Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer (raw, json)
Hash identifier:          bchMqRycUF9ug5cSWcSlrq1m3QM1dBGx91wpgGvR3x0=
Subject key identifier:   BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B2A7729C4201BE961EBF59611BF123
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21232
                          IP: 62.32.0.0/19
                          IP: 77.74.56.0/21
                          IP: 79.142.128.0/20
                          IP: 82.192.224.0/19
                          IP: 93.184.16.0/20
                          IP: 185.31.248.0/22
                          IP: 185.41.132.0/22
                          IP: 185.45.236.0/22
                          IP: 185.64.184.0/22
                          IP: 185.110.72.0/22
                          IP: 185.110.88.0/22
                          IP: 185.110.184.0/22
                          IP: 185.119.36.0/22
                          IP: 185.132.16.0/22
                          IP: 195.216.64.0/19
                          IP: 213.160.32.0/19
                          IP: 213.188.32.0/19
                          IP: 2001:1558::/32
                          IP: 2a01:228::/32
                          IP: 2a01:52a0::/32
                          IP: 2a01:5660::/32
                          IP: 2a02:5c0::/32
                          IP: 2a04:5640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:a7:72:9c:42:01:be:96:1e:bf:59:61:1b:f1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bfabf5a474afe7212331670e831e119da38f284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:54:24:04:13:07:37:94:96:ee:21:d9:f7:
                    41:ff:05:d1:8f:c1:6f:0c:db:34:c9:bc:b0:e6:55:
                    74:71:67:a3:d3:80:08:70:87:2a:bb:f6:d1:34:61:
                    9e:03:d0:7b:34:d9:f1:5d:a0:47:e0:0a:97:e6:f0:
                    90:9a:13:66:24:c3:29:ec:5a:69:f9:5e:b3:47:e8:
                    0e:89:fa:d3:5c:59:51:b2:3f:95:41:1b:f5:1c:e4:
                    55:39:a6:fe:63:d3:ce:c6:d3:55:f5:8c:1f:a3:d5:
                    bc:de:7b:dc:a8:a4:1c:41:e1:58:4c:9b:71:a8:40:
                    9d:f6:ce:d5:ab:09:e5:7a:7d:91:14:77:dc:f9:e1:
                    b9:db:e6:81:18:57:cc:37:07:91:49:55:03:37:1f:
                    10:3a:04:51:d1:0d:6e:fa:99:68:8b:50:bd:13:c5:
                    f7:fc:2b:57:de:d4:dd:24:43:ce:22:78:7a:72:e2:
                    23:05:4b:97:98:43:d3:24:c5:7c:1f:be:ee:98:c5:
                    0b:ef:38:90:72:36:e8:9e:25:7d:f7:94:ad:d3:00:
                    41:74:35:c0:79:8b:6b:16:47:88:ce:ac:50:d2:38:
                    d2:96:b2:f2:be:8b:dd:4c:04:ba:4f:26:44:66:43:
                    3e:0c:6e:d3:90:b8:7b:22:d9:12:04:77:e3:54:59:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.32.0.0/19
                  77.74.56.0/21
                  79.142.128.0/20
                  82.192.224.0/19
                  93.184.16.0/20
                  185.31.248.0/22
                  185.41.132.0/22
                  185.45.236.0/22
                  185.64.184.0/22
                  185.110.72.0/22
                  185.110.88.0/22
                  185.110.184.0/22
                  185.119.36.0/22
                  185.132.16.0/22
                  195.216.64.0/19
                  213.160.32.0/19
                  213.188.32.0/19
                IPv6:
                  2001:1558::/32
                  2a01:228::/32
                  2a01:52a0::/32
                  2a01:5660::/32
                  2a02:5c0::/32
                  2a04:5640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21232

    Signature Algorithm: sha256WithRSAEncryption
         39:29:cf:eb:43:b8:21:b0:b2:e0:51:8b:52:b4:17:ec:07:cd:
         4c:1b:e6:b1:d9:2e:da:5f:44:34:2d:db:ed:8c:cd:0b:fe:83:
         2d:aa:39:a5:52:bf:8b:86:e0:47:4e:5b:9b:9e:8e:74:4c:b0:
         e6:8d:ab:5c:56:22:70:b6:a6:70:2e:b6:09:7e:40:be:aa:a0:
         33:6a:c7:9a:53:7f:23:d7:78:4c:80:8e:47:9b:14:07:fa:1a:
         fa:d9:82:68:ab:fc:76:c6:56:3e:e2:e5:84:ee:a3:29:e5:49:
         35:aa:60:25:3d:52:fa:e1:5c:f7:ef:be:95:1c:28:78:9c:c5:
         e3:b2:c4:2a:65:b2:f7:29:5a:ef:19:ff:eb:e4:bd:e8:3b:e0:
         31:87:ea:46:0e:2e:e6:1c:ce:49:3d:f0:c9:cb:c2:00:3c:16:
         96:d6:98:3d:ff:bd:4d:6b:ad:ba:81:29:cf:af:38:98:37:bf:
         df:f0:65:62:63:2a:3e:64:9b:c8:7d:7f:49:70:fc:39:e6:27:
         bb:87:bd:c4:2c:95:6c:45:94:8f:c7:3e:52:39:c9:35:09:bd:
         24:ed:52:e7:9f:2c:91:b5:a4:57:7c:bf:7d:94:91:00:6b:97:
         a3:ac:cd:6b:92:10:ea:d8:d8:6b:bb:8e:fb:8c:23:28:bd:f0:
         68:82:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:09 2025 by rpki-client on console.sobornost.net