Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.cer (raw, json)
Hash identifier:          4yphMg8MbHhH4J2lUd1SrnsRZBNKtodKcdsPlm3+SFY=
Subject key identifier:   CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C2E5D1FDA8431F51915D906DD224B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48500
                          IP: 37.99.224.0/19
                          IP: 94.230.64.0/21
                          IP: 109.104.224.0/21
                          IP: 134.90.224.0/19
                          IP: 185.46.100.0/22
                          IP: 217.196.128.0/20
                          IP: 2a00:46c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:2e:5d:1f:da:84:31:f5:19:15:d9:06:dd:22:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:78:f6:02:54:23:b9:f7:16:db:55:3b:34:
                    cd:84:ad:83:f3:48:b6:b1:43:b7:a6:1d:21:07:9f:
                    40:7a:92:04:9c:8e:f6:e4:e1:ef:8c:91:d9:e4:7a:
                    06:43:76:c3:87:4d:60:c5:26:2e:b7:5e:cd:c2:97:
                    5b:1b:06:c5:9c:09:7b:e6:62:02:86:55:11:d1:73:
                    24:68:9b:dc:ad:61:b3:ee:57:24:78:dd:41:1f:c4:
                    de:7a:7d:4c:cd:11:7f:4c:b8:02:ad:eb:44:19:d7:
                    c3:f6:9a:63:3d:db:2d:d1:5d:aa:8e:47:d6:46:99:
                    61:5a:63:69:f8:59:d9:8c:19:12:4f:ef:cb:50:a1:
                    50:a8:32:b3:4f:8a:72:a0:dd:63:e7:3c:39:94:78:
                    31:55:be:9d:93:fc:a9:b4:8e:6f:74:5c:89:2b:b2:
                    d0:3e:1f:54:ef:81:99:6c:69:ab:30:38:df:1c:bf:
                    21:ea:95:77:6f:4f:62:bf:2b:95:ce:6d:c0:f8:20:
                    61:e3:2c:6f:89:52:99:26:51:41:8e:60:c0:0e:a6:
                    97:ed:c9:a0:06:63:a3:32:94:75:79:28:0e:e0:7a:
                    ac:8f:c7:6b:d7:24:0e:69:ae:da:78:98:18:69:ae:
                    65:0b:c7:8c:4b:3a:fb:e8:28:b4:20:75:f1:d2:78:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.99.224.0/19
                  94.230.64.0/21
                  109.104.224.0/21
                  134.90.224.0/19
                  185.46.100.0/22
                  217.196.128.0/20
                IPv6:
                  2a00:46c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48500

    Signature Algorithm: sha256WithRSAEncryption
         a9:90:bb:c5:b2:8a:23:9f:d2:f7:16:46:12:d1:14:6e:1b:c6:
         42:3b:5f:74:54:14:93:ff:7e:3f:ec:9c:9f:35:22:39:84:7d:
         6b:aa:5c:f1:e0:62:27:fd:5c:16:fc:d9:72:4d:b2:9c:b0:0d:
         99:d7:3a:16:af:c8:d8:7b:ea:3b:89:d0:64:2c:e8:ae:50:13:
         2c:77:91:cb:5c:db:b9:1f:65:f4:19:f5:d2:7f:1a:9b:43:e4:
         3d:d4:5d:3c:69:3b:61:2a:32:82:aa:6f:94:80:e2:30:38:0e:
         7f:4b:c9:20:59:6d:87:ed:79:47:0e:97:31:ad:0d:b2:c0:fb:
         01:7e:85:1c:90:72:1e:49:9f:33:ab:92:6c:de:ac:17:5d:39:
         42:67:eb:20:2c:b6:c4:01:e8:12:f2:81:0a:c7:c2:58:5b:c6:
         d8:ff:35:fa:92:cb:ca:7b:e2:96:34:17:ea:d4:5a:cf:3e:ec:
         61:8c:53:0a:42:75:62:cd:42:e9:9a:58:5f:43:c0:ff:9c:2a:
         3f:6e:96:dc:83:9e:96:b0:d6:71:77:dc:d1:77:54:a7:46:21:
         fc:d3:33:c7:c0:3e:f6:59:58:91:7e:af:db:de:8d:7f:4a:00:
         46:90:de:f7:c3:6c:3a:08:b9:ce:98:7b:fe:48:72:9b:53:27:
         07:69:db:bc
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZQmbC5dH9qEMfUZFdkG3SJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDYyNmJiYjdiNjllZWM5ZjY3OTBiMDM3MDU1NDViODkyZmEyZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00d49gJUI7n3FttVOzTNhK2D80i2
sUO3ph0hB59AepIEnI725OHvjJHZ5HoGQ3bDh01gxSYut17NwpdbGwbFnAl75mIC
hlUR0XMkaJvcrWGz7lckeN1BH8Teen1MzRF/TLgCretEGdfD9ppjPdst0V2qjkfW
RplhWmNp+FnZjBkST+/LUKFQqDKzT4pyoN1j5zw5lHgxVb6dk/yptI5vdFyJK7LQ
Ph9U74GZbGmrMDjfHL8h6pV3b09ivyuVzm3A+CBh4yxviVKZJlFBjmDADqaX7cmg
BmOjMpR1eSgO4Hqsj8dr1yQOaa7aeJgYaa5lC8eMSzr76Ci0IHXx0ngn2QIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFM1ia7t7ae7J9nkLA3BVRbiS+i6KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzJiMzdk
Zi04ZmZlLTQxZTUtYWMwNy1jMGY4OWFkMzZiY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMmIzN2Rm
LThmZmUtNDFlNS1hYzA3LWMwZjg5YWQzNmJjYS8xL3pXSnJ1M3RwN3NuMmVRc0Rj
RlZGdUpMNkxvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQFJWPgAwQDXuZAAwQDbWjgAwQFhlrgAwQCuS5k
AwQE2cSAMA0EAgACMAcDBQAqAEbAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9
dDANBgkqhkiG9w0BAQsFAAOCAQEAqZC7xbKKI5/S9xZGEtEUbhvGQjtfdFQUk/9+
P+ycnzUiOYR9a6pc8eBiJ/1cFvzZck2ynLANmdc6Fq/I2HvqO4nQZCzorlATLHeR
y1zbuR9l9Bn10n8am0PkPdRdPGk7YSoygqpvlIDiMDgOf0vJIFlth+15Rw6XMa0N
ssD7AX6FHJByHkmfM6uSbN6sF105QmfrICy2xAHoEvKBCsfCWFvG2P81+pLLynvi
ljQX6tRazz7sYYxTCkJ1Ys1C6ZpYX0PA/5wqP26W3IOelrDWcXfc0XdUp0Yh/NMz
x8A+9llYkX6v296Nf0oARpDe98NsOgi5zph7/khym1MnB2nbvA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:21 2025 by rpki-client on console.sobornost.net