Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.cer
File:                     F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.cer (raw, json)
Hash identifier:          hiErETpjBTc+j3jlilHdLgHM8f57ty3DabVfCMy9SVc=
Subject key identifier:   F6:FA:7F:21:64:BA:B7:94:F0:26:5D:AA:3D:6C:32:62:AF:42:57:DA
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       3C644A8A9882DF1FBF0EC0E64BC8E69304545798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Manifest:                 rsync://rpki.kitten.network/repo/SamCoThePug/2/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.mft
caRepository:             rsync://rpki.kitten.network/repo/SamCoThePug/2
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 21:58:26 +0000
Certificate not after:    Mon 25 Mar 2024 22:03:26 +0000
Subordinate resources:    IP: 2a13:df86::/31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:64:4a:8a:98:82:df:1f:bf:0e:c0:e6:4b:c8:e6:93:04:54:57:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Mar 27 21:58:26 2023 GMT
            Not After : Mar 25 22:03:26 2024 GMT
        Subject: CN=F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:1c:58:94:d9:36:ce:57:23:98:5d:f0:81:
                    e5:49:f8:ff:77:ff:b6:e2:2a:24:eb:16:b9:76:2c:
                    53:4e:c4:a5:f4:9b:4c:db:8b:32:26:5a:d1:77:d3:
                    44:fa:7f:ee:16:c8:82:47:59:f2:eb:7b:93:e9:16:
                    ed:a1:1d:64:bd:63:dc:20:eb:70:74:72:15:7e:f2:
                    a9:6c:8d:a1:68:33:4f:f9:23:e1:c8:e7:8a:e6:e5:
                    90:40:b7:c9:08:c5:96:36:a1:67:2c:13:01:30:1a:
                    61:fc:50:39:01:5a:9f:03:15:56:5e:97:15:76:95:
                    33:8d:ec:20:8e:d0:d7:57:64:a1:64:16:47:da:fd:
                    c1:08:7e:6f:2c:05:64:0d:ae:38:9f:58:b2:7c:b3:
                    17:ff:9b:f8:0e:72:8f:58:32:4e:9c:ce:e0:a9:05:
                    d6:ef:c6:17:7c:58:80:55:45:b3:02:04:c7:f9:86:
                    db:e3:60:ab:62:d6:b1:82:4e:e6:50:b7:eb:e5:e3:
                    0e:a2:f2:f9:59:53:36:62:4b:3f:b9:c4:49:46:95:
                    01:84:0f:b7:bd:a9:00:a1:02:71:a6:34:fb:c4:5a:
                    7b:a3:db:54:d9:a9:1b:42:d2:94:4a:39:31:99:17:
                    8e:ff:85:b4:81:9c:4e:b7:ed:8b:95:52:be:00:12:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:FA:7F:21:64:BA:B7:94:F0:26:5D:AA:3D:6C:32:62:AF:42:57:DA
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/SamCoThePug/2
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/SamCoThePug/2/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/31

    Signature Algorithm: sha256WithRSAEncryption
         95:44:7e:25:d3:81:60:66:d7:ca:ab:1a:85:db:51:63:91:4e:
         99:3a:25:25:5e:33:b4:c5:65:31:f1:3b:3b:9a:24:34:cd:9e:
         14:a2:c5:1a:07:31:b5:f0:b4:54:82:a7:12:99:36:0f:cd:04:
         32:39:55:3a:3f:98:8d:e9:12:e3:1d:9e:ba:d5:0a:89:86:ef:
         8f:ec:b1:fa:7e:44:fe:1b:38:34:46:5d:2b:6d:a1:63:3f:67:
         4c:18:82:67:fd:56:fc:90:f6:2a:a1:d9:d5:1d:6b:cf:c5:b6:
         67:e2:d0:13:a8:7b:b9:23:f3:43:ec:c3:54:92:1e:c8:c6:88:
         8b:85:7b:e6:50:41:14:9f:cf:41:d7:67:16:af:cb:03:2b:ea:
         b5:7d:13:cd:f1:42:0d:f4:17:f1:15:17:fe:c4:0e:5f:0d:67:
         42:37:95:0d:88:b6:75:ce:b0:f7:b0:f7:8a:c9:ec:83:4d:88:
         48:79:92:df:3e:d1:8a:9b:e4:ca:bf:30:44:97:cb:7f:bb:7b:
         f6:68:06:95:af:7f:c5:6c:5f:3a:f9:2b:07:5c:3a:9e:b3:a1:
         3c:51:5d:ab:c5:ab:b5:2c:e8:f5:d8:79:20:de:bc:dc:26:79:
         22:d1:6c:18:73:aa:68:3f:51:1d:2b:7d:8d:05:33:74:ac:69:
         4a:42:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----