Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer
File:                     86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer (raw, json)
Hash identifier:          ScQfetH0RLx+2RK3OECS4B54DAj4IKITJ2d/b8TY5+4=
Subject key identifier:   86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       332913320F9C53E3033995DEFC907930029DE6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 21 Jun 2024 08:33:20 +0000
Certificate not after:    Fri 20 Jun 2025 08:38:20 +0000
Subordinate resources:    IP: 2a07:2486:fc0::/44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:13:32:0f:9c:53:e3:03:39:95:de:fc:90:79:30:02:9d:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Jun 21 08:33:20 2024 GMT
            Not After : Jun 20 08:38:20 2025 GMT
        Subject: CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:72:ab:09:37:45:a2:61:99:0c:83:86:aa:
                    ed:ea:2c:7c:a8:d2:c1:e3:95:7b:ca:08:b5:48:1d:
                    b2:32:49:93:aa:fe:84:68:49:5b:78:f5:86:46:28:
                    16:41:78:15:d6:f1:2f:fb:1a:12:19:2b:ca:ba:5b:
                    9f:c8:2c:00:a8:e0:26:44:34:db:49:34:52:dc:81:
                    e0:da:53:89:c7:c5:35:31:e9:02:28:f5:53:4b:74:
                    cc:93:ac:77:5e:90:b7:ad:6b:ca:8a:d5:e2:76:f0:
                    91:a9:fc:1e:b6:5b:87:69:20:b0:06:34:c1:7f:08:
                    ff:a0:f5:5f:93:b3:3a:d0:10:40:93:c3:b1:4e:61:
                    de:28:50:c9:77:a2:f7:66:43:63:96:90:a1:bc:6c:
                    c2:0c:8b:3f:d9:f2:29:58:96:26:58:82:2c:b0:84:
                    dc:80:7e:05:0a:fa:85:01:bd:54:d0:46:1f:bb:0e:
                    c8:ab:0a:4e:1d:06:35:59:aa:be:aa:1a:4a:14:11:
                    e9:33:59:84:1e:af:53:f1:dd:ba:08:0d:86:21:73:
                    c6:0a:e2:cd:37:0b:14:3f:e5:38:76:2d:3a:a4:ae:
                    d9:0e:40:25:37:e6:f7:26:29:7b:9c:fb:10:5a:ca:
                    c3:5a:39:0d:b8:76:e3:f7:08:a9:dc:90:8d:c1:ed:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:45:f0:82:b6:4b:3d:b3:d5:14:76:87:4d:ff:4f:ac:bf:a3:
         ef:ed:ca:c0:02:24:1c:37:fa:77:93:b0:1e:34:3a:67:1e:f6:
         f1:46:ee:cf:ba:cc:f4:15:84:5c:94:75:87:c1:06:62:a3:5a:
         55:90:65:33:b2:c3:24:43:4f:7d:96:bf:09:32:e7:89:71:dc:
         fa:06:b0:46:a9:3a:bd:fe:90:26:71:36:80:e7:63:ad:d8:b3:
         91:e8:ca:0a:92:0d:5c:58:2e:6c:99:93:97:b1:0b:07:50:20:
         1a:51:ab:8b:6c:2e:9f:cf:b7:55:a1:08:8e:3a:62:89:a3:23:
         17:df:ab:9c:5a:82:12:89:0c:0a:e7:1d:26:54:9e:2a:0e:7d:
         8d:56:0e:c8:20:62:cc:d8:12:96:df:cb:20:2d:ed:31:c0:4f:
         8a:78:95:45:77:18:b1:83:40:41:7e:bc:24:ad:c6:78:44:bd:
         63:f9:3d:f3:94:57:fa:e3:f8:ef:26:c8:f9:90:ed:0b:f0:67:
         a6:93:49:7c:a4:30:78:75:13:f5:b5:ec:06:b1:b8:01:eb:49:
         79:f7:37:03:7e:85:03:eb:84:df:7a:a7:b6:9f:e0:79:76:82:
         72:10:3f:65:74:7b:b7:53:08:50:96:f6:91:28:76:08:71:ed:
         bd:6e:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----