Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File:                     EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier:          3BT9uL1XAC5U79XRq/4bEEyNUpTjMViF0VW+R9xq6FI=
Subject key identifier:   EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       0E87746A4867CD2BCA921CEDE543C3B585D31470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 15:52:43 +0000
Certificate not after:    Tue 05 Nov 2024 15:57:43 +0000
Subordinate resources:    IP: 2a0f:85c1:325::/48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:74:6a:48:67:cd:2b:ca:92:1c:ed:e5:43:c3:b5:85:d3:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Nov  7 15:52:43 2023 GMT
            Not After : Nov  5 15:57:43 2024 GMT
        Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
                    4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
                    c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
                    3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
                    df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
                    9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
                    b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
                    75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
                    66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
                    3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
                    35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
                    d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
                    e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
                    96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
                    a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
                    4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
                    ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:325::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:b3:b6:50:51:1d:fa:8f:5d:59:76:f0:6f:16:39:97:01:
         c8:d8:69:97:df:e7:da:fa:c5:9a:01:ed:97:ec:59:74:27:c6:
         15:64:97:af:1d:c0:37:99:e5:22:5d:f2:e9:51:41:33:b3:3c:
         3c:fc:e1:e8:ac:44:56:b2:15:ff:bc:9f:60:cc:e5:42:02:e1:
         11:a8:80:e1:18:7c:76:12:fd:12:14:3e:f9:1d:b4:b5:b6:b4:
         af:e8:c9:a5:3b:80:6e:d8:82:0b:3a:75:a7:38:9b:af:91:f2:
         be:a9:a3:49:2d:1a:d1:de:83:3e:5e:fc:65:7e:e3:0f:24:fc:
         11:6c:cf:c1:ee:65:a7:a6:1d:d7:bd:ac:46:d7:c4:1c:dc:a7:
         05:7b:99:e4:1c:ec:b5:a6:00:06:71:ee:5e:68:fa:c3:ce:11:
         cf:ad:2b:ae:ee:67:c1:84:81:14:cc:35:cc:ee:8f:1a:e6:38:
         16:4e:83:84:2d:32:f9:42:9c:49:55:04:68:aa:8c:9d:29:71:
         8a:e3:3a:c5:1e:68:ce:e6:ba:9d:b1:fb:5b:32:d3:cf:36:d6:
         9f:64:f2:13:e0:e8:cb:a2:45:82:77:bf:6d:7a:04:d9:6b:91:
         e6:2c:f9:aa:35:bb:a7:9b:84:d7:75:4c:ce:d0:65:7b:0b:66:
         7a:3f:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 23:44:02 2024 by rpki-client on console-fra.rpki-client.org