Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.cer (raw, json)
Hash identifier:          TDVh4EodreAX7aWQs5vgqb27uFeSLmQANdWNuGXGFnE=
Subject key identifier:   B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068431DBB2DAF8EF066C4FE42A585BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12854
                          IP: 185.31.144.0/22
                          IP: 185.102.68.0/22
                          IP: 193.200.198.0/24
                          IP: 213.156.16.0/20
                          IP: 2a00:bd20::/32
                          IP: 2a01:4c00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:43:1d:bb:2d:af:8e:f0:66:c4:fe:42:a5:85:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:e7:b3:cb:d1:91:5b:81:dc:c2:2a:d9:eb:
                    69:52:a7:94:51:93:cc:69:c4:45:98:5f:cc:15:6c:
                    26:ce:b6:58:16:e5:e9:47:e5:4c:33:12:8a:f0:2c:
                    d0:72:6a:e0:46:61:e2:6d:d8:46:5f:ad:aa:9b:f1:
                    dc:c4:12:6d:bc:2a:d1:14:45:86:21:6f:52:3a:2a:
                    6c:25:f5:97:ab:3a:24:0e:20:e0:c5:d0:59:3a:e3:
                    7a:1e:29:29:67:32:5b:ed:68:2c:9a:08:03:8b:5f:
                    84:22:a8:d3:6f:dc:2f:b0:9d:00:fd:85:3d:ad:cc:
                    b6:62:43:3d:e4:ef:ac:eb:43:b3:bc:08:95:bf:a8:
                    bc:b1:ff:38:7a:26:a8:b1:8a:9d:4c:9b:e4:88:5e:
                    8b:15:66:d7:3a:79:29:c7:d8:58:9b:23:22:64:42:
                    b3:e7:f9:a9:0d:69:da:a4:75:2a:cd:35:ef:e7:58:
                    89:e6:c9:3c:1e:2b:0e:19:55:8c:c1:b8:a6:d9:fd:
                    5d:c9:f9:87:7c:d1:56:ce:7e:e3:16:52:63:e1:13:
                    71:cb:bd:a3:b6:0d:a1:93:2c:39:4b:29:8a:4e:12:
                    c6:a6:9b:04:8a:87:89:c9:46:14:c8:7d:32:2e:e0:
                    a2:df:b6:d2:24:60:2f:47:2e:b9:72:e5:32:e3:eb:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.144.0/22
                  185.102.68.0/22
                  193.200.198.0/24
                  213.156.16.0/20
                IPv6:
                  2a00:bd20::/32
                  2a01:4c00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12854

    Signature Algorithm: sha256WithRSAEncryption
         01:53:73:91:a9:ec:6f:0d:6f:f7:51:7c:41:4e:18:04:3a:b3:
         ed:df:78:ca:c2:6d:62:2c:64:58:5c:3d:be:ab:eb:77:d8:16:
         e6:f9:94:2e:fa:7c:db:ff:a5:32:c4:88:3e:8d:0e:a1:5d:b5:
         b6:ab:10:33:09:f7:2a:72:80:1f:26:02:14:4c:aa:8d:58:a6:
         cd:6f:e0:ce:2d:8f:a8:1a:90:2b:89:fb:4d:37:e2:15:c8:ac:
         57:4c:3a:b2:d1:fc:31:4b:eb:bd:c9:dd:39:62:60:32:6d:fb:
         e6:15:80:7b:cf:d5:d2:d0:4b:d2:bd:ff:6e:b4:53:a0:12:d5:
         3a:9e:6e:06:e8:2a:c5:fd:57:84:93:94:d2:f5:5e:4b:40:b9:
         59:f2:a8:1c:9d:58:d1:0f:be:3e:2e:f3:3e:1a:f4:bd:ad:b1:
         fb:1d:f9:78:c0:10:64:61:75:42:15:4a:bf:f7:b1:24:7e:11:
         1f:ff:a9:ed:2d:21:f3:17:85:30:b2:52:86:2e:18:b7:e6:62:
         e6:8b:2b:eb:11:ad:3a:12:40:eb:cb:3b:3c:ea:f4:2f:0b:6e:
         2f:d7:14:39:e5:02:c5:df:1c:db:15:c8:96:9e:38:cc:74:0c:
         99:27:cc:73:50:30:8a:14:e0:f4:ac:5e:d6:06:17:c4:4d:19:
         21:e2:de:28
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQgaEMduy2vjvBmxP5CpYW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODcyZGEwZjljNmM1Njg2YTNkYjllZTEyNGE5OTA0MmIwYTg4MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoHns8vRkVuB3MIq2etpUqeUUZPM
acRFmF/MFWwmzrZYFuXpR+VMMxKK8CzQcmrgRmHibdhGX62qm/HcxBJtvCrRFEWG
IW9SOipsJfWXqzokDiDgxdBZOuN6HikpZzJb7WgsmggDi1+EIqjTb9wvsJ0A/YU9
rcy2YkM95O+s60OzvAiVv6i8sf84eiaosYqdTJvkiF6LFWbXOnkpx9hYmyMiZEKz
5/mpDWnapHUqzTXv51iJ5sk8HisOGVWMwbim2f1dyfmHfNFWzn7jFlJj4RNxy72j
tg2hkyw5SymKThLGppsEioeJyUYUyH0yLuCi37bSJGAvRy65cuUy4+vhRQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFLhy2g+cbFaGo9ue4SSpkEKwqILRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzI3MTZl
Yy01NjU3LTRmNTYtOGY0My1lMjMxMDNhODgwNTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMjcxNmVj
LTU2NTctNGY1Ni04ZjQzLWUyMzEwM2E4ODA1Mi8xL3VITGFENXhzVm9hajI1N2hK
S21RUXJDb2d0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQCuR+QAwQCuWZEAwQAwcjGAwQE1ZwQMBQEAgAC
MA4DBQAqAL0gAwUDKgFMADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIyNjANBgkq
hkiG9w0BAQsFAAOCAQEAAVNzkansbw1v91F8QU4YBDqz7d94ysJtYixkWFw9vqvr
d9gW5vmULvp82/+lMsSIPo0OoV21tqsQMwn3KnKAHyYCFEyqjVimzW/gzi2PqBqQ
K4n7TTfiFcisV0w6stH8MUvrvcndOWJgMm375hWAe8/V0tBL0r3/brRToBLVOp5u
Bugqxf1XhJOU0vVeS0C5WfKoHJ1Y0Q++Pi7zPhr0va2x+x35eMAQZGF1QhVKv/ex
JH4RH/+p7S0h8xeFMLJShi4Yt+Zi5osr6xGtOhJA68s7POr0LwtuL9cUOeUCxd8c
2xXIlp44zHQMmSfMc1AwihTg9Kxe1gYXxE0ZIeLeKA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:07 2025 by rpki-client on console.sobornost.net