Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
File:                     4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer (raw, json)
Hash identifier:          QeDhuspUNRR139E1+Om2eNBEkBVXwV+9bLVBF3C199A=
Subject key identifier:   42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       1FCAC29B3FF2FB04A9EFC0AFB1261AF4F049F1B2
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 01 Jul 2025 17:00:36 +0000
Certificate not after:    Tue 30 Jun 2026 17:05:36 +0000
Subordinate resources:    IP: 2a0f:6287:e000::/35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ca:c2:9b:3f:f2:fb:04:a9:ef:c0:af:b1:26:1a:f4:f0:49:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jul  1 17:00:36 2025 GMT
            Not After : Jun 30 17:05:36 2026 GMT
        Subject: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:63:03:59:93:5d:99:8b:6a:d1:ae:29:fd:
                    e9:c4:7d:12:11:d4:2f:6e:d4:27:53:ea:ae:85:bb:
                    6b:25:2f:8f:ac:61:58:d3:19:ef:f8:b5:66:4c:58:
                    44:fa:9e:ad:a3:93:18:94:25:10:1d:bd:d3:35:4c:
                    74:d5:12:5c:33:c8:d3:3b:16:be:13:ae:38:5d:98:
                    3e:51:ed:b0:14:ef:76:56:4c:a6:0a:60:f4:ce:fc:
                    8f:09:71:49:eb:7d:ca:61:83:27:e5:87:54:b6:d8:
                    40:36:63:2f:60:a7:be:01:41:80:91:70:b3:84:2a:
                    a6:93:a9:45:a3:7f:94:c6:38:51:5f:7b:5b:50:38:
                    87:95:4b:5a:9f:82:3c:b0:09:ed:0b:8e:c8:ba:3e:
                    1c:ba:d5:67:17:83:22:aa:43:7a:38:40:ae:7d:cc:
                    b8:91:b7:32:51:e8:50:b1:34:e7:04:89:bb:fc:79:
                    e2:1b:e3:79:86:5a:f4:e2:f4:97:07:f8:28:bf:7f:
                    30:66:e8:21:35:68:88:4b:2a:bd:73:ff:4a:44:71:
                    b9:c5:d9:af:ec:c7:f2:e3:24:5a:32:d7:12:5c:dd:
                    bb:63:f0:dd:34:d4:10:5e:2a:be:25:74:f0:8c:74:
                    38:d3:b8:e1:c3:9f:97:0e:be:44:1b:43:5e:a1:d9:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:b3:e4:57:a3:fe:ef:12:cf:a2:47:75:af:90:a0:45:ee:
         d3:80:fa:64:2e:2f:ba:60:1c:79:25:78:ce:cf:e3:13:b1:f0:
         10:33:72:7e:bd:44:b5:64:9e:fa:cc:74:c1:55:4f:7e:a1:67:
         e3:0a:c8:ea:6a:a7:a3:f4:c0:be:a0:74:aa:e5:c3:43:44:0a:
         07:17:34:ef:87:27:98:2a:d9:c8:d5:05:1a:47:a0:06:00:a0:
         6a:ae:42:7e:f1:68:19:91:b7:ca:b7:08:60:69:2c:83:5d:48:
         4e:40:2f:55:2a:fc:d3:c8:40:30:21:27:85:96:88:ec:08:82:
         ff:b2:f4:df:b5:ad:51:b0:fd:9a:85:63:db:f0:36:91:b4:ab:
         a4:0e:9d:75:aa:d9:a0:bf:5d:ec:2e:f4:81:be:14:5c:74:35:
         b8:2f:9d:4e:a5:52:73:0d:5b:3d:1e:87:d6:32:f9:ea:09:33:
         a4:86:13:87:9b:79:68:d8:3b:8b:2c:66:5f:eb:57:21:89:16:
         d9:30:a1:4e:5b:71:09:03:5a:27:83:44:f9:e9:ba:67:18:dc:
         dc:7c:55:0e:67:f3:01:42:c1:6f:27:06:83:04:6c:37:24:14:
         ed:91:ca:6f:14:e1:ae:60:39:c2:bb:68:41:c1:bc:3c:23:20:
         19:65:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:33:28 2025 by rpki-client