Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/EEF3EC40152A747D52835AE8973E7DC8C193A840.cer
File:                     EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (raw, json)
Hash identifier:          HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=
Subject key identifier:   EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       5BEC1F6132124088444B1433907026F05E5BB793
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Manifest:                 rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft
caRepository:             rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/
Notify URL:               https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml
Certificate not before:   Fri 25 Oct 2024 19:00:21 +0000
Certificate not after:    Fri 24 Oct 2025 19:05:21 +0000
Subordinate resources:    IP: 2602:fa6e:100::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ec:1f:61:32:12:40:88:44:4b:14:33:90:70:26:f0:5e:5b:b7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Oct 25 19:00:21 2024 GMT
            Not After : Oct 24 19:05:21 2025 GMT
        Subject: CN=EEF3EC40152A747D52835AE8973E7DC8C193A840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:39:6d:78:24:e3:fa:b9:54:5d:b5:7d:66:
                    b1:27:94:8e:6e:22:7e:38:58:99:82:fc:69:ed:18:
                    5a:9d:ee:dc:f7:4a:4f:5d:9d:f5:04:c3:e3:12:8d:
                    2f:d1:07:43:e1:40:ee:a4:2b:f4:e1:4d:b4:6f:32:
                    48:50:b3:a5:d3:b4:e0:51:53:6b:1a:d9:a8:8b:b0:
                    67:db:d2:00:da:62:72:ee:db:90:0a:84:58:f6:02:
                    a9:a3:0c:b3:db:30:a2:04:5b:30:ab:fb:ed:23:f0:
                    bd:87:1d:69:5c:57:80:0c:5a:4f:e8:2a:6b:22:c6:
                    31:1b:4a:eb:f8:cb:00:14:77:af:4e:97:dc:45:df:
                    77:3b:b9:93:53:b7:51:a9:c9:d0:79:68:a4:ed:82:
                    7e:1f:0b:4b:eb:71:52:a6:15:a4:84:c4:c0:21:17:
                    5f:ed:4e:88:fd:2c:2d:ea:b9:be:dc:8f:f2:7b:42:
                    ff:de:81:44:0b:f8:56:e5:43:dc:93:fb:43:ef:b3:
                    ba:6a:1c:7a:f7:76:7b:18:9b:56:8b:21:d5:54:3a:
                    11:d1:f9:24:41:d0:ee:6d:b2:3c:ac:53:43:59:00:
                    7e:25:0d:cb:4a:37:29:14:e5:21:06:8b:55:92:70:
                    48:8e:1b:b4:e8:c3:b5:30:31:d3:45:32:a5:0b:4e:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:F3:EC:40:15:2A:74:7D:52:83:5A:E8:97:3E:7D:C8:C1:93:A8:40
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/
                RPKI Manifest - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/2/EEF3EC40152A747D52835AE8973E7DC8C193A840.mft
                RPKI Notify - URI:https://krill.ca-bc-01.ssmidge.xyz/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:c5:9c:a1:c2:17:22:c4:dc:3a:17:81:38:df:7e:9d:a2:
         8b:38:ff:d1:32:b6:2e:fd:b0:1b:7b:f8:4d:f2:df:e5:fb:8a:
         3e:41:c3:07:0e:c9:17:16:27:98:11:17:fb:45:63:b1:12:64:
         fd:54:74:4f:c3:92:3a:6f:dd:14:0a:b1:d7:14:b5:b4:15:90:
         73:35:c3:37:0d:fe:45:c5:63:27:50:80:c7:70:db:b9:1e:48:
         6b:19:84:f5:e9:4c:f0:c0:d9:e6:e8:00:6c:60:66:0b:0c:7c:
         8d:c5:1f:04:a8:73:a8:f1:37:e0:dd:bc:0b:64:28:23:a4:b1:
         4e:97:62:6b:49:e6:52:b6:2e:04:4f:9a:68:91:0b:34:d2:9b:
         bc:14:41:12:c6:eb:64:cc:f2:b6:8a:d7:93:ca:c3:49:3d:11:
         d2:e1:ec:1c:e3:67:79:3b:87:37:38:07:22:29:63:8b:f8:5f:
         b2:6a:c1:9c:21:be:8a:0b:e8:e3:43:e9:5f:9f:b9:61:ad:1b:
         34:79:d5:88:d0:51:ef:f7:28:f4:5e:60:3d:4b:bf:a1:50:c7:
         cb:cb:2a:1f:7b:66:1f:d9:7b:ec:51:82:54:07:ff:dd:1c:68:
         5b:0f:9f:f6:ff:77:2b:2a:03:21:26:25:56:63:16:e6:1d:99:
         80:17:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----