Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
File:                     7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer (raw, json)
Hash identifier:          112HTq+xBeKIf0Z5fkwmxoYRf7X4KuREQw/jO5pSUxE=
Subject key identifier:   77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       58689B0C780583A65CA1D81DB4867C1737ADEBC6
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 20 Dec 2024 17:17:56 +0000
Certificate not after:    Fri 19 Dec 2025 17:22:56 +0000
Subordinate resources:    IP: 2a0a:6044:6300::/40
                          IP: 2a0a:6044:6500::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:9b:0c:78:05:83:a6:5c:a1:d8:1d:b4:86:7c:17:37:ad:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec 20 17:17:56 2024 GMT
            Not After : Dec 19 17:22:56 2025 GMT
        Subject: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:f1:c0:82:6c:87:13:06:a1:3d:86:7e:ee:
                    ec:57:4c:98:44:d8:61:b8:16:04:b1:19:56:9a:e0:
                    75:4b:1b:76:7c:e0:5c:e4:9e:a5:15:fe:36:07:6f:
                    28:ee:f2:de:d4:29:df:55:d0:95:81:2f:05:8d:08:
                    8d:87:74:de:5b:6f:7d:df:07:36:8b:53:29:11:03:
                    f8:93:0b:7a:e4:37:4d:8c:7b:7f:4e:bf:53:60:b1:
                    0a:43:8b:d0:ce:74:f9:53:e2:5b:c8:e1:5b:c0:9e:
                    65:18:76:32:da:20:ac:f4:70:0a:f7:d3:cd:32:12:
                    e3:a6:f2:36:84:f4:10:b6:98:a5:0b:53:e7:74:29:
                    ae:0b:d0:46:56:5b:a3:7c:d9:bc:88:11:8c:d3:3f:
                    5a:99:1c:d2:2e:00:bc:a0:dc:5b:3a:d8:34:3d:8f:
                    64:f9:25:06:e8:91:a2:4c:62:af:4a:f5:7a:8c:3a:
                    cc:45:6f:80:65:46:f1:8d:f1:9d:73:1e:5b:13:8c:
                    51:e1:e2:66:1c:93:85:bb:19:b0:35:8c:51:31:d5:
                    8b:ce:20:96:b9:27:43:66:f7:68:51:e7:7c:5a:f6:
                    08:e3:8b:8b:81:3f:f8:ab:54:26:a8:80:46:5e:a4:
                    33:a4:31:b0:ca:90:4a:56:f3:a4:83:86:b9:ad:1c:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6300::/40
                  2a0a:6044:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:18:00:13:30:72:dd:42:98:89:47:20:69:70:4b:30:21:e2:
         da:d7:87:08:93:f2:40:46:80:eb:e1:d5:ea:cf:78:60:b6:40:
         51:09:d4:ae:b7:32:cb:90:7e:34:f3:80:60:53:1b:d9:aa:3e:
         c4:11:7b:e4:e3:2a:bd:d0:ab:5f:e5:03:de:14:db:77:e5:c7:
         f6:a9:8d:59:47:1c:54:e4:3d:f3:0d:17:d1:76:f9:01:ae:b6:
         f1:ba:b0:28:ec:e8:9f:0c:60:5c:3e:aa:fc:a0:cd:fc:18:3d:
         86:4a:58:c7:6e:cb:e9:6d:fc:a5:3c:dd:ca:42:93:42:13:65:
         1e:d2:34:79:a0:42:2a:03:85:aa:47:0f:73:f4:45:2f:eb:95:
         89:40:52:af:1a:af:ae:63:ed:ed:92:c3:c1:c4:ea:36:8b:1e:
         31:fa:92:21:f1:26:f9:e6:9c:21:8b:98:d1:af:71:16:21:c4:
         64:fb:70:d9:5d:58:4b:b1:11:da:37:86:da:aa:47:45:57:0e:
         1c:54:d8:72:f4:61:a0:a7:85:cc:6c:cb:35:c8:91:19:6d:81:
         99:0a:19:2d:4d:42:9a:77:b9:32:a5:54:c4:e3:07:36:b6:43:
         e1:a1:c4:e8:52:bf:81:84:53:f2:99:47:56:81:0b:e8:5e:5e:
         61:f2:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 19:28:49 2025 by rpki-client