.196.216.0/22
                IPv6:
                  2a04:1b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43060
                  214414

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:8e:81:68:94:12:42:c6:a3:f2:2b:3b:c9:0a:94:37:30:
         d9:a1:81:5a:17:fe:17:14:ba:de:08:58:fb:2f:d2:d2:e9:93:
         e3:68:f7:4b:a8:f1:15:b4:c9:54:9d:12:86:1d:45:d1:f9:b9:
         8e:e7:c5:9e:81:c2:dc:18:5c:33:d0:cb:5c:2e:1f:85:df:47:
         9a:0d:4b:b9:41:76:dc:16:fb:96:89:17:6a:bf:46:82:99:e4:
         2c:28:7e:92:0e:48:ad:c2:3c:7c:ed:ab:b9:de:25:a0:37:05:
         67:73:23:c3:19:2d:af:44:3a:94:65:07:a0:4e:1f:0a:04:8f:
         0f:73:23:8b:f1:de:e3:6a:24:ed:db:3a:34:bd:64:cf:a2:1b:
         f4:54:bd:71:d1:1e:9e:0d:08:64:b6:d2:17:75:c7:31:5b:fc:
         7d:4e:ef:0d:d9:3c:dc:6a:72:77:89:2f:5e:c7:ee:23:be:3c:
         c8:18:d9:60:17:3b:ac:e1:6b:06:d3:6b:82:0e:c4:49:ea:80:
         03:5f:77:02:a0:4d:da:4b:4a:40:16:77:29:24:80:da:46:a2:
         d5:04:23:ca:d8:05:9d:a1:17:fb:5a:43:b8:88:86:c1:51:84:
         cf:71:c6:e9:59:93:6d:d2:9d:d3:42:f3:99:42:94:6b:b7:fc:
         ec:6a:6b:46
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAZQhRGmkHKPKc/P+3XzctBMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmI0YThiOTNhZjllYTljZjE4YWFjYTRlNzNmMTE2ZWMyNmViMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VftLTTb71eaQ5/ozuWRyN67u6/G
0h1Yytn8lwdCAN5arLxGCx/+ztqyY8sR0pxgqquHm5q7tjv2pSLRzqp3OYlpMFJb
yepznUMOUu/bhMh3D4CV+dBIZLNgl30SVLKyfpR5iuaYZYYkMDjgTiXha1WsGwRJ
AAenhgtRZ4PCOAaK9laL+jb7FGGE0gMyz3HuazocipRXaRZPKFH4yKWH6hko8Nip
COojH6r7a7wIDFwipGeoc6PJKFrAAt0wz5uhm+QkofysEx5SD6OhwOKMg0s94KiJ
w4I2C1377l7W1iFP909zk0Mp+m+x0Pk0/CAKX6grZrZ98RYX8sw23GEA+wIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFJ+0qLk6+eqc8YqspOc/EW7CbrNXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzg5ODc0
MS1lZGE0LTRjNWQtYWY5Zi04ZDY4ZWIyMGZiZGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvODk4NzQx
LWVkYTQtNGM1ZC1hZjlmLThkNjhlYjIwZmJkZC8xL243U291VHI1NnB6eGlxeWs1
ejhSYnNKdXMxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAmBAIAATAgAwQBW8RMAwQEXp4wMAwDBARtz/ADBAJtz/gDBAK5
xNgwDQQCAAIwBwMFACoEG4AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKg0AgMD
RY4wDQYJKoZIhvcNAQELBQADggEBABR7joFolBJCxqPyKzvJCpQ3MNmhgVoX/hcU
ut4IWPsv0tLpk+No90uo8RW0yVSdEoYdRdH5uY7nxZ6BwtwYXDPQy1wuH4XfR5oN
S7lBdtwW+5aJF2q/RoKZ5CwofpIOSK3CPHztq7neJaA3BWdzI8MZLa9EOpRlB6BO
HwoEjw9zI4vx3uNqJO3bOjS9ZM+iG/RUvXHRHp4NCGS20hd1xzFb/H1O7w3ZPNxq
cneJL17H7iO+PMgY2WAXO6zhawbTa4IOxEnqgANfdwKgTdpLSkAWdykkgNpGotUE
I8rYBZ2hF/taQ7iIhsFRhM9xxulZk23SndNC85lClGu3/Oxqa0Y=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:29 2025 by rpki-client on console.sobornost.net