Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
File:                     q_CoT_j1BX-Ukd775q1V7q6YzAY.cer (raw, json)
Hash identifier:          mUXOXWGm66uDzHd7jx2cb7VzKyNDvFqhIKOpEnY90Sc=
Subject key identifier:   AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942144391183BB3B365700143838D3DD1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197663
                          IP: 91.225.96.0/22
                          IP: 91.240.52.0/22
                          IP: 193.35.111.0/24
                          IP: 195.47.243.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:39:11:83:bb:3b:36:57:00:14:38:38:d3:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:b4:8f:28:77:83:93:f8:5d:a7:4a:fa:2e:
                    86:b5:16:b5:96:34:c5:08:67:e6:1c:49:36:c8:df:
                    0a:25:2c:8c:16:20:7c:7b:28:7c:1a:16:0c:b5:db:
                    58:9e:12:ab:62:6b:3a:68:65:a1:62:6f:db:92:6d:
                    3e:d2:fa:d0:e1:78:18:96:4b:17:d2:fe:3d:ad:57:
                    6a:0a:33:94:83:63:df:51:7f:24:b6:39:b1:23:f4:
                    27:73:67:5c:b5:0b:7e:63:95:04:94:19:1e:9d:0f:
                    b9:b5:92:d2:e7:64:73:b2:f0:a3:b8:d1:3e:3e:9c:
                    4a:d8:76:2b:54:8c:4a:45:3d:a0:cd:2b:86:c7:54:
                    2d:04:43:5b:97:ce:94:bb:b8:a4:37:d2:f6:89:f1:
                    c5:bc:f7:d1:b7:7b:c8:50:74:1d:71:1e:96:70:da:
                    3f:f2:d7:fe:ad:42:c9:e2:b1:32:a4:7b:b7:97:e9:
                    6e:c1:af:5d:05:4c:aa:71:ea:cc:b7:84:9b:01:cb:
                    f2:00:70:8f:f9:53:65:fc:8b:d4:05:06:56:91:80:
                    27:4d:26:0f:73:e9:6b:b1:02:93:e8:b6:94:c6:37:
                    b8:a0:10:6b:6f:d2:6d:95:db:c1:9a:a9:84:4d:71:
                    f7:55:d6:e0:29:f4:be:13:8f:80:11:5b:7b:a6:5e:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.225.96.0/22
                  91.240.52.0/22
                  193.35.111.0/24
                  195.47.243.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197663

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:e8:3d:98:fa:1d:67:08:c6:f0:9a:33:92:e7:b8:c8:c4:
         d0:f6:69:67:8f:b7:c7:55:e9:36:64:e9:30:21:59:c6:2c:f7:
         81:b4:6f:85:5b:e4:af:d6:60:35:07:ae:7c:a1:9b:ae:ed:28:
         23:c3:f5:5d:b3:e0:16:de:c5:f4:f3:9b:a9:7d:73:47:a2:aa:
         9f:ef:c5:07:b8:6f:0b:14:5d:6e:06:8a:69:32:d6:e7:71:b1:
         e6:4d:76:dc:0e:26:77:ec:54:02:82:1b:22:4c:76:ac:80:39:
         c9:82:46:36:02:9a:dc:a8:04:65:76:32:2b:e0:db:57:84:c9:
         d8:77:c2:5d:8f:fc:2b:7f:4a:5f:48:d4:3d:c9:89:44:f0:74:
         e0:b9:5a:64:b1:e0:4f:e4:19:1b:4e:d9:6d:ce:47:0e:95:0a:
         51:de:71:7d:2c:0a:f2:3a:63:1b:ce:c5:75:6f:9e:98:70:92:
         02:55:af:5f:01:23:57:6f:8f:fa:f2:54:c8:f0:76:9b:23:3e:
         df:32:34:94:1c:47:82:e3:bb:59:53:c0:ca:30:2c:a2:a8:c2:
         70:f2:4e:db:13:69:22:66:ae:76:ac:a9:83:50:ab:80:18:24:
         5b:55:2c:50:40:2d:18:af:f6:5c:ed:32:85:b7:dd:01:5e:c8:
         cf:02:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:56 2025 by rpki-client on console.sobornost.net