Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
File:                     6841FC5C60B7081BC7EB747051E092B90C350B9E.cer (raw, json)
Hash identifier:          bNw8NDsDUFp1FfaI2FQcylo4XrBS1aO+tyJCE+xHSZ8=
Subject key identifier:   68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       3A5488569ECAEDBC75A5EE5D0F6F22A8AFDEBB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.mft
caRepository:             rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:54:26 +0000
Certificate not after:    Sun 31 Dec 2023 23:59:26 +0000
Subordinate resources:    IP: 2a05:dfc7::/32
                          IP: 2a06:1287::/32
                          IP: 2a06:9f45::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:54:88:56:9e:ca:ed:bc:75:a5:ee:5d:0f:6f:22:a8:af:de:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:26 2023 GMT
            Not After : Dec 31 23:59:26 2023 GMT
        Subject: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:6b:c6:96:39:27:6f:20:b6:a6:ba:73:59:
                    17:be:2f:a0:24:81:be:fa:14:87:24:34:66:ec:7b:
                    de:06:09:b6:6f:fb:c8:ab:7f:d5:6c:f6:47:3c:45:
                    73:9b:fd:af:f0:1c:15:ef:39:27:0a:2c:1d:e8:96:
                    31:4d:3b:8e:77:5b:7c:74:9c:d5:54:e4:0c:a1:30:
                    ee:cb:e7:fd:ec:c7:d1:b9:f2:0d:41:7d:52:4d:35:
                    03:63:dc:fc:52:3b:86:d8:9b:6c:a6:98:bc:a0:e4:
                    45:f3:8b:9c:cb:1e:dd:48:e4:5e:7d:1c:c9:62:53:
                    c7:d4:3b:57:2e:e9:cb:e6:2b:6f:39:04:d5:0e:5b:
                    24:c8:2b:6f:33:6a:ce:47:fb:ed:9d:6c:98:16:9b:
                    db:df:6f:80:60:13:e1:fa:c9:e0:0a:77:f0:98:21:
                    75:50:cd:55:d3:73:4a:41:bd:e2:dd:f7:9b:7c:ba:
                    8e:0b:e7:1b:90:3f:ae:06:b8:ad:3d:ab:a0:15:fc:
                    46:7c:56:38:1b:b7:b5:16:b9:0a:4f:3b:fe:0a:60:
                    ab:ea:83:b3:56:3b:1c:21:71:c9:eb:e6:8d:01:53:
                    87:08:9d:97:80:57:92:ae:34:03:16:e7:75:da:54:
                    80:7d:6f:a2:de:4a:82:47:c5:9f:eb:e5:71:d0:7e:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7::/32
                  2a06:1287::/32
                  2a06:9f45::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:2b:89:85:e4:1c:52:22:8e:56:d3:e5:f3:bd:03:4e:82:
         ba:21:38:73:af:df:a7:bd:6c:b4:f7:e3:4d:80:71:d4:b7:60:
         f5:2f:ee:de:36:70:ab:40:75:8d:30:c6:cb:89:97:80:de:e9:
         23:40:f3:76:58:f3:41:3c:41:bd:ce:d3:fd:75:c5:c5:ef:7b:
         10:8e:af:82:c6:d2:1d:4d:19:a0:19:4f:57:b7:95:c8:3d:5a:
         fa:fb:60:82:15:71:ff:9d:fa:c6:a4:81:16:d6:7f:c9:9e:2b:
         bb:c3:50:df:d1:3f:2b:0f:bb:0e:bb:81:3d:8c:51:7c:29:29:
         51:72:97:bb:4e:a4:95:72:46:f9:c1:20:0f:38:94:c0:dd:cd:
         86:17:80:97:ac:c9:73:15:65:ed:7c:36:0b:b5:83:5f:89:a8:
         14:72:85:fb:45:d2:eb:b1:c6:96:da:0e:94:b3:1a:93:bf:37:
         8b:52:c9:b4:d5:19:69:38:58:d2:43:b6:d8:dd:1e:66:40:41:
         54:ea:0f:bc:00:ee:4f:44:92:3d:c8:5d:d2:80:8a:5f:a1:70:
         ac:14:bd:8d:d4:dd:c2:25:8d:80:cb:72:ef:7b:53:d0:98:9b:
         81:bb:3b:28:14:9a:95:37:9d:bb:df:8a:dc:96:33:18:ba:18:
         98:15:ec:b9
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUOlSIVp7K7bx1pe5dD28iqK/eu4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjZaFw0yMzEyMzEyMzU5MjZaMDMxMTAvBgNV
BAMTKDY4NDFGQzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfq2vGljknbyC2prpzWRe+L6Ak
gb76FIckNGbse94GCbZv+8irf9Vs9kc8RXOb/a/wHBXvOScKLB3oljFNO453W3x0
nNVU5AyhMO7L5/3sx9G58g1BfVJNNQNj3PxSO4bYm2ymmLyg5EXzi5zLHt1I5F59
HMliU8fUO1cu6cvmK285BNUOWyTIK28zas5H++2dbJgWm9vfb4BgE+H6yeAKd/CY
IXVQzVXTc0pBveLd95t8uo4L5xuQP64GuK09q6AV/EZ8Vjgbt7UWuQpPO/4KYKvq
g7NWOxwhccnr5o0BU4cInZeAV5KuNAMW53XaVIB9b6LeSoJHxZ/r5XHQfuUJAgMB
AAGjggKxMIICrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoQfxcYLcIG8fr
dHBR4JK5DDULnjAfBgNVHSMEGDAWgBTRLqZd7phztdzzxsAiT66m/LiupjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1jMzVlLTRl
NjktYTgxNS1iYTFlOWIzMzZkNjIvMi9EMTJFQTY1REVFOTg3M0I1RENGM0M2QzAy
MjRGQUVBNkZDQjhBRUE2LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMFM2bVhl
NlljN1hjODhiQUlrLXVwdnk0cnFZLmNlcjCCAQAGCCsGAQUFBwELBIHzMIHwMEAG
CCsGAQUFBzAFhjRyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9XSUxM
SUFNX1VJRF8xMTQ4My8wMG0GCCsGAQUFBzAKhmFyc3luYzovL3Jwa2kuemFwcGll
aG9zdC5jb20vcmVwby9XSUxMSUFNX1VJRF8xMTQ4My8wLzY4NDFGQzVDNjBCNzA4
MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUubWZ0MD0GCCsGAQUFBzANhjFodHRw
czovL3Jwa2kuemFwcGllaG9zdC5jb20vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMBsEAgAC
MBUDBQAqBd/HAwUAKgYShwMFACoGn0UwDQYJKoZIhvcNAQELBQADggEBABt+K4mF
5BxSIo5W0+XzvQNOgrohOHOv36e9bLT3402AcdS3YPUv7t42cKtAdY0wxsuJl4De
6SNA83ZY80E8Qb3O0/11xcXvexCOr4LG0h1NGaAZT1e3lcg9Wvr7YIIVcf+d+sak
gRbWf8meK7vDUN/RPysPuw67gT2MUXwpKVFyl7tOpJVyRvnBIA84lMDdzYYXgJes
yXMVZe18Ngu1g1+JqBRyhftF0uuxxpbaDpSzGpO/N4tSybTVGWk4WNJDttjdHmZA
QVTqD7wA7k9Ekj3IXdKAil+hcKwUvY3U3cIljYDLcu97U9CYm4G7OygUmpU3nbvf
ityWMxi6GJgV7Lk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org