Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer
File:                     178395FF98E8AEA645CFCD7DF742855D46457BAF.cer (raw, json)
Hash identifier:          Yn8K7KQ415WbrE+JUNwiKNVUFPmUbVSaVk+JatSlinY=
Subject key identifier:   17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       7C867A822D36ED23030F0FE8F6840A02885F2AFA
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 23 Jun 2025 09:50:34 +0000
Certificate not after:    Mon 22 Jun 2026 09:55:34 +0000
Subordinate resources:    IP: 2a0a:6044:ba00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:86:7a:82:2d:36:ed:23:03:0f:0f:e8:f6:84:0a:02:88:5f:2a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 23 09:50:34 2025 GMT
            Not After : Jun 22 09:55:34 2026 GMT
        Subject: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:c3:64:33:d7:4c:80:5f:61:fe:1d:07:41:
                    61:1a:9e:78:ca:af:03:1c:8b:09:b9:d3:c6:e1:c1:
                    c9:32:30:c5:75:c0:3a:7d:88:83:5d:2b:2b:9b:af:
                    a2:7c:f5:d0:9d:8e:a7:6e:af:e9:a6:36:dc:3a:c3:
                    d6:87:f3:e8:6e:f5:84:ae:59:95:47:fb:76:67:7a:
                    48:ca:22:e0:05:38:cd:8e:14:86:c9:b9:c0:d5:8f:
                    33:19:2f:55:34:3f:12:89:9b:6b:fc:d7:09:02:69:
                    f0:65:c0:c1:ec:d0:b8:c5:3a:7d:68:73:58:05:43:
                    74:c7:fb:d8:52:11:5e:8a:bd:b3:fb:ca:84:0c:c5:
                    ed:67:fd:33:24:55:3a:64:f5:5a:3e:03:d4:e3:e8:
                    79:c6:e8:c0:86:38:9c:45:0e:79:a3:2e:04:de:cb:
                    e0:d5:1e:4c:02:2f:79:6f:84:42:d8:e8:45:1f:61:
                    1c:fe:e3:0c:6e:9a:ae:49:af:0b:02:a1:c9:35:4a:
                    a5:b4:c0:4d:f3:0a:9c:7a:c0:13:7d:9e:3d:6e:e4:
                    85:ff:af:7d:96:75:05:60:d4:f8:e6:dd:1e:5d:c7:
                    c7:af:45:b4:47:99:75:31:5c:0a:8c:07:6f:de:11:
                    31:01:6d:08:8a:18:d7:ad:11:c2:6d:01:40:2d:e3:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:68:5d:01:95:f2:31:26:7c:42:47:00:14:43:1d:cb:bb:
         2a:7c:4e:4b:93:2e:97:49:21:b2:a9:98:24:23:ab:e3:92:99:
         a8:64:9e:a0:c8:4b:c8:54:bf:0a:f5:25:83:b1:45:6f:90:eb:
         46:5c:81:c7:ff:bb:6c:0b:7f:98:ef:e9:7f:da:6f:26:37:58:
         60:8e:51:58:65:d0:16:7a:12:de:5b:4b:d8:2f:e8:d4:cb:4d:
         a0:88:c2:e2:9a:73:87:6e:4a:e8:d5:86:f7:8e:82:06:52:a4:
         4a:da:0e:72:33:aa:ed:0f:40:aa:f9:6f:f8:9a:20:c9:1e:41:
         73:7b:51:b2:4e:c0:e0:11:f7:a2:1a:13:c4:2d:4f:f4:02:3b:
         69:68:30:ac:a1:35:19:b1:cf:a7:c9:d7:29:a9:7a:5c:9d:79:
         1b:70:9b:bf:80:6a:aa:a2:48:c4:ec:6c:9d:c3:94:c2:86:b2:
         13:e1:2c:e6:e2:43:4d:00:d7:d0:7e:67:da:24:bd:4b:bf:00:
         58:3e:b3:45:74:b2:d8:64:a6:c1:15:c8:78:60:5e:dc:f3:6b:
         f2:4d:66:a0:f0:e8:8a:ba:b7:aa:fb:3c:c5:46:a0:15:3f:db:
         ee:39:42:af:e8:00:83:24:fc:c9:cb:8d:01:83:48:de:b8:4f:
         2a:16:02:a2
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgIUfIZ6gi027SMDDw/o9oQKAohfKvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MjMwOTUwMzRaFw0yNjA2MjIwOTU1MzRaMDMxMTAvBgNV
BAMTKDE3ODM5NUZGOThFOEFFQTY0NUNGQ0Q3REY3NDI4NTVENDY0NTdCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAsNkM9dMgF9h/h0HQWEannjK
rwMciwm508bhwckyMMV1wDp9iINdKyubr6J89dCdjqdur+mmNtw6w9aH8+hu9YSu
WZVH+3ZnekjKIuAFOM2OFIbJucDVjzMZL1U0PxKJm2v81wkCafBlwMHs0LjFOn1o
c1gFQ3TH+9hSEV6KvbP7yoQMxe1n/TMkVTpk9Vo+A9Tj6HnG6MCGOJxFDnmjLgTe
y+DVHkwCL3lvhELY6EUfYRz+4wxumq5JrwsCock1SqW0wE3zCpx6wBN9nj1u5IX/
r32WdQVg1Pjm3R5dx8evRbRHmXUxXAqMB2/eETEBbQiKGNetEcJtAUAt4xRpAgMB
AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXg5X/mOiupkXP
zX33QoVdRkV7rzAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy
OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC
NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzIv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv
Mi8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RGNzQyODU1RDQ2NDU3QkFGLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEujANBgkqhkiG9w0BAQsFAAOCAQEAQbFo
XQGV8jEmfEJHABRDHcu7KnxOS5Mul0khsqmYJCOr45KZqGSeoMhLyFS/CvUlg7FF
b5DrRlyBx/+7bAt/mO/pf9pvJjdYYI5RWGXQFnoS3ltL2C/o1MtNoIjC4ppzh25K
6NWG946CBlKkStoOcjOq7Q9Aqvlv+JogyR5Bc3tRsk7A4BH3ohoTxC1P9AI7aWgw
rKE1GbHPp8nXKal6XJ15G3Cbv4BqqqJIxOxsncOUwoayE+Es5uJDTQDX0H5n2iS9
S78AWD6zRXSy2GSmwRXIeGBe3PNr8k1moPDoirq3qvs8xUagFT/b7jlCr+gAgyT8
ycuNAYNI3rhPKhYCog==
-----END CERTIFICATE-----