Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
File:                     AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer (raw, json)
Hash identifier:          xatF46EgoCuoQ6b73GnREyudGXnf2rIduDBudS6mjrU=
Subject key identifier:   AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       4434E624D1B1A442AED8ECA4AD88B8DB21A0ED6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 10 Apr 2024 20:49:40 +0000
Certificate not after:    Wed 09 Apr 2025 20:54:40 +0000
Subordinate resources:    IP: 2a07:2486:e00::/40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:e6:24:d1:b1:a4:42:ae:d8:ec:a4:ad:88:b8:db:21:a0:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Apr 10 20:49:40 2024 GMT
            Not After : Apr  9 20:54:40 2025 GMT
        Subject: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:71:e7:8d:63:10:9b:2d:0d:9e:04:95:5c:
                    0c:db:e5:91:7e:27:53:1e:6e:5e:a2:5e:03:d3:ac:
                    01:d2:df:9b:31:42:c3:51:89:43:9a:0a:5e:32:8c:
                    de:f1:2a:b7:ae:d9:9b:e6:a1:b7:78:97:02:7e:56:
                    80:00:b4:93:2e:3e:a9:83:a2:13:c3:15:73:09:d8:
                    e3:1b:b5:31:fd:dd:a0:27:44:f3:e1:ba:c3:cd:6f:
                    96:ed:00:e9:26:20:aa:16:ef:d4:45:49:c2:91:c6:
                    04:c3:a0:be:41:bb:05:c7:83:81:63:70:30:de:b8:
                    51:10:f8:f8:37:f4:ce:05:45:39:d8:cd:54:5d:28:
                    57:ef:fb:25:1c:e3:1a:22:57:99:3c:fa:17:36:03:
                    ac:35:3e:ad:6d:b0:49:57:56:d8:af:57:d3:63:d9:
                    39:48:23:3d:f1:2e:56:5b:f0:15:8e:2d:64:59:ef:
                    43:70:2b:53:03:3f:6b:2e:3d:4d:5c:de:51:51:da:
                    25:ce:17:0c:06:4c:89:4d:f0:a6:54:a9:e5:ac:4d:
                    b6:45:b4:0a:6a:0e:a0:7e:b3:7e:ac:9f:c0:ce:0e:
                    96:ae:0c:45:99:de:70:99:8e:26:05:28:db:05:38:
                    9b:f3:0a:12:48:6d:b2:dd:08:ec:43:7a:b3:07:c4:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:8c:af:5c:57:fc:b1:24:83:6e:0f:c9:d0:4d:01:41:70:
         d3:5b:f0:3a:a4:08:8b:16:9e:50:c3:2e:53:85:b7:b1:bd:88:
         60:cc:81:4d:45:d0:dc:7d:58:f6:aa:82:82:b9:04:2a:e9:6f:
         1e:ac:01:fe:4e:0c:f3:29:c5:58:c0:39:c1:50:22:35:c1:91:
         23:d9:03:44:30:6f:e2:e1:a7:d5:27:cd:b4:66:53:19:fe:63:
         53:84:32:59:28:ce:6a:91:12:16:6c:1b:e9:7c:4a:28:85:6b:
         14:8d:f9:76:af:8f:de:0f:c9:19:30:c0:dc:91:38:64:44:95:
         43:3c:62:00:b9:00:0f:dc:c7:74:e6:e1:4b:54:2e:ae:a0:3d:
         c8:b8:79:a9:a5:2b:08:a9:4b:14:a8:b8:e8:05:4c:ad:c9:42:
         dc:1f:28:4d:04:8b:b6:bd:99:8e:57:fb:1b:b9:bf:ec:5a:25:
         e8:20:ef:3b:21:80:49:cb:4f:3f:f2:0e:d8:12:d9:7b:f2:79:
         de:51:a7:78:43:74:2a:3b:8e:61:b1:1c:f7:8f:1d:41:ce:c5:
         6e:71:ff:02:40:1a:e9:05:11:4e:26:ad:bd:e8:80:af:91:0a:
         27:3e:69:20:3d:29:b0:87:31:c9:d4:d9:a1:bf:8e:10:34:df:
         db:f7:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----