Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
File:                     A4A082EAE8EF48C7B407C40E742479EADD862089.cer (raw, json)
Hash identifier:          2oLRCZQf8WuIL7tZLO+Ygope2iGll/NRZmQnbpeHeJw=
Subject key identifier:   A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       18ECCAD1EA28DB56637C0BF9C1A26C608B3A12B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 25 Nov 2024 22:44:06 +0000
Certificate not after:    Mon 24 Nov 2025 22:49:06 +0000
Subordinate resources:    IP: 2a0f:85c1:390::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:ca:d1:ea:28:db:56:63:7c:0b:f9:c1:a2:6c:60:8b:3a:12:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Nov 25 22:44:06 2024 GMT
            Not After : Nov 24 22:49:06 2025 GMT
        Subject: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:8c:ca:82:01:9e:44:5c:61:7a:e2:4d:da:
                    73:c8:39:6f:0f:92:35:60:06:17:08:69:0d:a8:8c:
                    f8:dd:f9:55:35:fb:00:db:2d:47:38:1b:48:bd:14:
                    21:ff:02:ef:4b:4c:cd:7a:16:17:5b:9e:21:c8:93:
                    78:03:4d:11:29:d9:13:15:59:e4:e7:6a:44:03:2c:
                    fe:03:a4:97:e8:97:25:e9:a1:a5:32:5a:b7:a7:ed:
                    5c:8e:12:53:77:01:9c:df:f8:d9:ca:31:1a:9a:bb:
                    f2:0f:67:b7:a6:a7:b9:df:dd:52:1a:e5:ab:9e:25:
                    5c:61:bd:bb:91:f9:29:c8:e6:59:d0:0b:84:20:46:
                    1d:02:d2:f7:3b:2f:01:d9:7e:53:a8:79:0f:3e:3a:
                    b5:cf:57:35:0a:c0:c3:5b:1d:27:1b:9a:3b:c9:42:
                    7f:8f:e1:58:9f:4a:20:e6:dd:ae:d4:12:8d:cc:61:
                    02:68:40:1d:64:34:ff:83:0d:10:db:a2:f8:0a:18:
                    25:fb:3a:bc:d7:9c:71:a8:c3:0f:b4:4a:a7:b8:c9:
                    75:a5:cd:b9:3c:4f:65:17:90:16:5c:01:bb:b2:6f:
                    cb:52:7b:1d:4a:9e:b7:9e:ea:05:ef:85:ac:22:0f:
                    93:ab:b7:ad:71:81:a4:f8:69:ee:25:c1:a0:6f:2f:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:390::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:61:2b:69:a3:51:4d:1b:60:53:29:7b:a7:42:99:37:31:
         f2:1c:db:db:ab:88:cd:c0:d0:f3:9e:e7:a2:59:20:98:33:5e:
         3d:1d:18:39:9a:b3:c1:26:69:cf:9c:62:c5:0f:3c:2d:da:4e:
         01:b8:80:98:98:ca:9a:d5:2b:91:a6:38:fc:bd:ea:35:13:ce:
         24:9c:66:a9:37:2d:46:cc:81:dc:d2:e3:55:07:0d:2c:50:99:
         1d:94:96:01:0e:5d:c8:33:67:76:4e:b1:fe:5a:ff:b3:8a:cc:
         db:43:4c:de:d7:95:e1:d6:f0:4f:4c:0c:4e:07:36:77:01:17:
         f0:1d:e5:5c:c5:da:d8:85:1d:82:07:25:65:96:a3:8e:58:4a:
         b0:7f:bb:03:7b:04:0f:80:2d:a2:8e:d3:4c:27:c7:f7:81:64:
         0b:2f:65:06:9a:1b:d0:a1:31:a1:fb:cd:a8:d0:4f:34:c9:70:
         7a:50:7d:7d:d8:81:23:58:ed:1b:5e:90:e9:01:d0:14:15:c1:
         6b:7f:ae:2e:a5:e1:42:c7:a8:ca:a1:28:e9:24:9f:b7:ca:99:
         5e:44:7f:ee:32:3c:f4:a6:44:ac:b0:61:18:33:e0:ed:bb:61:
         98:a8:54:bb:38:34:e7:1c:6c:df:0e:f2:a2:63:96:5f:e7:27:
         c0:4c:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----