Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
File:                     58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (raw, json)
Hash identifier:          gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=
Subject key identifier:   58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       5063DA1F10F60E92D117002C87917351C077BFE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 03 May 2024 00:41:48 +0000
Certificate not after:    Fri 02 May 2025 00:46:48 +0000
Subordinate resources:    IP: 2a14:14c1:100::/48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:63:da:1f:10:f6:0e:92:d1:17:00:2c:87:91:73:51:c0:77:bf:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: May  3 00:41:48 2024 GMT
            Not After : May  2 00:46:48 2025 GMT
        Subject: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:50:d3:8d:4e:ea:b8:3c:5a:1e:c9:d4:33:
                    0a:05:4a:bc:40:d5:1c:10:c9:5d:39:fd:29:5e:9c:
                    b2:80:8a:4a:ab:b5:1d:05:4a:29:f6:df:4b:ef:7e:
                    a4:b2:0c:71:89:20:3f:24:67:fa:88:d0:07:32:0b:
                    20:5b:52:7b:ed:3b:38:ef:4a:d2:a9:44:4a:e1:0c:
                    c0:4e:46:72:a9:10:71:fc:18:e5:93:82:96:5c:78:
                    82:17:19:b9:e3:89:5f:8b:58:21:06:a2:dd:20:8d:
                    fe:eb:aa:cc:72:6b:be:1b:64:95:a9:e9:28:1d:17:
                    82:c3:00:ce:56:2b:b8:3a:33:d1:cd:03:6e:19:17:
                    4c:23:73:28:d5:dc:a0:c4:e5:10:2c:a4:21:e4:74:
                    70:da:58:bc:03:cb:aa:33:ea:08:1a:17:ec:9e:be:
                    b0:f2:25:fb:32:15:ca:65:92:cc:17:50:8b:f4:20:
                    9b:2c:41:57:dc:9a:60:6f:30:3b:3d:c9:a3:be:12:
                    23:ee:fe:8e:a4:ff:69:77:9f:26:bb:ce:16:c5:19:
                    b9:0a:16:bc:9f:cf:d7:ae:f4:b9:58:01:47:12:4b:
                    8f:bc:9f:3a:9b:8a:ce:f1:6e:65:c1:38:90:aa:28:
                    41:68:3b:51:a2:eb:10:78:e7:2a:65:0d:b4:87:65:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:14c1:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:ad:a0:94:e0:0e:ce:fc:29:fc:94:90:e5:09:3d:9a:e4:
         1d:87:09:c6:36:08:e1:ec:5a:3a:9c:44:6b:5a:e3:94:38:bf:
         fa:1a:9f:d0:fa:89:22:82:47:5a:a5:b4:1b:22:cf:e4:11:1f:
         76:07:c6:38:06:00:bd:98:90:2b:f3:bd:02:d3:0e:6d:18:9d:
         2d:2e:36:cc:b2:b6:0a:c2:0f:dd:35:d9:f7:e4:40:a9:78:40:
         f4:8f:7d:21:7a:43:9b:99:19:35:37:a1:75:3f:55:85:da:f6:
         df:6b:15:ae:32:b4:d5:b4:e2:85:66:35:ee:e7:91:7d:32:78:
         cf:0f:01:31:75:57:c1:30:58:ac:b4:94:e7:a9:a9:2c:6c:8d:
         dd:9a:49:17:d4:85:a5:d9:1a:10:73:2c:53:8c:74:f0:ff:71:
         2e:62:77:b3:7e:82:e5:d0:73:f5:3a:8b:37:c3:77:77:66:e1:
         e1:4b:7f:c3:11:96:e4:73:8a:66:24:bb:f5:74:d3:dd:bc:4d:
         bc:d0:e0:fa:20:f9:b0:24:d1:99:28:e2:24:9f:a0:29:28:b1:
         36:94:18:46:b1:af:99:9c:84:c4:81:8d:c9:54:c6:c8:5e:96:
         09:bd:82:75:ff:5d:e0:57:21:01:17:b5:17:35:02:f1:d9:b7:
         35:ad:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:30 2024 by rpki-client on console-ams.rpki-client.org