Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
File:                     18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer (raw, json)
Hash identifier:          DBSvKMxhUz/JilsskmWnYA859j5uNJ3whg5BH8HxnNs=
Subject key identifier:   18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       1BFB32EF1B395EEE78D603ECBAA102E0EF828C2F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 07 Dec 2024 20:28:36 +0000
Certificate not after:    Sat 06 Dec 2025 20:33:36 +0000
Subordinate resources:    IP: 2a0a:6044:6300::/40
                          IP: 2a0a:6044:6500::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fb:32:ef:1b:39:5e:ee:78:d6:03:ec:ba:a1:02:e0:ef:82:8c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec  7 20:28:36 2024 GMT
            Not After : Dec  6 20:33:36 2025 GMT
        Subject: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:04:0c:1a:63:67:ae:60:13:62:45:47:6b:
                    14:a5:af:aa:ba:40:73:0d:12:32:90:65:1c:38:58:
                    fb:6f:e6:a7:eb:e5:c3:c5:c5:a1:95:ef:66:18:f4:
                    1a:94:8b:67:b6:78:9f:79:f2:2e:2e:3f:1a:53:c8:
                    dc:a3:97:19:b0:3c:18:52:fe:32:01:fe:7b:0a:f5:
                    f5:cb:58:65:c4:27:e9:1b:1c:9b:03:89:c4:ff:65:
                    5f:a6:a5:e0:ab:75:40:8c:34:ed:20:42:07:99:c9:
                    6e:bc:6b:26:e0:79:b2:00:3e:5c:b4:b0:e2:35:7a:
                    64:18:38:3d:53:98:0f:a6:8c:30:e8:5b:d5:80:93:
                    3f:1b:e4:46:84:9d:9e:5d:56:51:d5:f0:a1:b4:08:
                    2a:86:5d:f5:0f:29:8b:89:cd:f5:7c:9e:e8:a4:ac:
                    7a:fa:6a:19:ac:ce:f4:99:57:eb:26:a0:4a:b1:c2:
                    ca:6d:44:fa:02:8a:cb:22:95:68:c8:81:a0:e1:86:
                    f6:42:48:c9:0c:d7:3c:bc:d8:40:9f:c5:f9:40:6b:
                    17:ed:44:c2:28:41:c0:cd:2b:cc:ba:37:f5:04:fc:
                    96:f2:32:4d:85:28:8c:dd:60:3c:f6:75:1b:4c:65:
                    86:5f:52:61:ad:b0:bf:24:03:6f:51:27:29:aa:60:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6300::/40
                  2a0a:6044:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:07:39:04:d4:99:5f:e0:3a:d1:02:ee:8b:22:e5:d9:2f:
         d1:c3:9e:94:f0:30:7c:39:39:ca:e2:03:fb:0a:64:2a:83:2a:
         bc:24:55:2b:38:13:c2:76:3a:68:c0:a2:52:03:5f:2b:95:68:
         80:9a:b7:98:08:07:99:7f:5b:68:af:08:03:b4:0e:46:24:1e:
         e4:da:42:4e:6e:13:c8:94:20:16:a2:90:aa:65:4e:95:d3:94:
         4c:35:c4:37:67:1c:b6:49:10:3d:bc:c1:38:2e:f4:ad:33:e2:
         7b:77:53:e3:75:c2:4c:90:2e:28:23:81:3e:4c:41:00:83:26:
         41:4c:9a:6e:2e:18:df:cc:19:52:56:5c:90:a4:87:10:10:60:
         1a:16:87:e7:8a:ec:a3:06:f8:48:8b:cf:b3:0e:d7:13:ce:00:
         91:4b:70:38:20:5a:aa:d8:47:5b:8d:0d:b2:5b:b6:d5:01:41:
         1b:22:a1:48:14:f5:db:0e:4a:a2:f8:65:04:80:2e:28:96:26:
         c4:f2:fe:d1:90:6e:0a:9f:4c:99:b0:83:95:5c:57:6f:11:b4:
         a0:64:6c:a7:75:3a:6e:7a:b7:17:11:93:ea:63:fb:62:98:16:
         46:d8:f3:ef:4e:45:92:c6:15:60:a3:42:b6:1e:14:53:8f:0a:
         80:50:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:12 2025 by rpki-client