Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/EFC33765381A3F6F5CD6EBEE3A113B0747F70D75.cer
File:                     EFC33765381A3F6F5CD6EBEE3A113B0747F70D75.cer (raw, json)
Hash identifier:          HR5UZOlF/VNaYQohVSvMK7MUUTN41GxiK2TRinafa7Y=
Subject key identifier:   EF:C3:37:65:38:1A:3F:6F:5C:D6:EB:EE:3A:11:3B:07:47:F7:0D:75
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       72664F2D059A8F6EDC2D1653C5AFBF06D2381FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest:                 rsync://rpki.ssmidge.xyz/repo/ssmidgellc/2/EFC33765381A3F6F5CD6EBEE3A113B0747F70D75.mft
caRepository:             rsync://rpki.ssmidge.xyz/repo/ssmidgellc/2/
Notify URL:               https://rpki.ssmidge.xyz/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 16:55:30 +0000
Certificate not after:    Fri 19 Jul 2024 17:00:30 +0000
Subordinate resources:    IP: 2a13:df86::/32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:66:4f:2d:05:9a:8f:6e:dc:2d:16:53:c5:af:bf:06:d2:38:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jul 21 16:55:30 2023 GMT
            Not After : Jul 19 17:00:30 2024 GMT
        Subject: CN=EFC33765381A3F6F5CD6EBEE3A113B0747F70D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:b2:62:5d:16:a7:18:af:7d:28:3e:69:3a:
                    0b:fe:1b:8b:76:05:16:ec:6d:97:29:77:9c:d8:36:
                    89:25:21:12:65:e4:89:ea:b8:70:a7:2e:e1:a3:58:
                    d8:18:c8:c7:74:74:7a:aa:9e:d2:23:f4:ce:22:f3:
                    44:92:85:73:7f:b7:a4:d6:63:07:5a:ef:0d:08:2a:
                    39:0c:7b:8d:e7:73:b7:0c:fe:2f:da:15:0b:87:dc:
                    e9:67:5c:1c:a7:72:b6:05:ff:34:fc:4e:4b:9a:a4:
                    8d:2e:0a:1a:07:c0:bf:e6:cc:46:45:ff:87:f3:cd:
                    e5:2a:67:f0:bf:53:c7:a8:9e:ab:b9:7f:10:1a:a0:
                    f3:1a:95:f0:1c:44:d2:44:16:19:13:ab:1e:41:67:
                    6b:5d:d0:bd:20:83:79:a5:b5:68:64:76:af:a8:e2:
                    2e:0b:82:19:1d:e5:b8:af:de:38:03:12:2b:6d:fe:
                    9e:8c:d8:f8:d8:3a:fc:79:e5:99:76:ec:c4:74:7d:
                    49:ea:4b:01:a0:71:35:79:d6:c1:9b:01:ed:83:ec:
                    e6:87:13:a6:54:b3:d2:80:e2:e9:53:27:03:67:fa:
                    53:9c:85:84:d2:ef:4d:96:78:76:4d:e3:c3:44:52:
                    9b:dc:45:82:e8:b9:2a:5c:ef:10:40:72:71:7e:5a:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:C3:37:65:38:1A:3F:6F:5C:D6:EB:EE:3A:11:3B:07:47:F7:0D:75
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ssmidge.xyz/repo/ssmidgellc/2/
                RPKI Manifest - URI:rsync://rpki.ssmidge.xyz/repo/ssmidgellc/2/EFC33765381A3F6F5CD6EBEE3A113B0747F70D75.mft
