Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
File:                     2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer (raw, json)
Hash identifier:          SfTitZoDb5axk49nP1xlxhgDHnpDeGLl6LuT8HLRmNU=
Subject key identifier:   2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Certificate issuer:       /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial:       120365D803A853E230A17BD89C28A7F47E936C93
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 05:50:59 +0000
Certificate not after:    Thu 21 Nov 2024 05:55:59 +0000
Subordinate resources:    IP: 2a11:29c0:9eb0::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:65:d8:03:a8:53:e2:30:a1:7b:d8:9c:28:a7:f4:7e:93:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
        Validity
            Not Before: Nov 23 05:50:59 2023 GMT
            Not After : Nov 21 05:55:59 2024 GMT
        Subject: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:f4:5c:23:82:74:c7:c8:a3:cc:64:d9:c4:
                    8e:e5:ce:a9:c7:4d:93:de:80:41:c2:17:14:43:c8:
                    d7:2a:83:f9:64:b9:11:fe:3f:d8:5d:01:66:4d:eb:
                    8b:9f:c6:26:b7:73:70:9f:6c:15:f0:bd:e5:d0:97:
                    cc:30:a8:d3:0b:b6:d5:35:10:96:8a:bf:8b:25:14:
                    45:96:bb:43:1a:95:1d:19:cc:d9:60:83:07:69:4c:
                    d1:3d:e0:b8:d4:35:57:fa:ef:51:af:4f:a0:5d:08:
                    c3:22:e2:d3:5a:4e:b7:d8:71:b4:7b:2d:9c:bd:31:
                    18:7c:28:56:8f:03:73:4e:98:a5:2a:fd:20:14:a8:
                    8c:8f:63:1c:b5:10:d4:0c:12:6c:fe:4c:84:ad:a0:
                    c5:4c:fc:1f:85:bd:9b:aa:32:a4:e6:31:de:73:21:
                    cc:5e:2b:db:90:30:d2:78:7d:41:81:1e:3d:ed:72:
                    2f:14:e1:2e:e2:43:be:06:00:fc:40:58:cd:a5:95:
                    31:df:54:44:f1:80:82:62:53:41:f6:4a:14:0a:32:
                    1f:41:06:9b:03:b7:89:ba:ab:99:3c:0b:31:02:08:
                    cb:4f:58:1b:b4:1f:ab:c0:17:a0:43:8c:e2:8b:32:
                    7e:86:59:9e:71:19:43:f9:7f:75:e8:ce:c9:c7:fd:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
            X509v3 Authority Key Identifier:
                keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9eb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:fa:54:2c:b3:dd:8e:bc:87:11:bb:b0:c3:89:ef:63:f8:43:
         54:30:c4:c0:1b:ac:f8:2a:0c:a6:92:dc:9b:9a:d0:30:7f:6e:
         3f:e1:a1:0a:c7:05:67:64:86:fe:e4:7e:3b:a9:42:d5:b6:13:
         82:58:db:3f:23:b8:d2:c5:ad:a2:71:14:9d:ed:95:12:87:96:
         44:2f:8e:97:8a:67:03:ec:f3:e0:6f:f7:e2:4e:8d:46:08:60:
         b7:39:2a:1a:73:13:1d:09:85:bd:af:c7:97:4a:81:c8:a2:f5:
         ef:18:45:1b:3d:a4:96:d9:6c:46:59:0a:bc:b4:4d:d9:75:79:
         b2:f7:00:4b:b0:74:e7:c4:60:45:7c:bb:c8:3e:f1:72:47:7b:
         b3:0c:0d:e9:8b:38:0b:61:c6:dc:c8:34:68:bd:74:5f:17:69:
         78:23:29:ed:13:48:8e:bb:a1:0d:bd:d0:ae:42:e8:23:c2:27:
         4e:5b:c6:ef:91:2d:45:8f:c4:76:ca:0e:23:3c:2b:dc:ee:5f:
         5c:b5:86:93:e4:e4:23:ca:81:bc:ae:e5:54:60:00:a2:65:81:
         95:65:4f:fe:55:b9:c9:eb:83:da:c8:02:3c:00:a9:5a:0e:1e:
         cc:35:b9:7f:b3:6a:58:1e:cf:4f:66:f4:c8:6c:56:c0:86:ea:
         fd:cd:2b:5d
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUEgNl2AOoU+IwoXvYnCin9H6TbJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4MDM2MDgzOTU3MDdBNkM0QTc2MjY0MzE5OEE1MkM0
OURGNjAxNzAeFw0yMzExMjMwNTUwNTlaFw0yNDExMjEwNTU1NTlaMDMxMTAvBgNV
BAMTKDJDNjhEOUFENzdDQkUzODlGQTBDODNCRjA3RkI2OTk3OTEyNjJDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7PRcI4J0x8ijzGTZxI7lzqnH
TZPegEHCFxRDyNcqg/lkuRH+P9hdAWZN64ufxia3c3CfbBXwveXQl8wwqNMLttU1
EJaKv4slFEWWu0MalR0ZzNlggwdpTNE94LjUNVf671GvT6BdCMMi4tNaTrfYcbR7
LZy9MRh8KFaPA3NOmKUq/SAUqIyPYxy1ENQMEmz+TIStoMVM/B+FvZuqMqTmMd5z
IcxeK9uQMNJ4fUGBHj3tci8U4S7iQ74GAPxAWM2llTHfVETxgIJiU0H2ShQKMh9B
BpsDt4m6q5k8CzECCMtPWBu0H6vAF6BDjOKLMn6GWZ5xGUP5f3XozsnH/ZxXAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsaNmtd8vjifoM
g78H+2mXkSYsyjAfBgNVHSMEGDAWgBQEgDYIOVcHpsSnYmQxmKUsSd9gFzAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYzkwZjRmNi1mMmM0LTQ4
ODItOTFjZi05YjhmMGIzOGQ3ZGEvMi8wNDgwMzYwODM5NTcwN0E2QzRBNzYyNjQz
MTk4QTUyQzQ5REY2MDE3LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8wLzA0ODAzNjA4
Mzk1NzA3QTZDNEE3NjI2NDMxOThBNTJDNDlERjYwMTcuY2VyMIIBPwYIKwYBBQUH
AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNk
MWZkMmJlNGUvNy8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5
Y2QxZmQyYmU0ZS83LzJDNjhEOUFENzdDQkUzODlGQTBDODNCRjA3RkI2OTk3OTEy
NjJDQ0EubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp
cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoRKcCesDANBgkqhkiG9w0B
AQsFAAOCAQEAVvpULLPdjryHEbuww4nvY/hDVDDEwBus+CoMppLcm5rQMH9uP+Gh
CscFZ2SG/uR+O6lC1bYTgljbPyO40sWtonEUne2VEoeWRC+Ol4pnA+zz4G/34k6N
RghgtzkqGnMTHQmFva/Hl0qByKL17xhFGz2kltlsRlkKvLRN2XV5svcAS7B058Rg
RXy7yD7xckd7swwN6Ys4C2HG3Mg0aL10XxdpeCMp7RNIjruhDb3QrkLoI8InTlvG
75EtRY/EdsoOIzwr3O5fXLWGk+TkI8qBvK7lVGAAomWBlWVP/lW5yeuD2sgCPACp
Wg4ezDW5f7NqWB7PT2b0yGxWwIbq/c0rXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org