Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer
File:                     04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer (raw, json)
Hash identifier:          Lqzu0zRF4sVEDyob037u6i+wipBza8TEd8a+UjFFogw=
Subject key identifier:   04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       19A67ED6205165FA1F0C65336AD8142E8A17E826
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.mft
caRepository:             rsync://rpki.cc/repo/AlbroHoldings/0/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Wed 19 Mar 2025 00:41:08 +0000
Certificate not after:    Wed 18 Mar 2026 00:46:08 +0000
Subordinate resources:    IP: 2a07:54c1:c000::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a6:7e:d6:20:51:65:fa:1f:0c:65:33:6a:d8:14:2e:8a:17:e8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Mar 19 00:41:08 2025 GMT
            Not After : Mar 18 00:46:08 2026 GMT
        Subject: CN=04FD5E4B6BE832540092C7FB3E83B144BC0238D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:a2:cc:70:f5:85:bc:39:19:0a:99:7c:1e:
                    4d:0f:1e:3e:2f:0b:d1:df:f0:e6:f6:46:9f:de:84:
                    79:85:9e:91:f2:3f:85:ed:97:e0:95:6b:ce:99:69:
                    31:c9:96:b3:76:0c:f6:ae:df:73:c3:e1:73:e8:4e:
                    c7:87:41:fe:16:d7:21:7f:ef:f9:03:f5:7e:22:1b:
                    04:14:b0:2d:bd:40:3d:41:03:70:61:bf:b1:e6:93:
                    ba:6d:34:3f:a6:ca:14:7a:3b:5e:c1:b8:bd:4e:a2:
                    ce:3f:32:75:b5:a4:fb:03:54:f8:c2:00:d0:d7:30:
                    f2:f4:6d:75:1e:bc:d9:4e:a2:c9:ad:e5:d9:2f:dc:
                    86:e8:10:f4:b5:48:90:bf:e2:c3:f6:06:6d:2b:4e:
                    5f:69:2f:b1:8f:b9:ed:5b:33:81:6f:2e:10:e9:6b:
                    59:62:3e:f2:8f:a1:00:cb:32:51:85:bd:ec:d2:ee:
                    4a:d0:10:6e:c0:36:36:c5:9a:25:76:02:c0:7e:cc:
                    27:10:c7:e2:2f:77:6f:7d:d5:af:23:56:a9:fd:c5:
                    7f:96:b1:52:f8:8a:3e:68:b5:89:94:44:e4:9d:9f:
                    67:d5:7f:9e:27:a0:4b:39:5a:8c:9f:75:04:d9:e7:
                    5e:64:ed:94:be:52:f5:6d:fd:15:0f:8d:27:39:e7:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/AlbroHoldings/0/
                RPKI Manifest - URI:rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:10:a8:51:53:65:ad:95:a6:7d:77:0a:2e:90:ea:13:44:29:
         f5:82:92:e1:13:43:b5:a8:e9:73:59:0c:92:42:99:d0:b2:42:
         68:3f:20:2b:91:87:fc:d5:ce:4e:ce:65:20:a0:b3:bc:d9:ca:
         d4:f4:b3:5c:8f:a1:25:b5:76:63:1e:e0:43:ca:96:05:7e:30:
         d3:92:ed:d7:e9:99:85:d6:54:26:2b:cf:c9:c0:02:66:64:aa:
         49:4d:29:5d:a6:df:d9:04:05:18:a7:f2:b1:a8:87:ee:e4:0c:
         e4:0e:91:c6:d0:61:08:fb:95:95:07:5d:88:9e:f4:de:4a:94:
         07:5c:a0:fa:74:ee:64:94:6c:48:c4:2f:8c:03:3c:69:e4:2d:
         60:7e:66:61:e9:3e:f4:2d:92:b7:4a:53:a1:e1:3a:ff:02:5f:
         70:f2:8c:66:22:37:61:9a:14:75:53:cf:f9:03:f0:df:6e:64:
         e0:3a:4c:f6:fa:20:40:b4:32:c8:02:76:c0:2b:75:b6:48:88:
         2c:72:45:e0:a5:e3:df:a5:2a:b8:8c:46:69:5c:cc:f2:d9:47:
         98:85:e8:c6:2c:d8:4e:6a:c6:e1:df:5a:d8:2b:04:90:c3:5f:
         90:e1:a6:d9:47:6b:77:98:80:f2:d6:37:a2:4e:6a:6c:7b:d3:
         bc:1f:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----