Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer
File:                     CC2B47BFD397E66019550C83BF1B56353173A0CB.cer (raw, json)
Hash identifier:          QgYlaOJSarr7pjAe0RVY3OwiGheKmpBr1TWIGV5TZb8=
Subject key identifier:   CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       060F0E5851C279393F89B9E844FED6253CF3D095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 16:10:57 +0000
Certificate not after:    Fri 27 Jun 2025 16:15:57 +0000
Subordinate resources:    IP: 2a0f:85c1:331::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0f:0e:58:51:c2:79:39:3f:89:b9:e8:44:fe:d6:25:3c:f3:d0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Jun 28 16:10:57 2024 GMT
            Not After : Jun 27 16:15:57 2025 GMT
        Subject: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:91:e9:e7:97:81:92:79:69:5c:eb:ab:cd:
                    43:29:bd:58:14:a7:bf:64:71:48:07:2a:93:74:4b:
                    a3:da:60:00:04:b3:df:1a:2d:ef:d6:7b:2b:a1:69:
                    60:30:a5:98:58:e3:f2:9c:a2:7f:1c:1f:bc:4a:4e:
                    57:44:72:e0:02:2b:ae:1b:69:85:f0:69:ad:f6:85:
                    3b:fc:22:7a:68:38:6d:df:06:9f:be:04:1e:93:2e:
                    c5:9a:b5:0c:46:ad:b4:e5:49:d8:3b:ff:38:3b:ca:
                    0b:41:dc:5a:73:f3:35:0d:be:b3:63:77:e5:38:b3:
                    48:8d:8e:0d:a7:26:b8:d0:b3:5f:fb:bb:ca:a8:aa:
                    5b:f2:0c:af:5f:5a:f5:0d:97:e6:1a:76:f6:e3:dc:
                    e2:49:65:95:7e:5a:2a:22:08:5d:a3:ec:12:88:0d:
                    71:f3:aa:a6:84:0a:58:89:61:f3:70:b1:d7:b1:22:
                    dd:05:b5:fc:e0:1e:b4:5a:7f:f5:12:e6:f3:72:7d:
                    cc:49:08:39:de:7b:3c:95:3a:11:6e:ef:cb:a9:56:
                    57:35:fe:12:fb:36:18:7e:94:fd:70:fd:09:92:ed:
                    bc:73:43:ac:c0:36:b4:a8:fe:68:99:f0:46:f1:89:
                    03:19:8a:34:9d:8b:1c:6b:7f:e5:9c:04:f2:4b:f8:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:3b:be:c6:35:7f:6b:fb:6b:0e:55:5b:bb:b0:49:69:a1:
         b7:57:54:62:44:42:e9:16:5b:22:82:75:61:d5:60:cd:38:f3:
         4a:a4:06:c2:07:38:80:b1:d8:9f:c1:a5:12:cf:16:48:7f:ec:
         11:b8:a0:f3:cf:18:5d:3e:db:b4:37:54:a1:9e:63:00:8c:9d:
         8b:fe:a6:0d:66:29:1e:76:c4:fb:76:0d:65:e7:52:42:83:62:
         83:94:25:68:12:f7:83:d6:bd:c2:6c:67:a3:b4:9e:d7:86:48:
         9b:74:a9:7f:28:3a:78:fb:79:5d:09:6d:dd:c3:0d:c4:2f:53:
         83:22:48:72:bc:91:8c:c2:2e:1d:54:a9:91:b4:b8:c1:ac:18:
         20:7e:d1:c0:a6:a3:46:3e:5b:4f:44:9c:1d:92:80:ec:c9:c5:
         a5:1f:81:6f:92:97:67:81:be:e6:6a:66:0d:f7:0b:2a:3e:90:
         6a:2e:8f:66:d5:4c:bb:f8:02:ca:32:c3:bc:ef:16:d0:0a:63:
         84:8a:5a:46:9f:a1:5c:7c:2b:e7:91:eb:af:02:7d:ac:00:21:
         09:03:27:01:70:03:0b:4f:45:4d:82:44:33:78:e2:2c:a4:2a:
         48:ec:9a:27:53:74:98:7e:9d:90:cf:f0:42:69:38:c5:f7:7b:
         4c:01:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----