Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer
File:                     9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer (raw, json)
Hash identifier:          nlildcOVWgecdIgcR8/tmqH0U0xfdJuhJdtlqnLnLyw=
Subject key identifier:   9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4A9B1E2543857A2AE05ACD98435498F111F6F4EB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 22 Jun 2024 15:40:48 +0000
Certificate not after:    Sat 21 Jun 2025 15:45:48 +0000
Subordinate resources:    IP: 2a0a:6044:ba00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9b:1e:25:43:85:7a:2a:e0:5a:cd:98:43:54:98:f1:11:f6:f4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun 22 15:40:48 2024 GMT
            Not After : Jun 21 15:45:48 2025 GMT
        Subject: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:25:c1:8e:b4:41:a3:3c:d2:4e:6a:63:0f:
                    6a:68:88:cf:b4:71:62:30:3b:25:ff:80:2d:16:7e:
                    5d:67:cb:b8:16:ec:e6:2d:2b:25:24:5d:87:8e:b2:
                    f1:39:86:df:14:22:18:32:6e:e8:a1:2e:a7:09:2e:
                    a5:12:c4:96:53:09:87:d5:d6:df:0a:69:48:80:f0:
                    56:fa:8d:a8:21:81:e4:ae:d4:9b:b3:94:bc:75:50:
                    f1:80:10:8c:7a:d4:ac:8c:23:12:05:ea:f3:41:79:
                    27:2f:75:33:0f:77:9e:42:b1:8c:9a:7e:d9:2e:e4:
                    07:5e:24:4f:7a:cc:76:63:71:1b:05:ae:19:30:ae:
                    16:52:dc:eb:12:71:86:48:79:7a:1a:4a:28:21:85:
                    b8:03:39:0d:8e:bf:52:ba:91:72:60:42:27:1b:13:
                    a6:f8:bf:91:f8:9f:eb:07:88:88:c5:e8:98:72:7c:
                    6f:4d:12:a3:89:63:a3:07:c9:4b:f7:b3:5b:fc:57:
                    e0:f6:5b:55:e6:42:40:6f:6a:74:78:e6:96:8c:37:
                    61:e1:90:59:14:d7:0c:04:f3:50:50:eb:11:cf:bb:
                    d3:81:03:a3:93:28:35:4f:4a:d7:5c:3c:7c:3b:03:
                    11:d5:6b:12:11:d6:9c:4e:d9:5b:0e:7b:9e:3b:d5:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:d7:7e:91:e5:c0:24:fa:5d:08:9d:a4:e0:c4:fc:77:2a:31:
         85:26:61:f6:c6:ca:14:09:9b:42:30:e3:e1:8b:ba:b8:db:89:
         9e:69:34:7c:f9:48:de:0a:47:8d:03:81:da:ac:ff:60:c3:f7:
         f3:c7:c7:82:e9:a0:93:36:49:23:41:37:a5:e4:6b:ec:3e:6d:
         b1:e0:10:54:79:5b:ad:aa:f9:a7:c7:bd:13:92:07:d9:5c:58:
         de:ed:3e:aa:20:6c:e9:0f:73:d4:f5:e3:30:49:40:df:32:98:
         94:81:0a:95:3f:89:80:39:cf:12:3a:aa:f2:ad:3e:c3:9d:3c:
         fe:78:90:d6:8b:85:d0:6c:60:3f:8f:81:71:8a:e3:a6:f4:f2:
         72:3b:5b:43:e9:17:45:84:e6:1c:04:40:b6:65:43:cd:a5:2a:
         1c:0f:7a:16:e0:03:58:b1:85:80:f6:54:9a:af:cc:f5:d8:0d:
         01:d3:75:a5:a6:c3:98:e6:e1:5c:81:05:af:ef:e8:a2:83:4f:
         9a:c7:d6:1d:49:a9:ef:fc:f9:d0:2e:aa:67:df:1b:c4:ae:7f:
         ac:e3:20:d5:98:54:7e:c9:a8:ec:3a:78:d7:6e:a9:89:d7:aa:
         29:72:c2:ea:64:a5:4b:06:3a:87:5f:d1:87:a1:57:5e:73:ba:
         a5:f5:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----