Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
File:                     C733D4ED636DF1253237FE26C90A8F298B550237.cer (raw, json)
Hash identifier:          8F/g/RJYpgQaprcx/OPPfIOeQRfudXtUsrYH8XWWKuc=
Subject key identifier:   C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       422891547CF701D6F0AAA475F1986D542C1179BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 23 Aug 2023 10:47:23 +0000
Certificate not after:    Wed 21 Aug 2024 10:52:23 +0000
Subordinate resources:    IP: 2a13:df84::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:91:54:7c:f7:01:d6:f0:aa:a4:75:f1:98:6d:54:2c:11:79:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 23 10:47:23 2023 GMT
            Not After : Aug 21 10:52:23 2024 GMT
        Subject: CN=C733D4ED636DF1253237FE26C90A8F298B550237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:d1:50:8d:e5:95:b2:f3:33:5d:de:a2:1a:
                    7c:81:c4:51:5c:ec:29:61:d9:63:49:e2:82:ec:3f:
                    ca:0f:3a:1b:5a:93:64:90:3b:5b:e2:7a:3e:96:75:
                    b4:73:0f:54:23:49:ab:ad:00:8e:c4:04:7e:93:f1:
                    7d:00:ca:d9:79:d1:93:08:57:5d:a2:bd:b5:a1:d6:
                    b8:86:84:a5:06:bc:ab:90:aa:4c:dd:d3:00:33:d8:
                    65:a8:04:4d:06:37:9b:ea:86:8f:91:bf:97:9e:41:
                    bb:f0:22:2b:17:aa:8b:f3:dc:aa:8f:1b:47:dd:db:
                    35:13:25:53:37:85:40:d0:6d:ea:7a:fd:e8:5f:c1:
                    07:53:63:39:43:2d:dc:74:a2:15:38:af:63:f9:26:
                    26:f8:c3:f9:f4:44:f1:49:19:73:1d:6f:64:4c:dd:
                    1d:34:d5:c8:cb:ea:8a:95:df:5c:93:04:e4:66:ca:
                    eb:4e:79:3b:1e:fa:c1:5b:94:f9:f1:3a:68:b3:ef:
                    7c:46:ae:81:57:6a:5f:99:25:e0:f6:06:44:21:90:
                    5a:c6:c9:2a:11:20:77:13:d4:93:5e:9f:26:1c:c3:
                    44:24:d4:46:70:cc:3f:27:01:ee:a8:c9:7b:5b:a8:
                    d0:a1:11:77:a4:35:ff:80:77:cb:30:67:92:a6:65:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df84::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:40:c4:2e:84:d9:d6:47:32:c5:10:f2:c4:87:8c:29:52:04:
         54:d9:3d:9b:06:d7:87:0d:06:1d:6e:fd:fd:dc:1f:1c:b1:6b:
         2a:87:c9:5f:09:58:51:5a:69:fd:aa:2e:de:82:14:58:f3:08:
         7e:e3:f8:9e:5e:ba:66:c6:11:0b:e8:9c:26:55:f1:bf:a4:89:
         5e:cb:cb:6a:47:1f:1f:43:8f:42:e1:4e:82:b9:0a:a4:69:02:
         7a:a8:2d:40:64:d0:13:26:55:9e:3f:26:46:48:c2:19:ba:ab:
         e7:fa:61:be:ff:0c:b0:d3:2d:4f:0b:c3:d9:96:ed:e7:29:c3:
         c1:ae:fb:95:12:60:63:f1:e7:30:a1:9a:88:c7:47:46:d5:03:
         bd:64:70:fa:c6:02:5d:bb:d1:54:6e:a1:26:b4:dd:2a:95:27:
         68:73:7b:b9:cd:28:04:d6:4d:52:60:c8:3d:bb:3b:df:ec:81:
         66:ad:c0:38:14:0a:d4:8f:2b:72:44:97:ca:55:a2:15:77:0a:
         71:29:11:dd:93:83:a9:a0:94:a1:4b:9e:33:67:f1:c5:aa:2f:
         dc:cf:33:fb:15:ac:3a:e4:90:88:1c:ea:ac:00:d3:d1:24:8d:
         cd:0e:fa:d3:51:70:b6:90:c3:d5:7e:d3:83:40:13:2d:b5:7e:
         a7:91:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----