Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
File:                     8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer (raw, json)
Hash identifier:          JrP9Yj9+GylzB9vk0aiJi9Dd+braOBZrvEH4EsNnbUc=
Subject key identifier:   8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Certificate issuer:       /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial:       2F4D9D420ECF0CABFCF8BB2DF4690E189AC1C001
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 19:07:52 +0000
Certificate not after:    Wed 22 Oct 2025 19:12:52 +0000
Subordinate resources:    IP: 2a05:dfc1:91b9::/48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4d:9d:42:0e:cf:0c:ab:fc:f8:bb:2d:f4:69:0e:18:9a:c1:c0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
        Validity
            Not Before: Oct 23 19:07:52 2024 GMT
            Not After : Oct 22 19:12:52 2025 GMT
        Subject: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:30:12:2e:e5:16:44:3e:0c:2d:a0:94:18:
                    1b:ac:f4:77:35:5a:6c:5e:f9:ad:52:a7:09:90:d3:
                    84:d0:6c:df:7e:6f:c7:74:eb:d7:09:d4:a4:23:23:
                    82:b2:6c:b5:3c:a5:21:b6:56:0a:3e:d2:35:a6:55:
                    d8:01:4c:92:9c:57:65:aa:c0:c5:7d:2d:14:da:e7:
                    7f:fa:80:87:63:ef:a2:f4:6c:80:61:52:ad:4e:a0:
                    bd:d6:f9:bd:84:25:62:fe:46:4d:0b:0b:a1:dd:fa:
                    4e:65:df:8e:bd:f1:d6:0e:c3:d1:d6:97:33:d5:ae:
                    99:73:0b:13:0e:ec:71:55:81:96:ef:c9:bf:67:c6:
                    a3:23:85:7c:d5:c6:5c:ff:e9:96:69:f3:2e:41:54:
                    f2:f7:96:49:60:bd:64:20:34:fc:1b:bd:18:bb:f1:
                    d8:72:30:80:47:e8:b0:2c:46:32:07:ab:53:47:d2:
                    ea:23:84:3a:6e:5f:4c:55:94:18:4a:ff:3e:fb:7d:
                    f2:65:8e:fb:96:4e:c0:23:d4:3c:ce:03:5f:63:fc:
                    b0:a0:00:14:1a:4b:72:8f:5d:90:ac:aa:20:f5:54:
                    de:06:87:c9:db:2e:31:90:b5:69:de:ea:44:bf:2f:
                    5e:60:73:e8:4c:8e:ea:57:df:b4:44:c2:32:95:1c:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
            X509v3 Authority Key Identifier:
                keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:91b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:5c:5e:22:a2:32:f2:f8:ab:b7:b5:9b:c3:d2:6b:e1:2c:
         52:0c:af:2a:2b:8f:34:b8:92:99:4a:15:cf:fd:0e:51:3b:5a:
         af:28:3b:ce:24:60:d7:0c:86:27:40:3e:37:93:01:4b:b8:b9:
         87:be:d5:50:0e:5e:46:33:f7:60:13:12:d7:81:9d:f1:8b:1f:
         16:83:86:b1:9b:82:b5:ee:7d:02:7c:d8:2c:78:6a:39:8a:b4:
         d9:1d:ff:b1:79:26:4b:de:32:8a:f4:30:5c:29:81:b1:ac:29:
         d7:f0:b0:62:1a:82:58:30:32:95:ce:93:a0:e8:d2:51:cd:03:
         75:06:2a:2b:83:23:63:49:5f:19:3c:9c:26:ac:6a:20:57:d4:
         d3:04:97:29:c1:ce:20:95:6c:8a:90:88:11:4b:af:0a:9d:c3:
         c3:b6:0d:b7:8d:54:12:06:71:d7:3d:c3:37:83:11:55:91:ca:
         da:33:e3:d6:c9:64:d8:4e:91:f3:de:bc:4f:c2:9e:70:ba:c0:
         02:13:03:9a:11:58:bd:33:42:f5:05:21:33:fd:b6:3e:d5:e1:
         80:66:ee:ac:8e:a3:7d:89:0d:dc:2e:b7:6c:2b:50:ec:fb:52:
         19:94:9c:51:61:d2:44:35:bb:37:8a:15:86:ea:6c:97:64:67:
         d2:d0:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----