Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
File:                     6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer (raw, json)
Hash identifier:          glYh9GGOm/z99t/YgTeNvXdQNSVxSQrFdEiOfg7UFWg=
Subject key identifier:   6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       6125AA968553D0604D339242B4562B407F5E0018
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft
caRepository:             rsync://rpki.pudu.be/repo/pudu/2/
Notify URL:               https://rpki.pudu.be/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 18:45:23 +0000
Certificate not after:    Mon 12 Jan 2026 18:50:23 +0000
Subordinate resources:    IP: 2a07:54c1:4100::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:25:aa:96:85:53:d0:60:4d:33:92:42:b4:56:2b:40:7f:5e:00:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Jan 13 18:45:23 2025 GMT
            Not After : Jan 12 18:50:23 2026 GMT
        Subject: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:6f:89:e4:bf:9d:0b:72:5d:78:f8:2d:ce:
                    66:c3:86:5e:0b:48:71:92:4d:2f:d2:c7:21:86:b5:
                    02:88:28:d7:9b:b2:d5:a4:84:e3:7c:d2:90:21:f9:
                    3a:38:82:dd:40:72:e0:6b:af:bf:c8:f9:ee:52:47:
                    66:1b:62:b9:d9:11:78:57:d2:04:ac:d8:76:67:50:
                    c5:ed:a5:15:8b:63:bb:b0:36:7b:dd:31:d0:5c:71:
                    92:e5:17:d9:90:03:e1:c1:a8:91:bd:38:18:44:47:
                    f7:ef:48:ee:2a:54:09:15:cb:ac:5b:07:d9:7b:86:
                    be:75:b5:3d:7c:af:0b:ba:31:05:9c:b5:13:75:fb:
                    83:df:3a:37:57:bc:4b:76:3f:a2:86:d3:fc:b3:5d:
                    b7:7a:0c:75:2f:21:01:28:53:7a:50:ea:06:78:9d:
                    a6:9a:d2:9b:e2:74:b3:07:6f:cd:2b:f4:5e:80:93:
                    89:dc:46:60:78:0c:e5:27:d4:8c:50:ac:92:18:53:
                    5a:3f:39:8f:55:c8:32:b9:ee:2f:80:57:c8:fb:64:
                    48:61:85:0e:39:81:6a:c6:50:cd:30:be:00:56:5d:
                    b1:ae:fe:ec:47:74:97:30:b8:32:99:f9:70:5b:8c:
                    db:dc:b1:86:7b:1f:c9:62:ce:fd:7d:b7:3d:dd:dd:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.pudu.be/repo/pudu/2/
                RPKI Manifest - URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft
                RPKI Notify - URI:https://rpki.pudu.be/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:02:09:e5:61:68:16:ec:fd:96:da:fa:39:77:50:9b:1a:
         bf:14:ea:2d:7e:26:aa:9d:2e:c4:7b:d4:ff:bc:ba:6f:dc:8a:
         bd:f8:92:a8:39:5c:85:7b:e2:e1:70:2c:0d:fb:28:54:bc:d1:
         ed:44:b8:6e:ff:cf:db:08:94:e0:cf:c1:2d:f9:81:ea:17:f9:
         e7:54:50:c2:d9:74:85:0b:88:ba:97:92:fe:cc:f2:9f:25:35:
         23:4f:5a:57:f0:21:10:d4:50:cd:36:78:54:d3:8a:36:3e:98:
         b3:fc:dc:a1:17:ab:07:aa:a7:a9:5c:90:1d:85:56:2f:06:21:
         57:b0:bd:5a:9b:b2:6c:f5:b0:b6:1f:00:fc:40:15:09:27:57:
         26:a6:77:4e:ae:ae:03:00:c2:9a:5c:b3:83:74:27:17:70:e1:
         0e:36:18:f3:1c:d9:90:0f:98:fd:fb:ce:a5:c6:2b:87:7c:23:
         08:be:89:a8:75:cb:e1:3d:4a:42:b3:c4:b2:20:78:51:43:46:
         a0:dd:c9:10:6d:de:84:0d:c6:ae:00:23:67:bd:56:a6:65:f9:
         72:d5:bc:49:52:0c:6e:81:0e:7b:48:4a:3b:ff:e9:15:7a:d0:
         cc:0d:51:3a:79:81:6d:75:04:55:ef:7d:c8:ac:11:a0:7b:c9:
         d7:57:62:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----