Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer
File:                     7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer (raw, json)
Hash identifier:          EBkYsjGK7rfo4SdSkI1tLW+1TOMVrX3yFmLYL2FgZ0E=
Subject key identifier:   7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       30F41E6DA6B775C70FF98013E420742CEBF41FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 22 Apr 2023 02:27:37 +0000
Certificate not after:    Sat 20 Apr 2024 02:32:37 +0000
Subordinate resources:    IP: 2a13:df80:70::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f4:1e:6d:a6:b7:75:c7:0f:f9:80:13:e4:20:74:2c:eb:f4:1f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 22 02:27:37 2023 GMT
            Not After : Apr 20 02:32:37 2024 GMT
        Subject: CN=7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:01:cd:06:0b:12:65:89:6b:96:49:c3:36:
                    2b:bb:8f:f2:e9:2c:f7:1b:e6:d0:01:98:63:7e:77:
                    4b:11:31:ee:82:0f:09:89:46:67:63:26:d8:98:00:
                    af:6d:2b:9a:8c:05:c1:1a:12:b0:84:76:16:a2:4b:
                    4c:95:78:e1:f6:e2:87:ca:2c:05:ec:c2:65:ae:5d:
                    c3:03:35:7c:b3:da:d4:5e:90:2a:e4:2b:10:f3:83:
                    4e:ac:08:83:f0:f2:98:a2:a7:ed:f3:86:a1:a5:38:
                    7b:d9:bf:d6:0e:cf:82:8c:42:3c:59:b0:3c:6b:08:
                    3a:5a:be:83:ee:25:d3:39:d3:bd:61:72:99:74:0f:
                    af:55:7b:71:62:cc:22:bc:41:f5:67:5b:e5:d1:a9:
                    84:4a:7b:98:0d:70:5b:f4:77:2e:97:37:18:29:ed:
                    38:38:e9:22:0a:b8:dd:7e:fd:23:43:79:b8:36:a8:
                    26:95:a4:02:84:19:8c:60:b1:23:ae:32:00:d6:8c:
                    7e:70:5e:02:d3:ce:5d:85:af:92:17:ef:64:56:60:
                    1b:e3:a2:57:9b:89:1d:1a:18:e3:08:a3:c3:9e:38:
                    29:de:65:a5:af:d5:b8:69:02:52:b8:a2:4e:0b:4a:
                    da:57:6f:ef:0d:a6:a5:fc:56:5c:0c:8a:df:db:fb:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:ea:8c:ff:83:66:f0:06:8b:a5:67:0e:54:6d:53:a8:78:
         55:b3:64:57:1f:01:e5:97:bd:d2:bd:0e:0c:d3:99:33:f8:71:
         76:2e:8c:7b:b9:c2:a9:b7:1d:88:5e:65:b4:d4:f6:52:3d:af:
         3f:84:47:1e:6d:0e:2e:4c:f0:fc:19:b3:b7:ed:e7:30:a4:38:
         b9:5b:cd:75:c3:12:7b:ac:d1:8b:11:19:3d:f7:b9:cc:14:e7:
         95:e8:61:10:44:83:58:7b:6a:1a:07:85:79:6c:c3:1f:83:8d:
         51:7e:c3:94:8b:96:2a:40:35:4b:68:99:1c:21:6d:cb:07:06:
         09:2b:14:8f:76:49:1f:6e:fc:7b:9a:ef:9d:57:2c:81:8f:ec:
         8f:b6:88:19:29:67:4c:19:46:fc:7a:6e:2b:95:93:aa:7e:67:
         32:e8:4b:b1:68:86:49:a0:08:8d:4d:5e:47:fb:91:d8:7a:cb:
         90:14:63:67:64:d1:63:80:23:48:fe:77:ef:04:39:8a:66:19:
         24:d1:f0:b4:7f:0e:7f:82:76:65:52:94:24:ad:11:41:f4:9b:
         8d:ad:26:d8:db:62:5a:0e:a2:da:f9:1d:4c:16:47:ae:01:f9:
         8e:03:2a:30:b9:ca:4d:18:a7:3a:69:a8:e7:53:4a:d7:51:a1:
         40:b2:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----