Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
File:                     1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer (raw, json)
Hash identifier:          etQ8mA5CViBL5Ua686IiG3Xeg/mE3515NuD2tm5/9sw=
Subject key identifier:   17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       0A44BC554535BDF0E85103E3036F8C30091D6026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 29 Feb 2024 01:30:44 +0000
Certificate not after:    Thu 27 Feb 2025 01:35:44 +0000
Subordinate resources:    IP: 2a13:df80:9d00::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:44:bc:55:45:35:bd:f0:e8:51:03:e3:03:6f:8c:30:09:1d:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Feb 29 01:30:44 2024 GMT
            Not After : Feb 27 01:35:44 2025 GMT
        Subject: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:ce:3d:e0:c2:fc:a2:02:89:b5:99:6c:04:
                    b5:52:cc:c6:e8:cc:5b:7c:fb:9b:0a:26:32:3c:19:
                    56:ac:d3:af:3a:f4:1c:f0:0a:fd:de:e3:d9:d8:57:
                    a2:c1:d3:15:c1:53:ac:53:05:01:f3:f4:b2:da:71:
                    05:8e:4b:3a:cc:dd:67:97:f9:27:8f:09:8c:fe:55:
                    ca:1f:32:50:dc:25:fb:27:63:99:f9:46:4d:ab:85:
                    4b:a4:cb:7e:c0:51:68:ed:1a:5b:34:95:39:4a:9d:
                    c4:9b:19:62:51:02:38:67:b3:40:ae:56:c8:24:9b:
                    d3:93:7d:bb:be:f3:94:f1:9c:ca:e1:4e:dc:98:87:
                    6c:6d:5b:f5:c6:31:56:62:ec:e0:8a:c5:8e:0b:36:
                    ce:08:ba:c4:67:8c:40:ba:fa:33:85:5c:99:50:86:
                    e2:a2:74:e7:1b:ea:27:23:cc:11:eb:ff:74:3b:7e:
                    f1:cf:44:60:15:b0:87:ff:9a:c8:de:27:52:c0:04:
                    f6:e9:7b:68:6e:e6:8a:4c:eb:26:b6:bb:00:23:56:
                    ab:07:85:ea:04:85:91:21:ba:b3:29:16:87:01:34:
                    fa:28:89:dc:1c:34:87:35:ac:bd:c2:4c:e2:37:a6:
                    e5:ad:62:dc:ea:95:d6:b2:71:e3:7c:7f:cc:92:d4:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:9d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:64:a0:f1:25:cb:ca:a5:a0:9c:a7:42:cd:96:3b:5f:b5:b8:
         05:0d:50:e5:db:5a:c4:a7:2f:a3:35:03:70:56:6e:cf:31:6f:
         a5:9b:d4:33:fa:1b:13:cf:5a:00:66:6a:fd:a2:67:bf:05:0c:
         11:f5:50:72:63:c0:80:78:c1:90:eb:7a:38:aa:52:01:bb:67:
         11:55:8a:8a:04:cd:70:05:c5:1a:f0:30:47:c7:c3:6b:63:94:
         3f:34:fd:fa:5e:73:a3:99:8a:26:b0:11:2e:93:87:9a:57:fa:
         25:f9:d0:9c:31:73:e4:d2:0e:b9:2f:85:22:ab:82:ea:3a:a1:
         be:ea:bf:37:36:6d:03:4c:b0:58:4a:88:79:a9:db:08:3b:53:
         ba:e1:5f:9a:b1:b6:a0:f4:7c:5d:8e:99:5f:27:fd:74:ac:b4:
         f6:8a:b8:ab:e9:b0:da:5c:02:cc:28:f7:3c:59:86:b1:36:5c:
         4d:ba:32:95:8e:ae:41:40:e5:8b:6e:7f:3e:22:6c:d7:19:7b:
         b6:65:b5:e9:54:04:c0:75:af:1e:5a:b9:43:26:bb:a8:b8:c0:
         2a:cf:ff:69:a5:ff:3a:65:9b:99:ea:36:9e:78:a2:84:d3:9c:
         b9:09:e5:8c:a8:70:79:64:a7:67:8f:01:98:d0:c3:21:c4:11:
         87:b6:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org