Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
File:                     B5A381A0FBA779028D2A777759668131A0F8F62F.cer (raw, json)
Hash identifier:          k7cLlJyr+UNHJNF1G1nVTrDbe7vvTZGCI0vhAvLwxEw=
Subject key identifier:   B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4F8AE27460688D85273589A98392A375E3DEF0D8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 03 Dec 2024 14:02:26 +0000
Certificate not after:    Tue 02 Dec 2025 14:07:26 +0000
Subordinate resources:    IP: 2a0a:6044:7d00::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:e2:74:60:68:8d:85:27:35:89:a9:83:92:a3:75:e3:de:f0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec  3 14:02:26 2024 GMT
            Not After : Dec  2 14:07:26 2025 GMT
        Subject: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:3d:62:a8:61:4c:b9:c0:ee:ee:ac:3c:35:
                    c2:cd:b4:ac:ee:54:13:f0:62:42:0c:a4:9e:b4:e6:
                    9b:eb:79:a9:0f:41:9f:49:94:92:e0:ae:02:cf:4f:
                    85:31:b5:11:2f:a1:e6:c3:5f:79:1d:b7:42:16:2c:
                    1e:01:7b:1d:fc:f0:69:b6:84:aa:36:48:90:8b:43:
                    72:35:1d:21:28:13:e6:f7:50:97:dc:6a:12:5c:e6:
                    bc:fa:c1:5e:77:94:de:de:d6:82:a4:6c:eb:84:7c:
                    9d:3f:54:f8:f2:79:24:e7:ac:13:e2:45:7a:d9:cb:
                    39:36:7d:4f:cc:98:e8:be:30:f4:79:a2:ec:f2:a3:
                    4d:9f:a0:03:f5:82:e0:88:a1:4d:d9:38:53:c3:f8:
                    4d:26:13:e7:ec:e4:19:67:23:7d:e8:4c:1d:69:3e:
                    56:90:fe:d9:be:66:fb:3e:61:f8:19:b0:df:a6:6f:
                    b3:62:cc:2f:d3:97:7e:7d:ae:4d:00:a4:98:60:bb:
                    2a:68:5a:be:2f:bc:ee:52:29:22:1e:1f:c7:18:58:
                    dc:70:ca:ef:00:0b:5a:ed:57:bc:28:31:dd:4c:5a:
                    30:a8:85:4f:06:aa:b3:d2:e0:f0:c9:14:e1:7e:0a:
                    db:ed:c7:5c:65:bd:48:9a:d8:a5:19:96:f9:f4:e5:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:c8:f2:66:00:a5:89:a7:aa:4c:07:d0:cc:b6:dc:2a:ce:
         c9:2d:2e:51:fe:11:bd:9e:c2:2d:6e:c8:c4:e3:41:1a:7b:dd:
         18:47:63:3a:03:f4:77:f3:97:ce:e8:dd:47:14:50:15:ef:24:
         97:5d:c2:9a:4a:25:50:e8:a8:f8:d7:47:dd:69:a1:7b:d4:19:
         ea:c9:d7:78:a8:ae:01:b5:9f:6f:7f:b9:4e:41:84:77:9f:cc:
         8d:39:9e:7e:21:aa:9b:48:36:73:67:46:e4:3a:5f:33:4d:ec:
         b5:a5:81:db:50:87:b6:b7:0b:a3:ec:dd:19:af:94:66:8f:02:
         44:1e:70:05:46:02:35:fb:70:56:14:cb:bd:24:c9:8d:77:a0:
         2c:5b:1f:69:fc:89:ff:b7:1b:83:13:5c:fa:40:53:90:db:2e:
         e1:01:44:c8:45:3a:4b:97:60:5b:b4:96:b3:33:cc:5e:14:1b:
         7c:a9:c6:3a:d0:e9:f6:8a:2a:a0:31:39:a0:44:6b:6f:4d:7f:
         a3:19:4c:92:67:c9:61:f2:b0:c8:f0:0e:55:46:d3:97:67:82:
         64:53:c6:a1:9d:f9:36:8b:7a:ea:15:2f:40:f4:b4:2b:83:c0:
         7c:80:5b:62:93:d5:10:ee:a7:f9:1b:e2:da:52:60:30:75:c7:
         58:00:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----