                RPKI Notify - URI:https://rpki.ssmidge.xyz/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:37:3e:fa:9a:26:58:d6:f3:15:a7:17:bd:16:c2:68:16:d8:
         8c:6c:00:44:4b:9c:a4:ee:31:87:12:c9:50:1f:49:30:13:9b:
         16:31:6d:be:64:55:dd:16:d9:bc:1a:8b:ea:a0:25:44:8a:70:
         fa:93:a6:bd:0c:a1:b4:cd:06:23:c8:e9:c4:b2:60:f7:b0:29:
         74:69:4e:9e:12:f8:76:c4:37:d5:63:ed:4f:ad:1e:dc:01:bc:
         20:48:7d:25:77:3f:1e:42:2f:00:ab:78:1a:f5:66:39:9c:9f:
         5a:f8:de:99:d5:49:c0:ee:eb:f3:ac:6e:d7:b8:ba:1f:30:9d:
         bf:34:24:87:42:14:ff:b5:10:a4:90:cd:d0:b2:29:e5:30:14:
         c9:3f:35:79:07:db:07:7a:aa:7d:ca:bf:30:89:72:c1:75:ab:
         5f:12:f2:87:10:7a:15:b7:5e:06:3f:a4:4f:67:7f:6d:14:da:
         f0:62:1f:92:e3:29:a2:95:de:81:c8:44:20:05:57:73:96:5c:
         db:83:9a:15:70:99:4b:1e:1a:fe:ee:f7:62:af:63:ef:cd:64:
         aa:74:66:91:20:d6:50:2e:94:49:91:cf:29:74:56:b5:0d:5a:
         a3:41:62:65:c3:9a:bf:68:b9:bc:f2:49:fa:57:dc:46:fb:70:
         b1:99:33:a3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIUcmZPLQWaj27cLRZTxa+/BtI4H/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA3MjExNjU1MzBaFw0yNDA3MTkxNzAwMzBaMDMxMTAvBgNV
BAMTKEVGQzMzNzY1MzgxQTNGNkY1Q0Q2RUJFRTNBMTEzQjA3NDdGNzBENzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95rJiXRanGK99KD5pOgv+G4t2
BRbsbZcpd5zYNoklIRJl5InquHCnLuGjWNgYyMd0dHqqntIj9M4i80SShXN/t6TW
Ywda7w0IKjkMe43nc7cM/i/aFQuH3OlnXByncrYF/zT8TkuapI0uChoHwL/mzEZF
/4fzzeUqZ/C/U8eonqu5fxAaoPMalfAcRNJEFhkTqx5BZ2td0L0gg3mltWhkdq+o
4i4Lghkd5biv3jgDEitt/p6M2PjYOvx55Zl27MR0fUnqSwGgcTV51sGbAe2D7OaH
E6ZUs9KA4ulTJwNn+lOchYTS702WeHZN48NEUpvcRYLouSpc7xBAcnF+Wp85AgMB
AAGjggKMMIICiDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvwzdlOBo/b1zW
6+46ETsHR/cNdTAfBgNVHSMEGDAWgBTVw9XnD8mtELqQ1F3GZFTp46FGqDAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9ENUMzRDVFNzBGQzlBRDEwQkE5MEQ0NURD
NjY0NTRFOUUzQTE0NkE4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWNQVjV3
X0pyUkM2a05SZHhtUlU2ZU9oUnFnLmNlcjCB6gYIKwYBBQUHAQsEgd0wgdowNwYI
KwYBBQUHMAWGK3JzeW5jOi8vcnBraS5zc21pZGdlLnh5ei9yZXBvL3NzbWlkZ2Vs
bGMvMi8wYwYIKwYBBQUHMAqGV3JzeW5jOi8vcnBraS5zc21pZGdlLnh5ei9yZXBv
L3NzbWlkZ2VsbGMvMi9FRkMzMzc2NTM4MUEzRjZGNUNENkVCRUUzQTExM0IwNzQ3
RjcwRDc1Lm1mdDA6BggrBgEFBQcwDYYuaHR0cHM6Ly9ycGtpLnNzbWlkZ2UueHl6
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPfhjANBgkqhkiG9w0BAQsF
AAOCAQEAyTc++pomWNbzFacXvRbCaBbYjGwAREucpO4xhxLJUB9JMBObFjFtvmRV
3RbZvBqL6qAlRIpw+pOmvQyhtM0GI8jpxLJg97ApdGlOnhL4dsQ31WPtT60e3AG8
IEh9JXc/HkIvAKt4GvVmOZyfWvjemdVJwO7r86xu17i6HzCdvzQkh0IU/7UQpJDN
0LIp5TAUyT81eQfbB3qqfcq/MIlywXWrXxLyhxB6FbdeBj+kT2d/bRTa8GIfkuMp
opXegchEIAVXc5Zc24OaFXCZSx4a/u73Yq9j781kqnRmkSDWUC6USZHPKXRWtQ1a
o0FiZcOav2i5vPJJ+lfcRvtwsZkzow==
-----END CERTIFICATE-----