Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
File:                     xE24sJg6z5ejJVFSwupZKtrnc1s.cer (raw, json)
Hash identifier:          vT+gMAlJ3rLji1PbFefdaKYql6umraxrBP1t9rfgwu8=
Subject key identifier:   C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019619EE8015EC26BF38A27D6E2B1642F7EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 09:43:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2.57.76.0/22
                          IP: 5.62.152.0/21
                          IP: 14.102.20.0/23
                          IP: 14.102.28.0/22
                          IP: 14.102.39.0/24
                          IP: 14.102.49.0/24
                          IP: 14.102.51.0/24
                          IP: 14.102.58.0/24
                          IP: 14.102.124.0/24
                          IP: 31.14.26.0/24
                          IP: 45.78.84.0 -- 45.78.95.255
                          IP: 45.120.188.0/22
                          IP: 46.102.105.0/24
                          IP: 62.3.6.0/24
                          IP: 77.81.92.0/22
                          IP: 79.139.80.0/23
                          IP: 85.217.190.0/23
                          IP: 85.217.220.0/23
                          IP: 86.104.76.0/22
                          IP: 86.104.192.0/24
                          IP: 86.104.195.0/24
                          IP: 86.105.241.0/24
                          IP: 86.106.176.0/23
                          IP: 89.32.125.0/24
                          IP: 89.32.132.0/22
                          IP: 89.37.58.0/24
                          IP: 89.38.155.0/24
                          IP: 89.38.234.0/24
                          IP: 89.40.41.0/24
                          IP: 89.40.81.0/24
                          IP: 89.40.164.0/23
                          IP: 89.46.242.0/24
                          IP: 89.47.43.0/24
                          IP: 89.104.122.0/23
                          IP: 89.223.22.0/23
                          IP: 91.92.17.0/24
                          IP: 91.92.20.0/24
                          IP: 91.92.22.0/23
                          IP: 91.92.64.0/24
                          IP: 91.92.138.0/24
                          IP: 91.92.178.0/23
                          IP: 91.92.216.0 -- 91.92.218.255
                          IP: 91.192.212.0/22
                          IP: 91.203.128.0/22
                          IP: 91.216.138.0/24
                          IP: 91.229.228.0/24
                          IP: 91.233.108.0/22
                          IP: 91.235.208.0/22
                          IP: 92.114.60.0/22
                          IP: 92.114.81.0/24
                          IP: 92.114.110.0/24
                          IP: 92.255.0.0/24
                          IP: 92.255.52.0/24
                          IP: 92.255.64.0/24
                          IP: 92.255.80.0/22
                          IP: 93.113.52.0/23
                          IP: 93.114.84.0/24
                          IP: 93.114.136.0/23
                          IP: 93.114.236.0/22
                          IP: 93.115.4.0/23
                          IP: 93.115.36.0/24
                          IP: 93.119.193.0/24
                          IP: 93.180.208.0/22
                          IP: 94.139.40.0 -- 94.139.61.255
                          IP: 94.139.224.0/20
                          IP: 94.176.0.0/23
                          IP: 94.176.132.0/23
                          IP: 94.176.150.0/24
                          IP: 94.176.172.0/22
                          IP: 94.177.6.0/23
                          IP: 94.177.14.0/23
                          IP: 94.177.23.0/24
                          IP: 103.61.13.0 -- 103.61.14.255
                          IP: 103.73.152.0/22
                          IP: 103.82.222.0/23
                          IP: 103.206.14.0/23
                          IP: 103.211.84.0 -- 103.211.91.255
                          IP: 103.235.164.0/23
                          IP: 110.172.128.0/23
                          IP: 110.172.137.0/24
                          IP: 110.172.141.0/24
                          IP: 110.172.144.0/24
                          IP: 110.172.165.0/24
                          IP: 110.172.169.0/24
                          IP: 110.172.172.0/23
                          IP: 110.172.176.0/24
                          IP: 110.238.192.0/19
                          IP: 110.239.208.0/20
                          IP: 114.69.250.0/23
                          IP: 119.12.176.0 -- 119.12.207.255
                          IP: 119.13.224.0/20
