Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/2B1EF63D1D27F8CB1338180208927541CFC4F564.cer
File:                     2B1EF63D1D27F8CB1338180208927541CFC4F564.cer (raw, json)
Hash identifier:          0gtYfKknIB79wlLyJNmVisjTUc40R1SjuFU7h4FjD2g=
Subject key identifier:   2B:1E:F6:3D:1D:27:F8:CB:13:38:18:02:08:92:75:41:CF:C4:F5:64
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       5CD42AE574C82405EEDF0904708F2F88DFB73CFA
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Manifest:                 rsync://rpki.komorebi.network/repo/komorebi/2/2B1EF63D1D27F8CB1338180208927541CFC4F564.mft
caRepository:             rsync://rpki.komorebi.network/repo/komorebi/2/
Notify URL:               https://rpki.komorebi.network:3030/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 03:17:14 +0000
Certificate not after:    Thu 28 Nov 2024 03:22:14 +0000
Subordinate resources:    IP: 2a06:9f44:b000::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:2a:e5:74:c8:24:05:ee:df:09:04:70:8f:2f:88:df:b7:3c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Nov 30 03:17:14 2023 GMT
            Not After : Nov 28 03:22:14 2024 GMT
        Subject: CN=2B1EF63D1D27F8CB1338180208927541CFC4F564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:a5:50:af:68:a6:41:54:8e:c3:f4:d1:4d:
                    51:a5:39:15:39:79:fe:fb:32:82:8b:28:f8:c4:2d:
                    76:24:51:e1:d0:61:5e:e8:d6:25:e0:10:f4:46:db:
                    2d:a8:42:9c:73:49:87:3d:3b:7e:bd:e9:cd:25:df:
                    83:04:3b:79:2a:43:63:f3:c5:a4:75:a0:ac:58:4a:
                    37:bf:e0:ad:46:ae:56:01:49:10:88:1d:fb:3d:31:
                    c5:3c:17:ff:f6:0c:76:aa:85:c5:0e:f2:7b:a4:cc:
                    a7:65:c4:e2:cd:95:61:85:26:26:d7:af:6f:12:c0:
                    40:c9:d8:4c:3b:60:99:4d:a9:7d:a8:4b:f2:07:7a:
                    6b:df:c8:2e:00:c4:17:1c:be:49:3b:52:7e:5b:69:
                    fe:a2:78:1a:82:db:21:8a:ca:e3:29:45:90:f4:91:
                    00:ec:58:ba:3a:fd:62:dd:eb:d7:f2:60:37:43:d3:
                    19:1f:b6:c3:ad:73:f9:1f:d8:c6:0c:d6:c8:27:d1:
                    41:37:c4:4d:ff:87:17:55:a2:ed:25:d6:4e:70:2f:
                    6c:cb:9f:c6:69:34:de:ca:65:a3:38:ae:a6:ad:76:
                    88:fc:cf:52:21:6e:e7:ad:c6:e8:b1:e4:7f:3f:8e:
                    49:ab:84:03:9f:da:b9:49:bc:e4:76:79:c2:44:6a:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:1E:F6:3D:1D:27:F8:CB:13:38:18:02:08:92:75:41:CF:C4:F5:64
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/2/
                RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/2/2B1EF63D1D27F8CB1338180208927541CFC4F564.mft
                RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:f2:6a:4d:e5:c4:56:dd:6a:02:e7:14:1e:f5:a9:51:8d:
         20:04:ad:c4:81:c4:e8:82:78:07:19:ee:ef:a6:46:11:df:5f:
         54:5f:36:e9:55:0a:30:c3:8d:7f:c0:c9:8a:9d:a8:31:92:a2:
         b0:f4:70:df:74:16:5a:91:51:86:4c:9a:1e:10:c7:76:28:1d:
         b5:11:e3:89:58:50:b0:50:67:93:8f:78:71:fb:8d:87:4a:0f:
         8d:3f:09:79:34:78:5a:3e:26:43:7f:86:97:af:21:3b:2e:dc:
         a1:d2:69:aa:a9:65:1c:60:f1:a2:96:b4:76:65:65:a0:73:0d:
         ec:32:39:fc:21:93:23:68:5c:33:e5:d6:20:20:ea:6a:2e:47:
         e0:40:4b:4e:90:5c:45:8c:51:3c:4d:de:7f:58:58:93:2d:77:
         67:42:7c:43:4b:a7:1b:5f:04:97:34:10:fc:c9:1e:6d:37:11:
         17:7a:45:9b:63:34:00:ce:70:6b:1c:44:29:75:56:9c:ea:1e:
         dc:a9:b7:dc:8b:99:1d:0f:6c:33:c4:ed:e5:e8:a7:44:29:25:
         f1:f3:6d:8d:41:50:ed:1f:02:ea:21:51:9a:75:49:36:59:f4:
         d3:db:25:36:57:6c:93:b4:ed:7c:0a:fe:46:72:77:4d:8f:4b:
         d5:05:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----