Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
File:                     ulS25fzKMIs23I8Wdgay1lmDnPE.cer (raw, json)
Hash identifier:          a/k2q9JrLVje5cuhOkodRzs9M+nLkovqWpcJ1iY9u/o=
Subject key identifier:   BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194CC80EABC0E5F1F36C8DBFEC4D1CC600A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 15:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204007
                          AS: 211594
                          IP: 185.185.216.0/22
                          IP: 185.190.89.0/24
                          IP: 185.194.12.0/24
                          IP: 185.254.123.0/24
                          IP: 2a0b:6580::/29
                          IP: 2a0c:1880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:cc:80:ea:bc:0e:5f:1f:36:c8:db:fe:c4:d1:cc:60:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  3 15:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:00:69:ca:1a:0c:f2:11:ee:d9:bc:fc:83:
                    a4:35:5f:a1:c1:27:c8:dd:92:2a:65:03:3c:f4:38:
                    f6:89:f6:3d:ef:11:a5:f8:36:c5:4a:58:c2:ee:0c:
                    a8:2b:c5:c4:32:21:ab:88:6c:64:bc:64:5a:9d:36:
                    d7:9c:aa:80:95:c2:05:9a:c4:a6:b9:7a:1a:88:31:
                    2e:28:dd:29:ed:9c:7e:9a:23:fc:a2:01:b5:76:f5:
                    05:ab:34:fa:63:b7:72:07:b4:7d:1e:2e:97:4b:53:
                    ae:9c:e1:ac:f5:a8:e5:cf:4b:e1:95:5f:c0:3a:e1:
                    b6:f6:a2:43:f4:d2:3f:5b:03:79:91:84:b5:a4:02:
                    23:ca:82:43:e3:0d:eb:5f:6a:db:a9:0a:1f:4d:a1:
                    b9:a2:de:e6:37:e6:b7:fd:24:b6:cb:47:72:93:3b:
                    64:3c:42:39:f4:e9:02:05:5d:db:34:63:bb:5f:df:
                    50:dd:90:a9:80:60:0e:0f:a7:1c:d9:f6:ae:07:8a:
                    76:03:08:c8:3e:e7:39:83:84:40:83:07:7f:7d:dd:
                    fe:b8:8b:38:cd:86:90:0a:f4:21:a6:e8:d2:62:94:
                    ae:c0:62:16:53:05:e9:01:64:7c:9c:aa:da:dc:2d:
                    4c:55:82:43:ad:0d:c5:48:67:41:e1:f0:dd:02:ec:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.216.0/22
                  185.190.89.0/24
                  185.194.12.0/24
                  185.254.123.0/24
                IPv6:
                  2a0b:6580::/29
                  2a0c:1880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204007
                  211594

    Signature Algorithm: sha256WithRSAEncryption
         ad:39:62:c9:ad:47:a8:47:78:35:80:b2:fa:4b:14:4e:de:84:
         69:ec:f6:e8:38:a3:22:d4:30:1f:53:49:98:30:8f:9e:2d:7d:
         d7:28:79:e1:93:b9:73:d6:ea:57:9a:08:af:d7:b8:68:14:3f:
         a4:4c:55:e2:5e:64:5f:d8:d1:18:71:cf:72:68:a3:ef:05:4d:
         70:3c:7e:c7:ed:95:bb:dc:f2:7d:8a:56:e5:b2:8d:54:88:6f:
         0f:54:4d:74:0f:03:d1:cb:5d:db:ab:e5:fc:a0:d4:e3:2d:a1:
         c1:55:8e:cc:05:11:8a:1c:25:f5:e1:7a:c0:8a:12:e0:dd:02:
         7f:3d:4c:3e:a8:5b:3b:54:40:6d:4a:2a:6d:ec:c4:8e:24:4a:
         61:c2:da:cb:c7:b2:ad:f8:11:91:3f:cf:f6:6a:03:5f:6a:57:
         76:d0:43:f6:6f:60:f0:b1:c9:22:15:a5:00:5f:96:97:b5:2a:
         b3:68:d6:5a:51:c1:2f:57:77:8a:aa:6d:65:e8:1b:d7:6d:d3:
         98:0e:b2:d3:79:9a:e1:c9:75:89:4e:ec:ec:fe:31:2e:09:71:
         6a:6c:7b:c7:bc:c3:d3:61:d7:a1:41:b2:cc:22:4f:9b:4c:91:
         39:b6:a1:be:0d:69:52:ab:47:dd:70:40:37:24:ff:cd:5a:02:
         e2:3b:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:08 2025 by rpki-client on console.sobornost.net