Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
File:                     feDSOhFHDiQw9S4b4uAwFOK4TuE.cer (raw, json)
Hash identifier:          THq3TjhYlfk6WqLLSZAZh0PVSwgsBZ7aftcUFiw4fFU=
Subject key identifier:   7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954757D84E69AA201F170119C5B1DDEC5A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 12:18:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213777
                          IP: 109.70.79.0/24
                          IP: 2a14:e800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:57:d8:4e:69:aa:20:1f:17:01:19:c5:b1:dd:ec:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 12:18:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:3b:56:66:7e:79:56:1f:54:4d:c3:3e:a9:
                    9b:d1:27:2e:c0:14:0f:e1:83:4b:0f:6d:11:8f:e2:
                    7e:1a:af:de:9f:fd:3a:80:f4:38:e5:fc:d8:48:9c:
                    3e:58:04:a8:5b:47:5a:0c:fd:82:04:1d:13:13:21:
                    00:7c:f7:66:96:ab:4e:7a:c4:e9:0e:74:eb:57:0c:
                    85:32:2a:81:0a:11:b9:af:52:d0:7c:39:ed:d2:69:
                    fa:c1:a2:6c:35:d5:3a:8c:f8:8d:f9:8a:ef:70:e7:
                    68:17:04:67:dd:ab:57:ab:db:ba:c6:57:07:db:5b:
                    77:45:36:b4:97:6a:15:47:1d:f4:49:2f:e0:cc:b9:
                    7f:86:00:f5:62:8c:34:45:d0:4e:09:73:c2:11:30:
                    e7:6f:88:1a:88:7b:6f:fb:1a:72:6b:de:18:3b:7b:
                    9c:ff:e0:59:c9:23:a5:a2:b4:95:3a:08:1e:ca:7b:
                    08:77:bb:46:9f:ce:fc:a5:9a:7e:86:76:d0:f0:60:
                    45:9a:7b:0b:27:a8:4c:c9:28:47:fa:7d:74:b0:1f:
                    38:94:b3:32:2e:9e:9c:78:cb:17:07:64:a8:e3:2f:
                    ad:8f:de:a2:ce:df:b8:8d:f9:cd:bd:08:55:bc:2f:
                    f8:78:81:9e:c9:d0:d2:85:27:aa:08:25:0b:cd:fe:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.70.79.0/24
                IPv6:
                  2a14:e800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213777

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:8f:00:d9:32:e1:56:40:39:7b:12:cb:ca:97:d8:56:4f:
         77:b8:96:06:48:7b:83:02:d2:40:79:97:cb:44:9e:12:d5:9c:
         7c:da:ef:1d:67:2a:d8:1d:1e:fb:62:55:71:d9:8e:00:3c:1b:
         0b:3d:b4:2c:62:0c:15:12:3b:e6:96:d1:c8:6c:0a:2d:8b:e8:
         e5:53:e8:96:46:28:8b:70:f8:13:32:36:58:f8:fa:86:5c:3d:
         06:e6:c9:dd:d7:22:73:36:89:9f:20:39:d0:5b:68:17:9b:b3:
         f3:9d:1c:c5:80:3f:2e:d5:b6:31:07:2b:05:ed:2b:d7:04:53:
         44:3f:f5:77:06:b7:9e:e8:5a:aa:0e:f5:5f:73:9c:b6:d6:9a:
         e4:19:bd:f5:e3:26:46:6c:49:a1:d4:8e:22:a5:12:4a:b9:d6:
         83:ef:c1:32:fd:d4:b5:28:d7:86:d7:70:2d:23:fe:a1:5f:35:
         04:a1:db:96:4c:ba:d8:37:34:5a:93:d1:18:fe:c3:0c:4a:e7:
         dd:1d:92:61:c8:4f:39:33:b6:a9:f9:a6:5e:f6:e1:d2:ec:1c:
         af:d4:e9:d8:a7:ef:11:f5:cd:cd:e7:a1:42:63:85:84:dd:39:
         a3:e8:2f:20:cf:b0:13:a3:dd:e2:4a:66:a2:0c:88:32:71:3f:
         e7:84:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----