Certificate

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer
File:                     09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (raw, json)
Hash identifier:          3gyZOT5qgr1DZBTLxZsT8atgyPby7cNGWA2HjMxe5jI=
Subject key identifier:   09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5
Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60
Certificate issuer:       /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
Certificate serial:       0A14CED4F6FB862FF0E8100FEBF0A0454C3C0764
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 03 Nov 2026 10:22:55 +0000
Certificate not after:    Tue 02 Nov 2027 10:27:55 +0000
Subordinate resources:    IP: 2a13:c8c4:a000::/35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:14:ce:d4:f6:fb:86:2f:f0:e8:10:0f:eb:f0:a0:45:4c:3c:07:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
        Validity
            Not Before: Nov  3 10:22:55 2026 GMT
            Not After : Nov  2 10:27:55 2027 GMT
        Subject: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:0b:11:b1:d6:d5:25:5e:69:12:0c:33:3e:
                    cd:dd:7a:ee:aa:3e:0b:13:40:b6:ab:4c:53:94:60:
                    b3:a9:4e:e4:4f:19:4c:a6:d4:47:81:ac:1c:db:da:
                    b4:cd:67:9f:54:dc:40:dc:e1:88:7c:26:52:6c:94:
                    89:da:8e:c8:b2:5e:26:be:93:5b:69:e5:bf:ca:3c:
                    56:6e:94:73:80:2b:ea:4d:64:c2:bb:0d:ea:5a:d9:
                    bb:75:5d:8f:b9:25:24:2a:f7:22:55:71:a6:0d:eb:
                    7d:4b:84:2a:79:da:42:19:de:1a:79:cd:af:ef:a3:
                    cc:f8:92:c0:2b:02:9e:24:ec:81:f9:ee:b7:bf:52:
                    56:46:2e:1b:b3:1f:3f:1b:ca:35:7e:e8:76:dd:19:
                    23:d5:de:f1:32:b6:eb:98:67:6f:84:9e:b2:3f:d0:
                    1d:f9:64:02:b7:1d:00:d7:8f:25:82:2d:bc:66:be:
                    34:e7:bc:05:ef:53:be:51:7b:fe:21:c8:bf:fe:e5:
                    a3:81:5f:d2:b4:1e:3e:b4:d7:3b:c4:5b:a5:37:2e:
                    e0:4a:e1:f3:40:fb:d4:56:81:28:28:46:2b:b6:e0:
                    a1:f0:b2:d6:32:8e:26:82:99:a1:c5:a1:78:de:ac:
                    6b:11:7d:63:59:1e:d1:9b:5e:dc:bb:63:12:e7:fd:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5
            X509v3 Authority Key Identifier:
                keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:ca:28:74:71:d3:02:45:d0:be:91:38:2f:9d:13:69:64:
         f6:b9:fc:25:39:ef:f3:b0:d9:e6:d3:b9:2f:89:dc:05:5e:0d:
         0d:e3:2e:4c:e9:e0:12:65:2c:4a:e0:34:f8:74:e2:db:c4:d0:
         38:7d:8b:f5:b2:d6:9c:4c:f1:8f:88:02:66:b5:9f:75:6f:9e:
         41:ed:41:84:9c:bd:2d:6f:00:97:2b:16:75:f6:19:77:9b:b4:
         1c:7f:63:b4:70:fa:e8:ee:86:9e:d7:0f:40:e1:6b:ff:fb:91:
         c4:2f:17:f2:87:99:31:20:07:ad:e6:e3:bc:bf:98:5b:9e:70:
         f3:fa:2d:55:da:13:97:e4:e8:dd:24:2e:1e:36:e7:09:40:9f:
         93:13:ec:0d:19:20:82:bb:8d:13:99:e8:58:3a:0b:72:3d:a3:
         df:92:84:55:99:2d:29:86:17:7c:31:87:06:be:e6:72:34:27:
         4e:37:cb:7d:e9:09:3e:79:d5:a3:b8:d2:ce:69:5f:35:8a:fd:
         a2:db:43:b9:21:c0:fa:f5:fc:a2:7e:91:d9:a5:8d:da:40:1b:
         39:29:6a:98:de:58:6e:e8:e3:0d:c6:27:84:5b:62:0e:4e:de:
         3c:b6:d0:8b:0f:d6:37:4b:7e:31:c3:18:48:97:3b:3b:38:5b:
         5d:d0:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----