Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.cer (raw, json)
Hash identifier:          /4voAqgVTHz96dFnDbfPl+9X8RxVhbZEKP5DwEM5dNU=
Subject key identifier:   C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195A8DA5C07FFCF05DCF89E1FF5BFB3999C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Mar 2025 10:43:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44942
                          IP: 92.63.228.0 -- 92.63.239.255
                          IP: 92.246.104.0/21
                          IP: 185.157.216.0/22
                          IP: 2a05:2780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a8:da:5c:07:ff:cf:05:dc:f8:9e:1f:f5:bf:b3:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 18 10:43:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:c6:2c:c7:46:e4:43:b6:0e:55:ec:1f:ea:
                    9c:a3:d8:96:ac:2e:f1:e0:c9:be:9d:cc:94:d4:21:
                    82:5e:b8:54:fc:46:c2:04:33:63:02:79:e2:0b:de:
                    c0:4b:bf:4d:af:2c:78:eb:7e:5b:a6:11:04:75:24:
                    34:54:77:38:34:d2:1b:f8:97:88:20:26:8f:71:33:
                    bf:f9:f0:66:ab:8f:a6:33:0b:2a:43:19:b6:f5:31:
                    fd:fd:73:3d:9b:8c:46:95:54:45:e2:b8:e1:8d:42:
                    31:ed:b6:ea:cc:da:1a:73:85:3d:01:f3:42:ea:b6:
                    6e:00:2a:cb:e1:4a:4b:2e:82:b3:97:23:1a:dd:b5:
                    9d:d7:f1:d8:f9:37:1e:ab:91:93:f4:27:5e:79:8b:
                    61:58:89:73:23:4b:2a:91:3b:9f:cc:a3:78:31:88:
                    bd:39:9e:8a:a5:7d:1c:1b:cd:c7:53:8a:c1:3b:bd:
                    06:d2:17:eb:39:52:8c:0f:42:5b:32:4e:80:6b:a6:
                    84:0a:c3:c5:db:8d:da:6e:e7:38:c5:1a:72:b7:8a:
                    ed:68:f0:a1:d6:16:aa:8b:cb:e6:a0:8a:18:6f:52:
                    ae:7e:1f:6d:ff:2a:53:b2:63:22:6e:09:fc:6e:7c:
                    42:54:e4:46:a1:54:c6:79:c4:d7:8a:e1:fb:db:ce:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.228.0-92.63.239.255
                  92.246.104.0/21
                  185.157.216.0/22
                IPv6:
                  2a05:2780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44942

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:c8:39:66:84:43:71:2a:ba:f0:d1:b9:54:dc:24:b5:a0:
         da:f4:b2:3c:a4:66:1d:ea:5e:cb:90:13:11:ba:f0:f2:13:ef:
         65:30:8e:ed:0b:73:88:19:af:1e:0f:94:2a:f7:86:d8:c4:98:
         ca:a7:7b:a5:2e:91:32:f6:36:d5:83:72:92:52:46:dd:9d:5d:
         f8:61:8c:80:a2:58:d3:f2:d6:25:ef:3b:b3:29:c8:c6:8b:b4:
         98:28:6a:67:1c:94:08:1e:39:7b:35:84:0e:42:ed:a0:b9:ce:
         9f:b2:ae:a3:35:70:93:85:3f:f7:96:31:b0:f0:ec:0e:88:2e:
         9d:4b:f2:45:01:04:09:5f:5f:75:9f:66:11:53:37:ae:69:01:
         e6:54:62:31:d3:92:f5:ca:71:27:4a:fb:ba:03:0e:76:ea:3a:
         f1:7b:89:7b:1d:b7:8a:61:c1:ad:65:b9:48:d0:e1:0d:a4:f1:
         d4:c0:74:df:46:d1:d3:d1:0d:d1:f0:ba:09:44:f9:fc:c1:5d:
         4d:3b:c0:49:87:36:55:39:07:d2:e2:a8:f0:f6:75:e4:c4:23:
         35:95:7e:7b:50:2f:17:07:96:bf:be:9f:52:3b:d1:f7:8f:13:
         11:bc:0c:5b:1e:36:40:2d:e6:71:ae:71:bc:14:63:89:e4:1f:
         5c:d9:83:90
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZWo2lwH/88F3PieH/W/s5mcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzE4MTA0MzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmE2ZTIyZjRlMjM5NjVmNmM0YTAyNWM2YzkyZWZjMGI2NjJlNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjorGLMdG5EO2DlXsH+qco9iWrC7x
4Mm+ncyU1CGCXrhU/EbCBDNjAnniC97AS79Nryx4635bphEEdSQ0VHc4NNIb+JeI
ICaPcTO/+fBmq4+mMwsqQxm29TH9/XM9m4xGlVRF4rjhjUIx7bbqzNoac4U9AfNC
6rZuACrL4UpLLoKzlyMa3bWd1/HY+Tceq5GT9CdeeYthWIlzI0sqkTufzKN4MYi9
OZ6KpX0cG83HU4rBO70G0hfrOVKMD0JbMk6Aa6aECsPF243abuc4xRpyt4rtaPCh
1haqi8vmoIoYb1Kufh9t/ypTsmMibgn8bnxCVORGoVTGecTXiuH7285GFwIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFMam4i9OI5ZfbEoCXGyS78C2YueTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2QzMzRl
ZC0zNmJkLTQxNzAtYjRkNi0wNmFmNmRiYTM0ZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZDMzNGVk
LTM2YmQtNDE3MC1iNGQ2LTA2YWY2ZGJhMzRmNy8xL3hxYmlMMDRqbGw5c1NnSmNi
Skx2d0xaaTU1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaMAwDBAJcP+QDBARcP+ADBANc9mgDBAK5ndgwDQQC
AAIwBwMFAyoFJ4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAK+OMA0GCSqGSIb3
DQEBCwUAA4IBAQB8l8g5ZoRDcSq68NG5VNwktaDa9LI8pGYd6l7LkBMRuvDyE+9l
MI7tC3OIGa8eD5Qq94bYxJjKp3ulLpEy9jbVg3KSUkbdnV34YYyAoljT8tYl7zuz
KcjGi7SYKGpnHJQIHjl7NYQOQu2guc6fsq6jNXCThT/3ljGw8OwOiC6dS/JFAQQJ
X191n2YRUzeuaQHmVGIx05L1ynEnSvu6Aw526jrxe4l7HbeKYcGtZblI0OENpPHU
wHTfRtHT0Q3R8LoJRPn8wV1NO8BJhzZVOQfS4qjw9nXkxCM1lX57UC8XB5a/vp9S
O9H3jxMRvAxbHjZALeZxrnG8FGOJ5B9c2YOQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:17 2025 by rpki-client on console.sobornost.net