Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
File:                     B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer (raw, json)
Hash identifier:          D6SiYPvKhsPoJcyq228Lcl6ia6Ll8toO5N0/Z/Di1PA=
Subject key identifier:   B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3F9A5F5296617750A96F5FBBC53FC3264995A1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 15 Feb 2025 19:38:32 +0000
Certificate not after:    Sat 14 Feb 2026 19:43:32 +0000
Subordinate resources:    IP: 2a09:54c3::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9a:5f:52:96:61:77:50:a9:6f:5f:bb:c5:3f:c3:26:49:95:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 15 19:38:32 2025 GMT
            Not After : Feb 14 19:43:32 2026 GMT
        Subject: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:e7:41:d9:57:53:d1:d3:70:49:65:a3:67:
                    3b:63:21:55:55:7f:34:81:da:97:8c:92:90:0b:26:
                    cf:ef:79:ae:78:bb:d4:f3:87:f9:d3:52:62:b6:2d:
                    5d:6c:9f:a3:e4:76:a9:1f:5c:bd:e0:65:b3:98:5d:
                    86:86:c9:ea:3c:d9:f8:44:58:cd:09:c3:5c:d9:01:
                    73:e3:e2:6e:9f:86:7a:fc:90:09:bf:78:2b:81:a3:
                    a7:e7:59:07:78:f1:ae:18:31:49:51:d7:ab:27:1d:
                    2a:c0:44:96:17:b1:f1:65:b2:7c:7d:b2:a8:3b:dc:
                    0b:b9:9c:8a:32:e2:ab:89:b1:f4:5c:07:7e:dd:52:
                    0f:b7:88:20:bb:74:15:d1:ba:1b:ce:c3:49:28:2a:
                    cf:eb:e3:a6:83:e3:00:3f:ed:64:39:a3:e5:d5:2d:
                    70:ae:49:e2:fe:96:e0:09:3a:8e:8f:95:91:ef:a2:
                    8a:50:a5:ea:43:f6:1d:04:24:32:e2:33:d4:b3:35:
                    ba:f1:da:d3:6d:59:36:7d:37:bf:f2:61:d1:64:1e:
                    40:a4:3b:46:79:e5:5e:4a:0d:7c:99:d8:5b:2f:97:
                    10:4e:0b:45:78:bd:a0:69:0c:25:2e:62:9f:27:6f:
                    0c:72:bc:c1:c7:10:fc:89:2b:9b:4b:d0:ff:1f:b1:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:de:cb:b4:28:a0:a1:f8:aa:cd:20:c4:8d:88:d9:9f:51:
         6d:88:11:ac:5d:27:38:09:4f:a8:77:22:b3:78:2b:91:2d:65:
         ee:6d:c1:13:bc:24:cb:d9:f6:87:81:cd:d7:24:9a:89:6e:37:
         1b:22:5e:fa:a9:04:e8:07:87:ee:69:a4:96:68:b9:96:a0:60:
         a2:75:1d:73:3d:c7:1e:a4:0d:5e:4f:db:7a:9c:a5:39:da:19:
         bd:83:4b:6f:ab:26:9c:fb:8d:e9:23:f8:fc:e9:15:a9:99:06:
         29:f0:5e:60:c4:e1:e8:37:03:ec:f6:66:4f:21:b8:c6:2f:bf:
         f2:98:03:40:80:bc:7d:70:9b:e6:5d:56:4e:29:84:00:0a:62:
         dc:32:60:0b:d0:4e:50:10:8a:b1:1e:d8:72:d0:f6:59:f3:d4:
         8e:b0:63:67:27:f9:97:cd:4d:e6:9d:ea:a2:37:b9:95:e0:73:
         28:0a:d5:d0:c6:1c:65:c3:ee:9f:a0:1e:b4:cc:cd:f2:f8:a8:
         e5:92:69:0e:08:f0:c4:2b:2b:06:de:d3:91:42:07:70:25:32:
         a0:43:17:5e:7a:6d:77:34:08:62:06:f5:55:c6:82:a0:1a:fa:
         20:6e:7c:10:2f:92:1d:4f:96:c0:ac:c2:27:2d:2a:59:c7:2c:
         3f:0c:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----