Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
File:                     9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer (raw, json)
Hash identifier:          7UcokXgLdyWiOgo8Mgm3S4MpWKOudVT76UH+RxIpprE=
Subject key identifier:   9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       5C7E99347E4021FADAE12EA15FA226D5E9313FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 13 Feb 2025 13:11:20 +0000
Certificate not after:    Thu 12 Feb 2026 13:16:20 +0000
Subordinate resources:    IP: 2a14:7580:ed00:: -- 2a14:7580:eeff:ffff:ffff:ffff:ffff:ffff
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7e:99:34:7e:40:21:fa:da:e1:2e:a1:5f:a2:26:d5:e9:31:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Feb 13 13:11:20 2025 GMT
            Not After : Feb 12 13:16:20 2026 GMT
        Subject: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:67:2c:85:96:c3:5d:ac:31:c9:69:5b:a5:
                    49:23:8f:39:ca:a2:87:88:5b:ba:fa:0f:2a:0f:22:
                    eb:e9:18:1f:97:52:a4:d3:1a:6c:87:25:6f:df:68:
                    47:86:0d:65:8b:c2:51:83:f6:a0:d4:40:ba:1f:46:
                    68:e5:a2:14:3e:0a:aa:46:d5:33:20:0f:1b:fd:3b:
                    ac:a8:1d:eb:10:de:ef:d2:2c:c2:6f:a4:9f:3b:c7:
                    8d:75:9e:0b:a9:f6:50:3c:4d:82:c8:a9:b9:1e:15:
                    32:0f:cf:70:62:1a:08:c2:93:34:af:09:fc:4c:6a:
                    0c:28:e8:23:af:57:78:5c:40:a0:0d:35:b1:34:7f:
                    76:e8:5c:bf:34:a5:52:5c:09:7c:e4:f4:d5:f7:db:
                    17:6c:ac:ab:de:c1:d0:0b:56:f2:b9:47:d5:90:4c:
                    5f:9d:f6:52:d7:da:72:75:d9:8e:04:09:39:17:82:
                    94:89:76:2b:a8:05:bf:60:0f:26:f9:c6:d8:68:62:
                    a1:7e:64:c1:6d:3e:58:78:fe:31:66:1e:e1:00:9e:
                    b0:b1:82:41:f1:77:d8:7f:82:67:0b:bf:2e:cc:9a:
                    30:df:12:6e:b8:d9:9f:53:89:9d:ab:25:73:cb:21:
                    d6:07:26:21:12:58:a2:66:ee:40:37:bd:03:f9:44:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed00::-2a14:7580:eeff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:76:06:2a:b1:e7:be:16:15:16:98:36:57:fe:92:8a:16:
         c4:ec:ec:fd:a7:c4:6a:e2:49:a4:0c:51:7d:40:af:93:28:fe:
         04:10:71:f1:91:94:ef:ca:8d:df:68:c6:d1:01:e4:23:17:73:
         0b:f0:75:42:6a:27:b1:62:ec:39:41:c5:6e:07:b5:8d:a8:b3:
         fe:bf:dd:6a:d3:34:4d:06:2b:c7:6c:e4:af:b0:62:ae:51:b6:
         5e:d7:95:39:9a:ef:42:88:6c:36:1f:25:cb:28:77:12:6c:c9:
         d1:dd:cd:5e:fe:27:40:46:b5:e2:ff:85:2a:ca:46:cf:3f:a8:
         41:ab:77:6a:f8:3b:7a:86:de:33:72:e5:3c:c0:6a:91:0e:e5:
         a3:ad:16:72:30:15:f2:0f:ac:1a:0e:9a:dd:4a:88:9d:4c:6c:
         47:f7:2b:d6:2c:e8:c2:9f:12:66:b9:1e:dc:f0:1e:a3:b2:67:
         36:0e:ab:db:6e:7b:1c:29:ea:c5:1b:13:6d:4f:58:2f:30:d5:
         c2:8c:9d:11:0e:60:48:d6:a6:68:a8:94:0a:3f:59:5f:29:5a:
         c0:65:72:d1:67:c0:58:cf:88:51:57:d1:86:98:ef:12:82:e5:
         cd:7e:15:a1:92:e2:f1:f2:7b:ab:ec:d7:ef:c8:8e:6f:75:34:
         ed:60:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----