Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
File:                     FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer (raw, json)
Hash identifier:          rimmuwq5UgubKmtww5sIHQ6+ZlzIEk/jg1xFn2BcXnA=
Subject key identifier:   FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Certificate issuer:       /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial:       3BD7B427256FDD78418B60819097A5DA964EB9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 19 Apr 2023 21:03:42 +0000
Certificate not after:    Wed 17 Apr 2024 21:08:42 +0000
Subordinate resources:    IP: 2a13:df80:70::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d7:b4:27:25:6f:dd:78:41:8b:60:81:90:97:a5:da:96:4e:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
        Validity
            Not Before: Apr 19 21:03:42 2023 GMT
            Not After : Apr 17 21:08:42 2024 GMT
        Subject: CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:dd:62:c2:9a:6e:a8:75:09:38:ba:c8:d4:
                    94:22:4b:23:d4:51:94:e8:44:67:09:da:db:e8:c1:
                    41:d2:6f:1e:c6:4c:2b:92:6a:d0:e6:45:60:54:19:
                    c3:86:c0:a5:5c:02:45:47:1c:31:a4:ee:3d:65:23:
                    a7:14:40:a7:96:04:7b:95:ce:55:ab:74:15:9e:54:
                    62:55:bd:4b:f9:7d:81:ce:03:8b:73:e3:b3:d3:5b:
                    c3:89:be:85:ff:f4:a6:49:80:91:06:0c:dc:22:36:
                    c6:11:1b:aa:f9:9c:0e:f7:54:7f:2d:7a:8a:6d:67:
                    32:2c:62:67:46:f2:ec:d9:d1:b7:94:f3:ca:54:8e:
                    91:32:d6:e9:dc:2e:07:92:54:64:c8:21:8a:9c:51:
                    e0:7b:2a:49:05:c8:8c:9e:e4:29:a4:30:ce:ce:29:
                    bc:0f:42:19:5f:d3:92:93:e9:1a:04:85:11:91:c2:
                    9a:80:56:61:56:55:a8:90:5f:e9:8e:a6:79:0c:23:
                    db:4f:23:00:a6:b2:88:60:5e:7d:64:b9:0c:bb:3d:
                    f0:ef:2c:73:e3:56:e2:ae:e6:a2:7c:6a:10:87:74:
                    04:8b:87:86:bf:c6:6c:ee:bf:01:87:78:fc:df:5b:
                    35:30:c5:73:07:55:73:c5:c9:62:c8:89:42:f5:6c:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
            X509v3 Authority Key Identifier:
                keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:7d:74:09:0f:27:8c:f0:9b:f9:33:2d:57:85:e2:45:4a:
         0f:0a:84:ff:65:62:ce:36:54:32:9e:23:0d:ec:6a:b1:24:7e:
         c6:5b:8b:0c:38:a0:77:77:16:da:03:17:08:db:77:12:d6:a7:
         64:41:2b:82:11:da:12:21:d4:8a:af:81:0d:ed:14:24:a5:d6:
         f6:3e:64:f7:83:1e:dc:59:92:cc:f9:ad:81:e0:d1:8e:d1:8f:
         41:9e:db:9a:ee:06:04:a5:f5:c5:ba:ae:3c:04:d4:ce:71:8a:
         7b:0a:05:a2:f1:f4:59:31:61:45:e7:35:2c:80:31:05:21:aa:
         e7:11:05:84:e5:31:4b:b6:ab:82:bf:d5:71:a4:92:2f:be:03:
         a8:43:b0:22:d3:cc:78:d8:84:b3:48:df:23:f6:4f:69:12:75:
         f2:1d:a1:50:5c:ac:50:a3:4e:00:2b:ce:0d:45:04:2c:05:f6:
         c5:dd:a7:ff:f4:6d:4d:65:98:0b:f7:23:b4:07:87:9c:9a:22:
         de:74:40:ee:ad:4c:5a:ac:00:b8:9c:33:3e:79:94:60:40:60:
         09:b0:42:96:d9:22:32:0a:81:fa:5b:91:02:cb:25:ec:61:35:
         e7:00:14:12:84:ee:52:1f:7a:bd:2e:69:07:52:7b:57:5b:2c:
         a7:4f:3a:ed
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUO9e0JyVv3XhBi2CBkJel2pZOucYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA0MTkyMTAzNDJaFw0yNDA0MTcyMTA4NDJaMDMxMTAvBgNV
BAMTKEZCRjJBRDM3ODNBM0M5NkUyNjUyNDgxRjdBNzdDRkM1QkU3NzkyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4d1iwppuqHUJOLrI1JQiSyPU
UZToRGcJ2tvowUHSbx7GTCuSatDmRWBUGcOGwKVcAkVHHDGk7j1lI6cUQKeWBHuV
zlWrdBWeVGJVvUv5fYHOA4tz47PTW8OJvoX/9KZJgJEGDNwiNsYRG6r5nA73VH8t
eoptZzIsYmdG8uzZ0beU88pUjpEy1uncLgeSVGTIIYqcUeB7KkkFyIye5CmkMM7O
KbwPQhlf05KT6RoEhRGRwpqAVmFWVaiQX+mOpnkMI9tPIwCmsohgXn1kuQy7PfDv
LHPjVuKu5qJ8ahCHdASLh4a/xmzuvwGHePzfWzUwxXMHVXPFyWLIiUL1bGr1AgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT78q03g6PJbiZS
SB96d8/FvneSEzAfBgNVHSMEGDAWgBR0uQon2G9qGRTCYcIUad+FPjK+tTAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NGZjNDc1Mi1mODFhLTQ3
YjYtOGYwZC1mZjc0YzhiMGIwYTQvMC83NEI5MEEyN0Q4NkY2QTE5MTRDMjYxQzIx
NDY5REY4NTNFMzJCRUI1LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZExrS0o5
aHZhaGtVd21IQ0ZHbmZoVDR5dnJVLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASww
XgYIKwYBBQUHMAWGUnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZTIyM2JkYTUtMWY5NC00MzE5LWI0NDgtODNkYjcxODYxNjk1LzEw
gYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L2UyMjNiZGE1LTFmOTQtNDMxOS1iNDQ4LTgzZGI3MTg2MTY5NS8x
L0ZCRjJBRDM3ODNBM0M5NkUyNjUyNDgxRjdBNzdDRkM1QkU3NzkyMTMubWZ0MDwG
CCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlm
aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCoT34AAcDANBgkqhkiG9w0BAQsFAAOCAQEAFvh9
dAkPJ4zwm/kzLVeF4kVKDwqE/2VizjZUMp4jDexqsSR+xluLDDigd3cW2gMXCNt3
EtanZEErghHaEiHUiq+BDe0UJKXW9j5k94Me3FmSzPmtgeDRjtGPQZ7bmu4GBKX1
xbquPATUznGKewoFovH0WTFhRec1LIAxBSGq5xEFhOUxS7argr/VcaSSL74DqEOw
ItPMeNiEs0jfI/ZPaRJ18h2hUFysUKNOACvODUUELAX2xd2n//RtTWWYC/cjtAeH
nJoi3nRA7q1MWqwAuJwzPnmUYEBgCbBCltkiMgqB+luRAssl7GE15wAUEoTuUh96
vS5pB1J7V1ssp0867Q==
-----END CERTIFICATE-----