                          IP: 121.91.176.0/20
                          IP: 134.199.64.0/19
                          IP: 136.227.160.0/19
                          IP: 139.84.96.0/19
                          IP: 146.19.100.0/24
                          IP: 157.239.32.0/19
                          IP: 160.202.52.0/22
                          IP: 176.126.198.0/23
                          IP: 176.126.204.0/24
                          IP: 176.223.68.0/22
                          IP: 176.223.104.0/22
                          IP: 176.223.182.0/23
                          IP: 180.149.0.0/19
                          IP: 180.235.160.0/19
                          IP: 185.12.36.0/24
                          IP: 185.12.38.0/23
                          IP: 185.66.136.0/22
                          IP: 185.101.68.0/22
                          IP: 188.94.84.0/22
                          IP: 188.95.90.0/24
                          IP: 188.208.108.0/24
                          IP: 188.208.116.0/24
                          IP: 188.210.254.0/24
                          IP: 188.211.24.0/23
                          IP: 188.211.234.0/24
                          IP: 188.212.136.0/21
                          IP: 188.214.81.0/24
                          IP: 188.215.76.0/23
                          IP: 188.240.48.0/23
                          IP: 188.240.214.0/23
                          IP: 188.241.0.0/23
                          IP: 188.241.15.0/24
                          IP: 188.241.56.0/23
                          IP: 188.241.200.0/21
                          IP: 188.241.249.0/24
                          IP: 193.37.136.0/24
                          IP: 193.56.24.0/22
                          IP: 193.105.176.0/24
                          IP: 193.142.103.0/24
                          IP: 193.163.74.0/24
                          IP: 193.200.104.0/23
                          IP: 202.89.75.0/24
                          IP: 203.81.192.0/20
                          IP: 203.89.98.0/23
                          IP: 212.70.0.0/23
                          IP: 212.70.3.0 -- 212.70.31.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:19:ee:80:15:ec:26:bf:38:a2:7d:6e:2b:16:42:f7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 09:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:7a:95:93:cb:cd:68:e0:86:ea:93:79:4e:
                    89:de:95:23:68:96:29:8d:27:1f:aa:e4:f4:2c:29:
                    39:a4:cd:7d:8f:d9:66:c5:bd:3d:7f:b3:97:31:f8:
                    e7:bf:f1:24:5e:b1:7b:eb:77:48:2b:b2:2f:0e:11:
                    17:cf:5b:cb:cb:1e:48:af:6e:31:c6:e2:c4:70:8f:
                    1b:75:a6:c1:53:c9:9f:a0:d6:3a:ec:f9:09:c9:7a:
                    74:c3:44:d1:44:f8:49:49:21:90:f1:46:4d:d9:59:
                    cb:23:74:67:01:6e:fd:06:cc:ec:c0:42:51:48:b3:
                    d6:76:9e:86:d6:01:bf:d3:d1:43:77:6f:b4:19:54:
                    df:42:6b:c9:d2:7a:01:56:23:77:2c:cc:46:04:15:
                    29:d0:98:1f:12:c8:e1:6b:be:af:83:3b:9e:c3:89:
                    06:4b:23:7c:9d:46:95:20:7d:7c:66:c5:45:f5:a5:
                    e2:44:15:aa:9e:09:b4:99:27:04:3a:b8:36:6b:38:
                    be:b8:c5:51:22:0e:47:d1:3f:64:27:24:1f:da:8c:
                    13:04:6d:c7:32:c6:da:d5:52:8b:9e:31:12:72:4c:
                    c9:41:d8:96:9c:74:67:96:05:fd:d0:f5:fe:97:25:
                    ff:90:13:b1:dd:23:c2:bd:ce:2b:20:c9:8a:0c:53:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.76.0/22
                  5.62.152.0/21
                  14.102.20.0/23
                  14.102.28.0/22
                  14.102.39.0/24
                  14.102.49.0/24
                  14.102.51.0/24
                  14.102.58.0/24
                  14.102.124.0/24
                  31.14.26.0/24
                  45.78.84.0-45.78.95.255
                  45.120.188.0/22
                  46.102.105.0/24
                  62.3.6.0/24
                  77.81.92.0/22
                  79.139.80.0/23
                  85.217.190.0/23
                  85.217.220.0/23
                  86.104.76.0/22
                  86.104.192.0/24
                  86.104.195.0/24
                  86.105.241.0/24
                  86.106.176.0/23
                  89.32.125.0/24
                  89.32.132.0/22
                  89.37.58.0/24
                  89.38.155.0/24
                  89.38.234.0/24
                  89.40.41.0/24
                  89.40.81.0/24
                  89.40.164.0/23
                  89.46.242.0/24
                  89.47.43.0/24
                  89.104.122.0/23
