Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
File:                     FpjfAwCqteKm8ax45ZPsyXQNqts.cer (raw, json)
Hash identifier:          D6cDMnZ56tkbayHSmAl6NnBTi1stILbVM+pWB74kchY=
Subject key identifier:   16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282144804A97B16C6E12A17ADA5C512A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202509
                          IP: 185.220.76.0/22
                          IP: 2a0b:f240::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:21:44:80:4a:97:b1:6c:6e:12:a1:7a:da:5c:51:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:01:91:e2:54:ed:62:b5:8f:4f:30:46:16:
                    61:71:51:5d:f7:14:3d:c3:9b:72:b9:a4:2a:34:1b:
                    98:9a:b1:71:8f:4e:9f:8f:94:ee:52:db:7f:9d:13:
                    e5:c6:a5:25:4b:4d:c1:ac:8d:32:7e:b4:44:0c:da:
                    9c:70:eb:28:7d:be:19:a9:e6:44:5a:f6:94:f8:a3:
                    d8:26:cd:0b:56:5a:dd:e4:25:fa:13:31:0f:a9:f6:
                    cb:a7:9d:cd:b4:4b:7e:af:74:6e:78:1a:75:24:c5:
                    83:15:9f:b6:f4:51:3f:79:ff:11:9d:19:28:f7:cb:
                    ab:49:d3:33:61:56:3b:4d:2e:4e:df:a4:ef:f0:5d:
                    e4:b2:df:2b:14:6e:ad:f9:83:00:a5:30:69:82:74:
                    0a:70:1d:79:fe:bb:c1:ad:ac:e5:bb:57:46:07:54:
                    61:36:67:58:62:c6:f2:3a:cd:af:55:bf:f2:7e:ed:
                    2a:d0:93:bc:b4:ba:54:b4:3d:76:35:fe:d4:49:3d:
                    c8:09:b5:8f:00:f1:09:c3:b1:f0:eb:0b:84:f0:5d:
                    37:50:ac:ba:1d:f1:89:f3:76:bf:d4:a4:1a:c6:93:
                    af:21:a1:69:e0:31:91:0b:57:c4:8f:fe:d9:71:3b:
                    39:cc:f9:6e:39:ec:98:20:c4:04:34:d6:7a:18:cb:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.76.0/22
                IPv6:
                  2a0b:f240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202509

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:19:37:7f:49:67:04:33:24:c6:9d:e1:26:e6:38:36:44:
         5f:ef:a0:99:3b:98:ce:f2:f0:7d:0a:ae:92:2f:40:67:45:3d:
         15:4e:67:e9:54:05:af:54:7a:e7:a7:84:56:4f:34:ab:49:b2:
         60:a5:42:40:44:8b:24:55:cc:2b:85:f8:a9:19:6d:01:34:c1:
         87:43:fa:d6:71:4e:ae:35:9c:09:1b:a6:ab:bd:07:10:c8:fa:
         54:56:33:b2:84:aa:b6:3e:ce:80:50:4d:66:4f:99:68:3b:8d:
         f3:97:5c:29:99:65:3e:5a:f6:7d:b8:9d:8d:14:a5:15:61:be:
         fc:fd:e5:f8:f3:17:98:fe:25:94:9f:61:c6:4e:df:de:8e:0e:
         02:61:6e:28:db:09:90:65:e6:21:14:d6:3d:50:f0:a0:46:07:
         22:95:ff:31:10:5a:24:8e:8c:e5:53:7a:7a:2b:70:f6:d1:56:
         ba:ca:1b:43:7f:c0:b7:c3:f8:ac:7d:d8:34:ac:40:8f:5e:c8:
         bb:8a:f9:c2:a3:c4:c3:12:7a:2c:50:b1:1d:88:de:a1:c7:e5:
         58:2a:18:88:3a:6f:c0:ad:7f:89:de:00:1a:d0:f5:19:5d:12:
         96:7a:4e:e1:81:a3:e7:ae:41:15:0c:cd:6e:12:5e:3d:32:c1:
         74:62:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----