Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
File:                     BA1E57809F341A79CDDA255B18E19FA068FA270F.cer (raw, json)
Hash identifier:          FR0sefZFQsWJSpn0TBNvkXvNMAv1LSaZEBZ1KzGsrso=
Subject key identifier:   BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       242AED82713561D0070F53AAC288697B0BF6D3FD
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 20 Dec 2024 14:35:41 +0000
Certificate not after:    Fri 19 Dec 2025 14:40:41 +0000
Subordinate resources:    IP: 2a0a:6044:a100::/40
                          IP: 2a0a:6044:ac70::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:ed:82:71:35:61:d0:07:0f:53:aa:c2:88:69:7b:0b:f6:d3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Dec 20 14:35:41 2024 GMT
            Not After : Dec 19 14:40:41 2025 GMT
        Subject: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:a8:cd:e0:e7:97:a5:b1:19:2c:5d:cf:5d:
                    60:5a:81:29:94:15:5e:a4:e1:3e:3e:28:a5:da:e9:
                    c7:f3:98:56:c8:2d:4b:c5:d6:7a:11:09:a4:aa:ef:
                    8c:22:55:fd:66:98:e0:b3:2f:ba:0f:3c:47:3e:22:
                    d7:96:e9:20:2f:f8:8e:20:fa:cc:10:01:c9:3a:fd:
                    aa:2b:66:42:38:31:2a:5b:2d:44:44:03:58:5f:61:
                    9b:3c:00:e6:eb:4e:0e:94:9c:07:0d:2e:1a:03:88:
                    42:5c:5b:ef:2a:eb:dd:22:58:79:86:4c:33:ff:d4:
                    e8:ec:d1:ab:15:51:62:d5:29:e4:ed:b4:4e:97:c3:
                    c1:ea:a1:8a:65:00:5d:94:cc:ee:b2:e4:b1:0f:6c:
                    9f:08:43:d8:d6:78:38:67:5e:ba:c6:c0:89:e7:c3:
                    ac:67:a4:43:e4:6d:00:88:ab:17:d6:3e:d0:01:15:
                    3b:19:f6:da:5c:ed:0c:b9:c5:6b:82:34:b5:f4:bb:
                    b4:1b:bb:e1:80:bf:0d:a3:bc:d1:44:5a:70:63:de:
                    9d:cf:fc:c0:ae:db:bc:d4:39:51:7a:df:11:ce:07:
                    4a:16:9e:a5:03:81:58:cc:2b:6b:21:20:04:20:c8:
                    74:5a:ac:03:f6:3a:52:a0:45:4e:78:03:ce:e9:82:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a100::/40
                  2a0a:6044:ac70::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:57:ed:98:56:1e:ba:94:25:ed:3c:73:20:75:cc:92:7c:
         e2:9a:22:5f:da:22:a6:2c:eb:37:44:e2:02:14:9a:16:62:3d:
         d9:be:b3:91:82:59:72:6d:3b:23:17:17:a0:69:91:41:e0:88:
         6f:b3:4e:79:53:72:f2:2e:59:ed:fa:b3:23:cc:aa:d6:24:93:
         c0:3f:5a:65:23:89:e4:de:75:9d:33:37:75:51:a7:a1:62:97:
         3d:9f:f7:7f:b4:db:fa:4a:f2:65:24:15:d6:37:2f:ff:2c:8d:
         b4:63:fd:f6:80:0a:68:e5:2b:31:2d:1e:ec:05:72:7c:4e:a6:
         d2:1b:7c:49:bd:c1:3c:fe:36:70:9c:2d:8c:85:0e:f6:4e:f5:
         b1:fc:99:e3:d0:89:b7:16:5c:8a:d1:ab:7e:7a:86:4b:ce:95:
         8a:0d:8c:62:f3:46:60:f1:a1:3f:1f:3b:99:7a:39:34:02:c9:
         ac:aa:81:8b:2c:7f:d5:2d:f5:fb:87:97:eb:89:53:04:ed:c1:
         55:07:c3:95:9c:7c:8b:f6:ff:31:d6:95:27:9f:07:a3:b2:73:
         59:65:a2:7b:d8:bb:b4:de:3a:cf:a0:97:cb:e9:59:98:ef:72:
         ca:96:20:4f:d9:58:10:70:8b:65:85:e2:d4:d5:c5:17:22:ff:
         ee:94:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----