Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer
File:                     15BCD75E02E085EB08A3D2F22C872972154D76C5.cer (raw, json)
Hash identifier:          ulisCgNrAUs3YZOgYS+ubs59PGD1nMPBaVgIKhKB+TA=
Subject key identifier:   15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       48579FD8425E49D155103480804CCEDE5EE629B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:46:36 +0000
Certificate not after:    Fri 06 Mar 2026 08:51:36 +0000
Subordinate resources:    IP: 2a14:7581:9fa0:: -- 2a14:7581:9fcf:ffff:ffff:ffff:ffff:ffff
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:57:9f:d8:42:5e:49:d1:55:10:34:80:80:4c:ce:de:5e:e6:29:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Mar  7 08:46:36 2025 GMT
            Not After : Mar  6 08:51:36 2026 GMT
        Subject: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:0f:e2:84:dd:9b:7d:ec:cd:2f:24:15:19:
                    78:31:43:82:59:55:f7:39:1f:b5:09:9c:f3:89:23:
                    93:bb:2d:a0:49:1e:ee:6b:78:04:2e:d7:dd:b0:9e:
                    44:93:3d:20:b9:59:d1:ae:03:27:58:99:31:7d:87:
                    e0:da:3c:08:5b:04:00:e6:28:3a:f6:84:fb:95:41:
                    bf:b4:4e:c9:d0:bc:4d:31:ef:e8:65:43:35:d8:9f:
                    40:3a:ce:a3:39:74:c8:b7:7c:07:a6:e2:6e:30:54:
                    5c:0b:b1:1e:ac:0f:09:2d:28:db:c6:44:86:f1:22:
                    5c:db:e2:3d:cc:7a:fc:91:30:38:9f:43:06:f6:78:
                    a3:17:71:00:68:87:fd:56:ec:55:18:3b:0b:9f:54:
                    07:d1:b8:39:1c:93:35:04:a8:81:48:18:bc:56:30:
                    53:98:88:4d:7a:04:32:f1:57:46:0e:6d:fc:00:5a:
                    47:18:b1:ba:1d:da:6b:01:b2:0f:ff:55:b5:3e:7f:
                    6c:2c:a3:36:06:6b:4d:d2:2b:2b:e9:7d:99:d9:84:
                    0e:64:01:90:1c:d9:60:08:6b:f8:3b:47:92:0b:41:
                    a5:51:63:d2:82:bc:2f:c5:65:5b:7d:db:82:24:3f:
                    62:cf:a8:d8:1c:6b:fe:26:47:4f:21:ab:ac:b4:03:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9fa0::-2a14:7581:9fcf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         24:39:56:78:3a:98:6c:a2:8b:9a:df:32:48:81:33:03:b4:35:
         19:5b:6a:bf:7e:fa:95:5b:55:38:c8:9e:a5:11:8e:c7:db:c2:
         07:93:82:67:8e:89:f5:44:e9:e5:b8:1f:48:a3:5b:30:71:3a:
         af:91:f4:49:b5:a4:00:60:7d:75:de:9a:61:54:20:c5:ef:a9:
         68:6f:d7:2b:40:1a:0b:64:b9:0a:57:1f:13:db:bc:08:b8:ea:
         74:c9:c5:a7:65:f5:87:c4:db:5e:78:2d:70:e7:36:a0:2c:95:
         84:ca:26:c4:76:93:b7:a4:45:38:ae:7c:c6:f7:82:28:21:38:
         36:af:52:c7:d9:de:9d:2a:0e:45:e5:ad:24:03:c9:d2:4f:c8:
         d3:1c:0c:64:08:c9:5b:5f:8a:5f:5d:47:92:68:1c:fc:00:03:
         ae:58:49:b1:23:4c:ef:23:96:9f:f4:78:c5:fa:57:1d:5b:a2:
         39:da:26:f9:4e:21:15:5b:ca:a5:6a:14:99:90:18:7f:41:b8:
         75:a3:81:0e:8d:9c:d5:a2:e7:b5:aa:21:7a:ef:51:0d:18:05:
         bf:dd:29:97:cb:cd:e9:73:1b:ab:d2:a6:3f:a5:d8:75:6d:18:
         df:5a:3d:80:4b:1e:49:e7:0f:a7:25:2c:70:1a:72:d3:c8:8f:
         17:e3:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:08 2025 by rpki-client