Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.cer (raw, json)
Hash identifier:          0L/i1uKTLoi+SHZ1JRU8VMPajTR/F6brsVaaxavRZ00=
Subject key identifier:   B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942826167E68DD3C2EE443C3D053A03324
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201593
                          IP: 194.49.127.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:16:7e:68:dd:3c:2e:e4:43:c3:d0:53:a0:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:2f:65:3e:6e:52:85:52:f4:2c:4c:93:54:
                    d2:02:c2:ad:75:81:f6:94:3f:af:a9:36:0c:33:ac:
                    1a:da:19:33:5e:ca:32:b6:5b:b9:aa:51:45:5d:b5:
                    e5:99:99:84:76:3f:52:8a:11:3e:66:1c:c6:75:41:
                    e9:23:70:45:98:fe:f7:f4:bd:6b:30:07:67:02:6a:
                    0c:bd:d7:4c:e7:97:40:6a:99:df:26:4b:6b:6d:46:
                    6e:0d:c8:3a:eb:c8:f6:5d:90:7e:a7:93:f5:a3:50:
                    55:26:a3:e8:00:46:04:44:e4:8c:a0:da:64:ae:16:
                    dc:f8:a4:90:d0:9f:77:02:22:d6:d9:89:15:77:7a:
                    3a:ac:9c:54:b7:b7:5a:7a:a0:fc:be:15:9d:66:c5:
                    1e:16:45:10:d0:20:95:78:e4:36:56:40:ed:43:1f:
                    2a:de:f2:dd:de:34:d4:43:0f:c7:8a:cd:64:44:7c:
                    20:bb:7e:c7:a7:19:4b:4c:a5:0b:8e:ea:b6:0a:2a:
                    0d:2b:5b:6e:73:5a:15:22:58:c3:4d:1e:b1:17:8a:
                    15:05:14:da:8d:82:04:13:c7:d7:a4:b3:34:fb:7e:
                    64:6e:82:b1:8a:64:64:ba:d0:94:ce:7e:ec:f2:bd:
                    58:84:2c:cd:48:28:96:2a:73:47:9d:33:03:84:79:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.127.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201593

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:73:99:9d:4f:f7:9f:bb:88:87:b4:27:14:5f:9e:0f:f4:
         b8:34:12:5e:1a:6a:19:0a:44:39:1c:0d:89:fe:2e:df:8f:de:
         79:8d:50:65:03:5f:33:63:97:ed:b1:36:38:ad:36:ee:f7:db:
         7b:05:cb:c4:5a:3d:62:0d:fb:8b:ab:8b:67:03:6c:ef:b0:a3:
         5d:75:68:05:a1:cb:5d:39:46:6b:a3:55:39:59:95:f4:e3:8e:
         cf:96:2e:f5:65:a3:c5:93:6e:f1:fb:16:fb:99:f2:11:1b:1e:
         be:df:e8:1d:d5:b6:39:17:2b:60:b4:71:21:bc:f4:6a:83:ca:
         1f:9a:aa:7a:e1:94:70:83:ea:f1:4b:03:e2:da:fa:8e:d7:71:
         d1:5b:9c:7f:49:39:3f:0a:fc:18:db:f0:56:8a:25:f9:0f:e6:
         26:c3:cf:d0:1f:6b:20:20:39:4f:78:b9:12:6b:3c:c4:42:74:
         f7:31:7a:a7:2c:cc:e1:bb:e2:d5:9d:61:cf:2e:b2:d0:a1:d7:
         c2:d5:d8:d5:19:f2:e8:8b:8b:40:96:8e:5f:30:94:19:d1:cd:
         ee:17:9a:8d:f7:68:e2:87:e1:34:5f:a0:f1:40:7b:39:7c:f3:
         d6:28:51:1a:33:d2:bf:f4:f7:ba:8c:cb:fd:fb:73:32:45:a7:
         3a:5a:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:05 2025 by rpki-client on console.sobornost.net