                  89.223.22.0/23
                  91.92.17.0/24
                  91.92.20.0/24
                  91.92.22.0/23
                  91.92.64.0/24
                  91.92.138.0/24
                  91.92.178.0/23
                  91.92.216.0-91.92.218.255
                  91.192.212.0/22
                  91.203.128.0/22
                  91.216.138.0/24
                  91.229.228.0/24
                  91.233.108.0/22
                  91.235.208.0/22
                  92.114.60.0/22
                  92.114.81.0/24
                  92.114.110.0/24
                  92.255.0.0/24
                  92.255.52.0/24
                  92.255.64.0/24
                  92.255.80.0/22
                  93.113.52.0/23
                  93.114.84.0/24
                  93.114.136.0/23
                  93.114.236.0/22
                  93.115.4.0/23
                  93.115.36.0/24
                  93.119.193.0/24
                  93.180.208.0/22
                  94.139.40.0-94.139.61.255
                  94.139.224.0/20
                  94.176.0.0/23
                  94.176.132.0/23
                  94.176.150.0/24
                  94.176.172.0/22
                  94.177.6.0/23
                  94.177.14.0/23
                  94.177.23.0/24
                  103.61.13.0-103.61.14.255
                  103.73.152.0/22
                  103.82.222.0/23
                  103.206.14.0/23
                  103.211.84.0-103.211.91.255
                  103.235.164.0/23
                  110.172.128.0/23
                  110.172.137.0/24
                  110.172.141.0/24
                  110.172.144.0/24
                  110.172.165.0/24
                  110.172.169.0/24
                  110.172.172.0/23
                  110.172.176.0/24
                  110.238.192.0/19
                  110.239.208.0/20
                  114.69.250.0/23
                  119.12.176.0-119.12.207.255
                  119.13.224.0/20
                  121.91.176.0/20
                  134.199.64.0/19
                  136.227.160.0/19
                  139.84.96.0/19
                  146.19.100.0/24
                  157.239.32.0/19
                  160.202.52.0/22
                  176.126.198.0/23
                  176.126.204.0/24
                  176.223.68.0/22
                  176.223.104.0/22
                  176.223.182.0/23
                  180.149.0.0/19
                  180.235.160.0/19
                  185.12.36.0/24
                  185.12.38.0/23
                  185.66.136.0/22
                  185.101.68.0/22
                  188.94.84.0/22
                  188.95.90.0/24
                  188.208.108.0/24
                  188.208.116.0/24
                  188.210.254.0/24
                  188.211.24.0/23
                  188.211.234.0/24
                  188.212.136.0/21
                  188.214.81.0/24
                  188.215.76.0/23
                  188.240.48.0/23
                  188.240.214.0/23
                  188.241.0.0/23
                  188.241.15.0/24
                  188.241.56.0/23
                  188.241.200.0/21
                  188.241.249.0/24
                  193.37.136.0/24
                  193.56.24.0/22
                  193.105.176.0/24
                  193.142.103.0/24
                  193.163.74.0/24
                  193.200.104.0/23
                  202.89.75.0/24
                  203.81.192.0/20
                  203.89.98.0/23
                  212.70.0.0/23
                  212.70.3.0-212.70.31.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:ff:fb:8b:df:57:05:f9:c7:81:f4:08:e1:27:35:1d:00:
         fe:0d:2a:03:06:5d:23:70:26:75:d5:66:a7:5b:5b:f1:a0:f0:
         c8:0b:de:b9:55:ef:a0:b7:7b:a9:2c:88:f7:3f:0e:25:38:84:
         2c:ef:1b:aa:dc:48:12:33:2d:e6:44:f1:f0:8e:54:df:00:f6:
         6c:af:95:9f:cb:c7:af:99:8b:68:b7:4e:b6:66:fb:52:d1:c2:
         eb:22:98:21:a8:55:9b:96:34:86:f1:5e:ba:44:a8:c6:1a:80:
         74:6f:4c:8b:1b:69:44:6c:f1:f0:0b:da:50:5c:8e:69:08:84:
         cf:3d:66:93:ec:3c:a5:00:4b:bc:50:cc:e8:1a:07:e9:e7:97:
         d1:ec:8c:ec:73:c7:67:00:3c:6f:7c:b6:91:fe:4d:2c:83:13:
         09:a5:b0:52:b4:67:06:d0:df:74:ad:c9:82:43:83:36:ba:fe:
         7d:71:45:31:bd:7f:73:3c:4f:38:97:b8:0a:2e:85:00:72:1f:
         f6:fe:6e:c6:4d:bb:ee:94:59:a2:4f:d0:47:58:f8:d6:75:a5:
         ef:b1:9a:ad:08:3a:72:6b:f5:9a:23:37:28:d5:52:1f:7a:19:
         88:f8:37:77:5c:fb:5b:90:79:56:f7:d4:5b:fa:47:f4:b6:c8:
         b9:03:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:15 2025 by rpki-client on console.sobornost.net