Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/E4832D68355F0696473328F01D12AEE3E443C63D.cer
File:                     E4832D68355F0696473328F01D12AEE3E443C63D.cer (raw, json)
Hash identifier:          JDhBNpjO2gNeVLhSo5qtKx/rmQa2SWuQmzM4lxwWDTI=
Subject key identifier:   E4:83:2D:68:35:5F:06:96:47:33:28:F0:1D:12:AE:E3:E4:43:C6:3D
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       22F72571D0041B4C75E2D0689839BC00209E29D5
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/8/E4832D68355F0696473328F01D12AEE3E443C63D.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/8/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Sat 06 May 2023 05:36:15 +0000
Certificate not after:    Sat 04 May 2024 05:41:15 +0000
Subordinate resources:    IP: 2a07:54c5:1300::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:25:71:d0:04:1b:4c:75:e2:d0:68:98:39:bc:00:20:9e:29:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: May  6 05:36:15 2023 GMT
            Not After : May  4 05:41:15 2024 GMT
        Subject: CN=E4832D68355F0696473328F01D12AEE3E443C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:57:30:e3:8c:de:98:71:a1:2e:b8:9b:24:
                    3e:81:ab:28:01:80:6d:08:0f:4c:65:15:1e:1b:9f:
                    59:89:0c:10:14:ef:2a:2d:1c:11:77:ac:f3:5e:f2:
                    3b:85:0a:3c:52:72:d5:75:dc:a9:e5:b0:fa:f6:42:
                    ce:b1:ff:d7:e2:8c:90:bc:ef:7d:36:70:93:12:48:
                    2a:16:19:ef:b4:bb:13:14:b7:70:e3:a9:df:10:35:
                    ab:0d:25:fb:bc:b9:42:7a:e3:da:b5:71:6f:06:76:
                    95:4e:22:7d:25:e1:d3:dd:5a:9c:04:b9:cc:76:07:
                    81:30:d8:9c:b4:6e:21:a0:bd:de:95:94:61:20:29:
                    31:fe:e2:0f:d3:ac:ad:02:8c:f9:63:c3:11:43:c4:
                    b2:0e:5b:a9:aa:bb:86:a3:b1:0f:28:71:f1:70:2a:
                    95:b9:b8:77:65:df:a1:4c:49:56:36:af:0d:b0:3e:
                    ef:96:c1:27:7e:e2:38:38:33:9d:7d:e1:13:43:b1:
                    50:aa:93:8e:a1:c8:8f:17:fd:b9:33:46:ae:0b:05:
                    e6:bf:2f:cf:d3:a0:f7:c9:be:ab:80:bf:e4:c8:9b:
                    f0:95:d1:55:0c:ae:24:85:39:04:ab:bc:33:bd:97:
                    81:65:eb:9a:3b:7d:de:14:89:1e:d6:a7:26:bd:c7:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:83:2D:68:35:5F:06:96:47:33:28:F0:1D:12:AE:E3:E4:43:C6:3D
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/8/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/8/E4832D68355F0696473328F01D12AEE3E443C63D.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:2a:9b:d4:0a:13:45:71:42:e3:77:f6:6c:b4:94:d0:a5:4f:
         f4:82:06:6b:75:22:bc:cf:df:1f:f2:d0:5f:2b:9b:69:6a:25:
         a5:13:da:d7:cf:bb:1a:ff:5f:e0:44:13:02:eb:4b:5c:70:3e:
         c7:35:59:ad:0f:98:f8:c7:c2:f9:70:8d:23:35:a2:a4:5d:e6:
         fc:ad:2e:c8:7c:c0:37:69:24:50:97:03:05:4b:25:4d:a6:4d:
         37:33:05:fd:6e:2b:81:07:d0:ba:98:ab:7e:75:46:7a:f3:c6:
         48:96:83:cd:d7:c8:83:08:3f:36:3e:0a:d9:a0:57:85:38:0e:
         af:00:f6:9c:39:b7:f0:f0:dc:e4:4a:ec:24:f6:86:62:32:52:
         a9:5e:26:5b:2c:28:14:db:59:4c:42:55:1d:16:30:ad:a6:31:
         74:aa:10:1f:40:88:20:aa:d3:93:df:8e:63:d8:47:62:3a:13:
         5f:27:93:90:0b:e3:6b:49:86:6e:b6:c2:2d:b2:6c:a6:82:e0:
         fc:a5:c4:ce:57:6b:1a:29:9e:74:ff:e9:c1:ff:83:d0:e4:d8:
         8d:06:59:6a:be:08:cc:2b:67:6c:04:5c:e4:cb:06:91:9e:e8:
         e6:3a:f7:c8:fb:8e:04:31:38:05:d8:68:3b:c9:3e:66:ab:da:
         43:26:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org