Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
File:                     892843788777A43273322096510EA10880E7E5EA.cer (raw, json)
Hash identifier:          F5s95FpqYyZL2h6umTVkXDeakWwehMraLPZZiIIJ8uQ=
Subject key identifier:   89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       308BF5517F67E5AC4B91B4AC465204D6E812DD5A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sat 25 Jan 2025 23:38:59 +0000
Certificate not after:    Sat 24 Jan 2026 23:43:59 +0000
Subordinate resources:    IP: 2a07:54c0:ffee::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8b:f5:51:7f:67:e5:ac:4b:91:b4:ac:46:52:04:d6:e8:12:dd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Jan 25 23:38:59 2025 GMT
            Not After : Jan 24 23:43:59 2026 GMT
        Subject: CN=892843788777A43273322096510EA10880E7E5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:47:ed:1b:e6:f3:6f:41:e0:4d:de:97:a9:
                    3e:9f:1e:f8:bc:fc:dd:d2:f6:c1:27:5e:3e:7e:cf:
                    53:83:2d:0d:c4:e6:46:17:dc:92:07:60:89:b4:26:
                    6d:0c:0c:45:14:02:1b:b7:5f:8e:c1:15:29:f6:5f:
                    c4:cd:9b:08:3b:99:47:ae:89:ef:d6:11:59:dd:72:
                    70:8c:bc:bf:c8:c4:02:d8:2a:8a:aa:ed:6a:49:ab:
                    d3:c2:92:bc:8e:40:69:c1:35:21:ea:89:b8:8f:0b:
                    1d:1b:e7:64:7b:7b:89:73:2b:db:5e:e4:8e:c8:9e:
                    3b:b6:31:52:9e:84:5f:1b:b5:09:37:97:ff:f3:20:
                    36:20:72:26:71:36:d5:3c:08:fa:91:f8:80:19:d8:
                    b7:41:0a:76:5b:72:17:a2:de:fd:6e:85:b5:e6:45:
                    b0:46:de:c4:60:ad:e6:1a:47:ac:b8:82:4e:46:c2:
                    24:d6:3d:39:a9:ed:09:01:88:55:30:9d:8d:f6:e3:
                    d6:91:b9:db:fa:0c:d8:60:1f:c9:dd:05:08:b5:9f:
                    b7:8e:06:7a:d2:51:b0:fc:80:fe:18:d0:27:67:82:
                    04:8d:01:3e:30:e9:19:86:1c:18:7d:b3:e6:ed:ce:
                    c2:e9:82:8d:30:bc:9d:00:69:15:eb:3b:8e:11:c3:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:98:02:92:30:e8:98:7a:3f:ac:c1:1b:7b:fa:c3:ac:87:6c:
         db:9f:75:1a:57:97:d5:eb:78:a0:e8:b9:6d:ec:9e:37:68:a2:
         7c:4a:0a:bd:52:a9:87:61:d3:1c:04:3f:5d:d4:d6:86:e1:84:
         92:17:e1:c9:7d:61:3e:80:49:3e:a1:d1:55:43:12:64:01:4a:
         2c:99:16:93:8f:31:91:a6:50:ed:87:28:5a:84:51:89:b9:82:
         b4:cb:e6:35:21:2a:bf:e0:df:c4:56:13:4a:8e:5a:2b:3d:25:
         16:0f:1b:04:81:a3:0a:58:fb:65:c2:49:ff:0d:d4:fa:8f:78:
         d5:86:9a:15:d2:20:31:7c:01:9e:36:12:8b:ae:32:73:96:f0:
         8a:95:3a:59:33:63:82:e2:90:a3:80:b6:68:d9:e7:7d:9c:62:
         1f:b0:3f:d6:f9:56:9f:00:be:50:0d:d3:86:ab:9c:ee:18:36:
         6e:20:2a:eb:c8:b0:82:f0:ae:37:f0:7a:22:91:c2:e3:9d:78:
         6f:07:54:a8:7f:4f:ab:e1:f1:9a:c8:d7:b7:f3:b9:4d:68:44:
         17:99:3a:b6:ea:80:c7:97:ad:74:97:7d:48:a1:3b:3e:e9:85:
         88:e9:91:e7:09:8e:f8:e8:b9:29:fe:de:22:9e:81:57:f7:19:
         c5:96:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----