Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer
File:                     F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer (raw, json)
Hash identifier:          lbmLM6M7l8jonDBW3SeCsZwrdR9O8+w8ays95NslVgk=
Subject key identifier:   F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       6C8D3DA2EC1125218A3CE48FBE55BB99B103A7B7
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 11 Jun 2023 12:29:02 +0000
Certificate not after:    Sun 09 Jun 2024 12:34:02 +0000
Subordinate resources:    IP: 2a07:54c5:1700::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8d:3d:a2:ec:11:25:21:8a:3c:e4:8f:be:55:bb:99:b1:03:a7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Jun 11 12:29:02 2023 GMT
            Not After : Jun  9 12:34:02 2024 GMT
        Subject: CN=F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:24:29:18:53:b8:c5:55:a1:a3:bd:ae:c1:
                    45:a0:db:fa:fb:95:89:fc:95:3f:45:d8:d4:8e:79:
                    f4:2b:34:8d:f1:52:fa:ee:53:b5:29:5e:04:5c:f9:
                    df:17:5c:7a:f3:df:f9:9f:fc:1f:6e:e1:e3:cf:58:
                    fe:b0:13:5f:c2:c0:2e:13:95:ee:64:65:28:3b:f2:
                    fd:47:a2:c7:81:a3:37:49:bf:ab:17:7d:f0:b9:aa:
                    c3:e3:b1:ec:d7:be:5f:b5:d6:ec:d0:cf:b0:e0:ae:
                    23:ec:91:8f:60:82:17:b0:94:1b:7b:6c:4d:5a:f4:
                    bb:81:3c:0a:b3:74:97:2b:e7:ca:6d:40:09:b6:1f:
                    4b:28:b3:3f:ef:41:24:fe:b8:df:b4:44:24:57:d3:
                    7f:e1:88:6c:d7:ef:a0:f2:0a:ce:f3:27:80:71:43:
                    b9:3d:54:ff:09:0c:65:a6:af:2e:8b:5f:1c:90:08:
                    de:33:fa:1d:dc:66:21:d5:e1:44:65:c9:4a:c8:77:
                    18:9e:2e:98:c6:48:af:68:73:fe:12:23:db:52:8a:
                    7c:ee:6a:84:35:a7:f9:34:95:0f:9f:90:6b:98:1b:
                    82:5f:b3:03:6c:1c:e8:74:61:73:5b:89:25:18:10:
                    9b:f4:64:6e:4b:b1:89:03:57:b8:8d:c2:55:ac:bf:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         d1:e1:e3:c1:52:e2:58:ad:5f:a6:0b:16:01:af:b7:55:ac:53:
         57:c0:1e:d7:a2:74:a9:45:49:83:3f:62:f6:10:c0:ca:4a:e1:
         d0:1d:55:7e:72:db:43:5d:c5:df:0d:b2:44:4e:09:0e:9a:5a:
         04:61:05:2d:b5:e6:ae:b3:16:2a:f3:ef:fa:80:5e:50:94:c4:
         89:21:d6:78:7e:f0:03:1b:7a:de:b1:e6:80:58:41:0e:cb:5d:
         16:db:ad:12:0e:d8:49:96:89:20:24:c5:5e:b0:7b:8d:d8:bf:
         3e:61:a4:08:ba:eb:bd:01:39:af:7b:41:2c:97:50:44:4d:22:
         8f:68:f3:19:3a:66:61:c8:58:ca:99:c7:b1:31:72:a1:fa:41:
         44:ad:30:ed:ab:b4:31:8b:9d:3f:41:cb:cf:8a:25:6a:b8:40:
         a8:53:98:45:c5:9a:70:f3:34:82:8b:64:cb:82:68:38:1a:5a:
         d8:bd:f6:6e:90:67:2e:89:98:86:79:97:44:c4:1e:88:4b:03:
         46:19:55:f4:a6:d2:99:57:90:f4:19:57:5a:f2:59:7c:c7:f3:
         69:cd:ec:34:06:6b:9e:4d:14:c8:0b:97:66:27:d0:0e:3d:64:
         3c:c9:0e:3c:6d:a4:6a:62:c8:00:19:15:c3:e8:11:75:28:31:
         19:34:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:21 2025 by rpki-client