Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
File:                     412292C0E24D8885B4760BC708F9E477870D9C70.cer (raw, json)
Hash identifier:          4sSfNUac7HOLW+rfQ1pVbFm9fLlDTIFEPgoBio/09L4=
Subject key identifier:   41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
Certificate issuer:       /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Certificate serial:       7145F665312DF8A519794C7D46452FCA9C94C336
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 23 Feb 2024 21:11:22 +0000
Certificate not after:    Fri 21 Feb 2025 21:16:22 +0000
Subordinate resources:    IP: 2a07:54c0:ffee::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:45:f6:65:31:2d:f8:a5:19:79:4c:7d:46:45:2f:ca:9c:94:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
        Validity
            Not Before: Feb 23 21:11:22 2024 GMT
            Not After : Feb 21 21:16:22 2025 GMT
        Subject: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:e3:73:f7:af:1f:3f:d8:58:90:25:da:f1:
                    a4:29:af:46:5f:f9:1e:6f:bb:18:58:d2:98:73:ca:
                    d6:37:45:b2:7e:d6:f5:5a:84:a5:34:72:50:a8:b5:
                    a7:c7:ce:69:fb:1e:06:b6:71:0c:b6:9a:32:a7:a8:
                    3e:4b:3c:ca:1f:5e:4f:7f:83:0c:d8:52:59:37:b9:
                    f6:5e:dc:c2:c3:94:a6:6e:e9:06:18:24:5c:0c:99:
                    62:8c:5b:af:46:b6:ab:f0:53:ad:54:29:37:37:50:
                    e1:05:2f:05:0b:d8:a0:10:92:7e:25:b3:0d:19:ee:
                    82:7d:5a:e3:64:f8:98:c0:57:18:77:6f:a0:13:df:
                    86:33:05:06:e3:b6:fd:e1:bb:f3:d5:ee:fc:f0:e3:
                    1c:2e:ed:37:0e:dd:65:ec:a8:d2:1d:86:0c:29:cd:
                    fb:5c:b6:f3:90:d7:57:ca:9d:5d:38:06:78:ae:9e:
                    ec:a4:fb:07:cb:0d:fa:87:55:67:f1:21:c1:75:63:
                    58:a0:ae:6d:27:76:2b:ac:83:1c:ee:29:64:f4:e3:
                    c3:e8:fc:54:78:e7:6c:1e:01:e0:f5:25:87:58:b4:
                    09:93:e5:f1:83:5f:d0:48:b6:1b:df:5a:5a:08:26:
                    ea:14:c5:38:ab:f7:be:a7:79:39:ee:69:9a:38:b5:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
            X509v3 Authority Key Identifier:
                keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:cd:fd:05:6f:77:68:21:3a:8a:42:ec:0b:9e:6f:4e:0e:
         07:9a:49:8b:e4:b1:28:66:46:45:05:e1:b9:04:f6:0f:c4:e9:
         3a:ca:28:aa:2f:79:a2:e1:00:8e:99:0c:9a:4e:60:8c:81:86:
         8d:31:9e:c3:c3:62:9d:0e:67:d7:2d:a3:4e:f3:63:ec:4a:cd:
         da:1a:e3:85:3d:e5:17:da:ff:04:f1:a0:d9:e5:9c:c4:e2:6e:
         b2:5d:09:ce:a8:16:b1:c8:6f:f2:cf:fa:8b:86:3e:ee:ca:30:
         16:00:2b:cb:2b:34:79:93:41:9b:b3:20:50:51:05:3a:b7:c7:
         12:ec:69:8c:66:24:01:db:24:ca:b0:2f:37:08:5c:55:74:2c:
         a3:04:a9:52:e2:8a:90:ea:6d:8d:12:e3:8e:48:98:9b:df:f6:
         f2:f8:21:b1:52:b6:97:f2:f9:5e:28:ec:f2:ed:3c:70:5f:38:
         98:4a:aa:a6:77:17:74:27:14:94:8b:35:6c:b8:f7:cd:3f:2d:
         11:7b:5d:8c:57:70:66:79:a6:d2:48:2e:fc:42:35:8e:5c:db:
         d7:c4:6a:89:6e:da:7b:3c:c2:aa:9e:72:71:e7:7b:da:55:45:
         db:59:76:be:fd:50:c6:20:30:7e:20:96:a4:21:90:94:c7:6b:
         e5:bc:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 15:00:46 2024 by rpki-client on console-fra.rpki-client.org