Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
File:                     q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer (raw, json)
Hash identifier:          6DiIuKRcJTIf4AI3e7mLc3cNfR5+oufCIFOaDY1eb8w=
Subject key identifier:   AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D5BF9BBF648C61737BE655681F54B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35236
                          IP: 31.170.176.0/21
                          IP: 109.205.72.0/21
                          IP: 185.124.80.0/22
                          IP: 188.92.96.0/21
                          IP: 2a00:1238::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:5b:f9:bb:f6:48:c6:17:37:be:65:56:81:f5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:6d:74:64:12:9e:0d:8e:ce:3f:5a:72:9c:
                    dc:66:8a:42:49:e1:ea:d6:16:a7:9d:96:cd:41:bc:
                    e4:74:dd:69:71:bc:cb:9f:5c:31:2c:0a:bf:63:b9:
                    cf:39:ba:59:61:05:b9:82:da:23:77:f6:23:4d:c3:
                    8b:66:8f:61:a2:14:ba:7f:86:8b:e3:4e:6c:9f:92:
                    b4:6f:fa:b3:69:c8:0f:0b:62:c6:71:0a:a1:e4:a2:
                    d0:95:0b:83:32:06:85:df:54:77:e3:36:bd:8f:61:
                    14:60:f9:97:9e:ad:a2:b0:d1:41:c4:23:65:fd:11:
                    40:5b:f4:a9:bb:82:2e:2f:03:28:7e:ee:bd:ef:62:
                    dc:d4:8e:26:a3:97:2b:51:04:f9:4a:9c:01:ee:a5:
                    ba:df:82:bf:f2:d1:32:e2:50:8c:72:d4:6b:99:bf:
                    2f:56:ba:c3:ee:7d:65:6b:86:30:6e:db:60:01:6b:
                    7d:bc:1f:e2:59:79:bb:c6:39:ee:ba:a6:1c:fa:2a:
                    12:f3:ed:d2:59:0b:33:93:1d:7c:e8:31:61:1d:ad:
                    a4:fe:67:7c:ca:6f:20:c7:2a:fc:c1:b2:71:fa:54:
                    3b:d6:9d:64:79:6d:98:55:be:c2:64:c5:da:4b:25:
                    69:f7:24:86:9d:ad:97:22:ea:52:90:94:0d:ed:4f:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.170.176.0/21
                  109.205.72.0/21
                  185.124.80.0/22
                  188.92.96.0/21
                IPv6:
                  2a00:1238::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35236

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:9f:88:cf:33:ec:ec:be:e9:e0:79:0c:b9:33:73:84:90:
         1b:4d:a6:61:f4:d1:f2:d8:49:89:37:7a:a5:d0:b4:fa:25:02:
         bf:23:a4:27:fa:f8:13:42:d0:83:39:81:f5:c8:a7:c8:68:32:
         47:7b:59:1a:80:eb:f4:93:05:35:d1:05:9b:f4:7f:06:b4:59:
         bc:63:e5:9b:56:ef:55:05:01:34:4b:32:ba:50:33:d2:4b:23:
         3b:e6:88:93:4b:f6:06:a7:43:c4:66:02:74:e9:31:dd:dd:20:
         0b:ef:45:ee:c5:80:86:fd:ea:72:97:7d:59:fe:dc:8f:ff:79:
         7c:70:1b:ff:33:dc:aa:b9:53:81:b4:dc:5b:88:07:ca:37:45:
         2f:73:6b:a8:54:5c:28:f0:d2:96:c1:b7:43:ca:bb:8e:cf:e5:
         35:1e:c6:a2:32:84:57:e8:5c:31:73:0a:35:b0:26:19:ee:76:
         c5:45:ef:fb:a4:48:dd:14:ad:bc:48:8b:f6:81:98:8c:44:a9:
         07:df:f9:10:6a:81:f9:85:94:60:5a:3a:75:21:a9:bd:1a:01:
         6f:81:75:48:f2:59:ef:04:47:d8:a4:f4:2f:c6:a6:7c:38:2f:
         ac:e8:a8:74:b1:e8:b5:e9:5e:e1:39:32:8b:05:41:5c:13:61:
         07:17:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:55 2025 by rpki-client on console.sobornost.net