Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
File:                     F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer (raw, json)
Hash identifier:          im+Nr/Z3Q9YKQW775XMErOqE3RBePSUvbTNS14sUPsM=
Subject key identifier:   F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       016AD03013B024197D91427A495D0213AA7E0D91
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 29 Aug 2025 08:44:59 +0000
Certificate not after:    Fri 28 Aug 2026 08:49:59 +0000
Subordinate resources:    IP: 2a14:7580:7e0::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6a:d0:30:13:b0:24:19:7d:91:42:7a:49:5d:02:13:aa:7e:0d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: Aug 29 08:44:59 2025 GMT
            Not After : Aug 28 08:49:59 2026 GMT
        Subject: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:c0:e4:88:60:da:80:54:ee:d1:d1:27:0c:
                    23:d2:b0:5b:3e:1e:cb:97:8d:48:ff:9c:f6:08:c4:
                    6a:7d:51:dd:05:68:79:fd:d8:f8:35:ca:d4:07:59:
                    13:6f:2f:0d:a0:31:43:7f:c6:c8:15:e2:10:cc:75:
                    42:8d:34:8a:bb:6d:a9:b9:af:d1:3f:05:28:27:ae:
                    f5:85:00:ab:15:cd:9c:26:b0:b3:fc:fa:d7:ff:63:
                    83:32:66:08:13:2b:f4:67:68:77:b3:c2:be:7b:1d:
                    67:0f:a2:8a:f8:1b:de:f5:27:62:17:76:12:0e:5c:
                    a1:bc:27:21:44:53:5b:0f:0a:91:c9:fe:72:20:7b:
                    1e:9a:b2:5c:a1:6f:aa:17:b9:76:f8:e1:e9:25:b1:
                    c6:2e:57:38:91:e9:d5:9b:36:cd:9a:82:a1:17:3f:
                    64:fa:f7:2e:80:3a:03:5c:f5:cd:dd:32:c0:e2:50:
                    52:2e:3b:82:f5:7e:cb:22:77:00:86:ca:4b:7e:ff:
                    4e:d5:e0:6d:86:7b:81:e4:af:0c:5a:7c:c4:93:41:
                    f1:d5:97:78:ea:69:3c:e4:05:ca:4e:68:f8:09:37:
                    83:f6:1b:9f:c8:3d:0d:52:01:71:78:ea:30:31:00:
                    1b:28:b4:ba:f3:5d:7c:64:be:82:c8:f5:d6:16:f8:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:69:fe:b5:8f:20:47:51:8b:d6:af:3b:79:91:88:87:e6:ef:
         c1:8d:81:e4:9b:45:df:19:20:d9:8c:31:5b:8c:0b:a9:e7:6c:
         7b:51:19:cf:f0:53:7f:08:fa:8b:92:ad:24:c2:50:6c:81:cc:
         75:1f:d7:8b:1e:16:de:ed:51:b2:29:09:41:1d:fe:48:08:3f:
         82:38:60:03:31:15:92:75:10:17:55:18:a8:2a:9b:9d:e3:f5:
         d9:de:a2:5a:ae:ff:01:be:c7:43:5f:a0:5c:60:97:5e:ce:4b:
         0f:4a:8b:2c:be:46:6a:40:98:9e:e1:bb:c2:50:a1:35:65:f3:
         41:ad:5a:ba:88:48:d8:37:ee:23:1f:56:27:24:2c:71:42:a8:
         48:7d:11:d0:00:80:79:0b:f7:e4:85:4b:46:80:05:5a:e6:8f:
         84:d7:47:42:d9:bd:b8:ab:1d:32:19:6e:3a:43:92:61:82:5c:
         c3:bb:5f:b7:4c:7c:ce:fa:3f:56:94:c5:72:5f:89:3b:cb:97:
         68:1c:64:24:e4:d7:3f:d9:7e:35:b5:81:9b:10:97:13:a5:2a:
         62:d0:88:65:a2:07:5f:12:62:6a:81:ed:1c:ec:d8:ce:78:ca:
         17:1e:b5:3f:68:a6:0f:09:92:ee:f5:fa:77:13:60:fa:6f:f8:
         7b:cb:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:39:19 2025 by rpki-client