Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
File:                     92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (raw, json)
Hash identifier:          H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0=
Subject key identifier:   92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       5FA8136040A9563DB22A63093B0BFFA068249184
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 23:25:14 +0000
Certificate not after:    Thu 21 Aug 2025 23:30:14 +0000
Subordinate resources:    IP: 2a0a:6044:8ff0::/44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a8:13:60:40:a9:56:3d:b2:2a:63:09:3b:0b:ff:a0:68:24:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Aug 22 23:25:14 2024 GMT
            Not After : Aug 21 23:30:14 2025 GMT
        Subject: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:a0:87:eb:85:de:b2:de:20:4d:9a:58:30:
                    1e:26:8d:76:c0:0d:67:6c:c2:d1:a0:b9:c5:b2:78:
                    c4:84:ac:3a:90:a1:dd:1e:75:3e:fb:33:2b:8c:42:
                    12:d7:7b:15:b0:48:08:ea:57:c6:f3:7c:d5:d3:ad:
                    8f:86:2e:91:2e:fc:8d:94:b6:89:15:90:83:50:4e:
                    75:e1:82:4d:b9:fd:36:8b:e6:1b:b1:8d:87:10:f9:
                    4e:a4:46:35:52:9c:9f:7e:80:07:e8:14:7c:ee:c3:
                    3e:44:14:9e:34:ff:4f:6a:30:72:7e:4e:91:c7:87:
                    ad:61:cb:6d:cc:f3:18:76:87:5d:e2:2b:c4:d6:23:
                    38:96:d8:8a:c9:33:5d:a9:bc:06:af:73:de:9c:9d:
                    1b:86:cd:49:1c:aa:fb:51:06:a7:5b:0a:e4:29:85:
                    86:c5:7d:72:13:95:fc:fe:0b:bc:10:57:53:dd:14:
                    a4:06:0d:d6:60:a7:14:ba:e1:43:8b:1a:9a:14:43:
                    31:53:0d:49:5d:ab:45:f0:cd:6f:98:3c:ed:0a:ad:
                    62:96:95:cc:db:d4:dc:01:84:bf:fb:ab:fe:0c:2b:
                    9e:14:a6:f2:ad:4b:88:04:3e:bf:98:8c:a3:95:27:
                    f1:d0:07:bc:3f:72:28:64:8c:c1:72:b2:2a:7b:2a:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:aa:ca:e4:e9:08:84:22:2e:42:55:5e:10:f1:e9:66:65:
         61:46:4f:a7:30:35:1f:d5:dc:21:0f:6e:0d:2f:b1:0c:5c:c9:
         bb:1d:07:8b:c1:6f:a0:53:ef:70:b0:b1:e8:c8:3f:83:38:9e:
         fc:98:f2:c9:7f:a2:fe:12:95:55:d8:e4:5d:8a:ea:4e:67:e4:
         a4:67:bb:46:d0:9a:97:2d:48:4b:02:36:39:cd:b1:75:af:56:
         65:40:18:be:6a:20:02:85:5a:3a:eb:11:8f:99:14:66:93:50:
         4b:78:7a:a5:cb:db:8b:bd:7c:4b:04:5e:df:b2:fc:65:80:d1:
         ec:77:0d:51:17:d1:53:af:52:94:5a:2d:ec:e2:be:7d:a5:42:
         e3:b8:82:55:4c:c7:5c:fc:a9:8c:57:d8:68:35:3c:ef:af:5d:
         e3:6d:22:bb:80:5c:90:7d:1e:3a:10:c7:9e:d3:26:bf:4b:0d:
         4d:8b:e4:f0:34:0d:bc:43:24:14:d7:73:18:fb:5d:ec:ab:9e:
         55:cc:46:0b:24:bc:a1:16:17:e9:b7:92:88:0f:36:98:fb:75:
         fa:b8:2a:a8:a3:c9:49:9d:60:b6:70:8b:f8:2b:18:d8:e5:f1:
         39:48:50:14:3f:52:21:d8:66:45:f9:c9:bc:b2:ed:66:f9:4e:
         f5:40:d0:70
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUX6gTYECpVj2yKmMJOwv/oGgkkYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNDA4MjIyMzI1MTRaFw0yNTA4MjEyMzMwMTRaMDMxMTAvBgNV
BAMTKDkyRTk4M0Y3NjZDMTQ0QTBDRUFDMEI2RkM1QzIwOTM0MDkxRDdFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2qCH64Xest4gTZpYMB4mjXbA
DWdswtGgucWyeMSErDqQod0edT77MyuMQhLXexWwSAjqV8bzfNXTrY+GLpEu/I2U
tokVkINQTnXhgk25/TaL5huxjYcQ+U6kRjVSnJ9+gAfoFHzuwz5EFJ40/09qMHJ+
TpHHh61hy23M8xh2h13iK8TWIziW2IrJM12pvAavc96cnRuGzUkcqvtRBqdbCuQp
hYbFfXITlfz+C7wQV1PdFKQGDdZgpxS64UOLGpoUQzFTDUldq0XwzW+YPO0KrWKW
lczb1NwBhL/7q/4MK54UpvKtS4gEPr+YjKOVJ/HQB7w/cihkjMFysip7KsS1AgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSS6YP3ZsFEoM6s
C2/Fwgk0CR1+AjAfBgNVHSMEGDAWgBS4m/qE3Fr+BQdqCAC5YP6iL8kNCTAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRh
YmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0I4OUJGQTg0
REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkuY2VyMIIBPwYIKwYBBQUH
AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9kODhiODU0ZS0wOTJjLTRkNzktYWMwNi1hZjM4
MGIwOGQxMmIvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q4OGI4NTRlLTA5MmMtNGQ3OS1hYzA2LWFm
MzgwYjA4ZDEyYi8wLzkyRTk4M0Y3NjZDMTQ0QTBDRUFDMEI2RkM1QzIwOTM0MDkx
RDdFMDIubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp
cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESP8DANBgkqhkiG9w0B
AQsFAAOCAQEACaaqyuTpCIQiLkJVXhDx6WZlYUZPpzA1H9XcIQ9uDS+xDFzJux0H
i8FvoFPvcLCx6Mg/gzie/JjyyX+i/hKVVdjkXYrqTmfkpGe7RtCaly1ISwI2Oc2x
da9WZUAYvmogAoVaOusRj5kUZpNQS3h6pcvbi718SwRe37L8ZYDR7HcNURfRU69S
lFot7OK+faVC47iCVUzHXPypjFfYaDU8769d420iu4BckH0eOhDHntMmv0sNTYvk
8DQNvEMkFNdzGPtd7KueVcxGCyS8oRYX6beSiA82mPt1+rgqqKPJSZ1gtnCL+CsY
2OXxOUhQFD9SIdhmRfnJvLLtZvlO9UDQcA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:16:12 2024 by rpki-client on console-ams.rpki-client.org