Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/ECBAF79FA1E7D92BC8A34A20BD73C046F41F101A.cer
File:                     ECBAF79FA1E7D92BC8A34A20BD73C046F41F101A.cer (raw, json)
Hash identifier:          U61XKyhvQEE3My8q5gYR3yXtXUHsV+s7xRSzW8OQc1w=
Subject key identifier:   EC:BA:F7:9F:A1:E7:D9:2B:C8:A3:4A:20:BD:73:C0:46:F4:1F:10:1A
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       1DD1CB1C2E3A728B68D1DD00A3A0D42B6FEC9385
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/14/ECBAF79FA1E7D92BC8A34A20BD73C046F41F101A.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/14/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 13:36:50 +0000
Certificate not after:    Tue 17 Sep 2024 13:41:50 +0000
Subordinate resources:    IP: 2a07:54c5:1300::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d1:cb:1c:2e:3a:72:8b:68:d1:dd:00:a3:a0:d4:2b:6f:ec:93:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 19 13:36:50 2023 GMT
            Not After : Sep 17 13:41:50 2024 GMT
        Subject: CN=ECBAF79FA1E7D92BC8A34A20BD73C046F41F101A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:7d:1a:f1:3b:e8:6e:df:17:49:3c:07:79:
                    e9:5c:d8:77:a5:cd:d4:37:28:ac:3c:17:c2:12:0e:
                    59:40:0f:05:16:34:1f:b9:49:c9:1c:65:6a:0f:da:
                    54:a4:62:b1:74:81:ec:c7:74:24:99:0a:2f:b0:4e:
                    6d:8e:8a:03:dc:63:98:78:62:71:2b:dd:d4:77:a6:
                    c4:9e:32:05:19:e0:2a:d4:d0:ac:16:1d:08:8f:5f:
                    67:bb:5d:de:c6:81:a5:4a:a8:4d:11:98:bd:ca:d9:
                    d3:11:dc:f8:57:9f:59:37:45:77:bc:9a:2c:81:1c:
                    6f:8d:bb:3b:a4:20:ca:4c:5d:cc:87:fe:f0:fd:e1:
                    18:9f:6a:8b:99:d6:8c:35:44:b8:ab:24:06:65:91:
                    9c:e3:c7:0c:29:f6:b8:6f:9d:03:21:10:da:02:e3:
                    0d:f9:99:41:ed:6b:8e:49:0c:d4:14:4b:cc:2a:3c:
                    52:41:d5:ad:c1:6c:22:00:0d:7e:aa:d8:cc:40:0a:
                    38:20:08:ee:47:fd:0d:3a:d0:e9:1c:8a:51:36:93:
                    a2:0f:36:bc:c3:b7:66:2c:d7:ac:5d:00:9c:ab:cb:
                    fa:22:38:bf:e0:12:16:1d:c8:f7:87:19:73:0d:fe:
                    12:0f:e8:80:c9:13:89:50:0e:87:57:1c:e9:e4:83:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:BA:F7:9F:A1:E7:D9:2B:C8:A3:4A:20:BD:73:C0:46:F4:1F:10:1A
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/14/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/14/ECBAF79FA1E7D92BC8A34A20BD73C046F41F101A.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:14:44:e1:d0:55:05:8f:20:2e:c2:38:17:22:52:ea:b4:66:
         f8:6b:a6:d4:d9:92:34:3d:a2:2e:4f:bb:ab:e1:ca:7c:fd:24:
         c0:6e:99:9c:64:14:b9:28:09:ca:cd:f2:6a:75:97:ad:5a:8d:
         cd:56:73:e8:8b:13:4d:cb:ba:b9:b4:19:74:ce:37:b5:68:82:
         86:38:0d:90:21:c1:4f:a4:de:16:fb:aa:0f:6d:fc:fd:b9:8f:
         48:e6:f2:36:a0:70:20:47:b3:b9:b7:18:62:d5:7f:19:54:fe:
         59:50:aa:5e:c7:db:54:d5:23:ce:1e:98:07:e5:69:2b:d0:f0:
         ac:ba:c5:6e:3d:72:fb:59:7d:58:76:0b:10:0e:d9:bb:b4:5d:
         5a:04:2e:a2:5d:9b:8c:90:75:5a:48:f4:99:08:7a:7c:f8:c5:
         8f:43:f7:67:9f:99:c3:3e:ed:5d:6d:08:78:f8:01:7b:2f:49:
         43:1b:2d:19:a3:46:e9:11:c5:37:62:b4:8c:b3:c9:64:f7:15:
         80:af:e7:ca:94:21:3f:1d:21:d9:8e:5f:86:9d:fc:1d:d9:53:
         39:40:9f:3f:e9:16:44:fb:be:16:97:ac:33:11:32:1a:23:70:
         0b:2c:82:d5:53:4f:ab:0b:42:53:d1:5b:03:78:b4:ef:11:8f:
         47:63:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----