Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
File:                     F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer (raw, json)
Hash identifier:          1m0kYwD3mYbBVC48zxoF18Uoz8A2l1GmlwUu5GiXm/w=
Subject key identifier:   F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       38C6315A5E57B144C3B8F643FF00777621E55FCD
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest:                 rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
caRepository:             rsync://rpki.cc/repo/MythicalKitten/12/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Fri 20 Sep 2024 00:01:57 +0000
Certificate not after:    Fri 19 Sep 2025 00:06:57 +0000
Subordinate resources:    IP: 2a07:54c1::/36
                          IP: 2a07:54c1:3200::/40
                          IP: 2a07:54c1:6000::/36
                          IP: 2a07:54c1:8000::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c6:31:5a:5e:57:b1:44:c3:b8:f6:43:ff:00:77:76:21:e5:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 20 00:01:57 2024 GMT
            Not After : Sep 19 00:06:57 2025 GMT
        Subject: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:7d:34:fe:64:49:c7:95:85:ae:fe:f4:3f:
                    69:9b:cb:51:5e:59:6e:27:43:24:92:50:97:39:6d:
                    ac:b8:d3:7d:52:2e:de:b8:a3:49:16:92:86:df:2c:
                    dd:54:0c:af:de:65:1a:fb:94:61:7a:94:8e:98:ad:
                    04:68:2d:d0:58:74:f5:42:72:9d:2f:58:c0:cb:5f:
                    e6:f8:9a:32:73:8a:45:6e:7f:36:4d:a0:fb:69:02:
                    97:f4:0a:27:4b:bd:95:a7:5e:35:1c:d7:ad:d5:de:
                    55:c5:87:98:ca:ca:00:61:72:d8:f7:ce:b8:b1:f7:
                    06:c8:e9:b1:07:50:38:69:d3:10:e1:55:7c:7e:44:
                    63:38:01:ac:43:6a:98:71:7a:ed:95:68:a5:69:10:
                    d9:70:0d:48:76:5a:8a:3a:fe:60:95:03:ed:e5:05:
                    a3:e0:4a:2c:b3:8d:a5:e4:98:d6:31:f8:3a:0f:f1:
                    ba:f7:8b:ed:e7:3f:a6:ce:1a:3c:bf:f7:16:9e:1b:
                    f3:e0:e8:02:27:23:50:45:d9:1d:cb:43:13:99:dd:
                    40:32:29:7d:c0:d2:c4:ee:50:c6:17:f5:c5:27:a3:
                    7b:9f:a9:fb:ba:2b:e1:66:1b:f7:d6:c3:94:53:ad:
                    64:ad:af:48:1c:be:50:53:5a:59:b0:35:91:79:ca:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/12/
                RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36
                  2a07:54c1:3200::/40
                  2a07:54c1:6000::/36
                  2a07:54c1:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:9b:68:d0:f2:43:2a:98:a8:88:96:38:1c:b5:d1:b9:53:
         45:a5:91:d4:e4:74:6e:7d:7f:75:33:a6:0e:24:2b:0a:11:92:
         f9:19:4c:0f:7b:33:6e:65:db:68:55:b2:06:dd:29:a8:04:fb:
         60:98:f0:59:7a:58:35:af:94:f8:cd:ec:14:e2:99:0a:8a:65:
         6a:b0:d0:f0:c6:80:97:0d:c5:12:a3:75:2c:e1:db:2e:79:d3:
         f1:f5:52:9d:4d:f5:01:d4:fd:d5:02:97:e3:3e:d2:13:46:be:
         bc:90:44:18:68:ca:95:76:6e:ae:89:da:49:68:24:71:4e:77:
         24:3e:04:16:21:8c:c4:ab:10:4d:63:9c:9c:e6:8d:46:85:d0:
         17:19:43:6c:ec:46:ac:68:ca:a1:36:32:17:91:a4:2f:47:ac:
         49:35:d1:a9:e7:8f:47:df:44:17:e9:e8:d6:33:49:2f:e1:69:
         96:09:14:38:04:ba:88:8a:55:d3:77:8d:17:a9:7d:4b:68:18:
         26:43:84:97:08:d1:e5:ee:e5:0b:e7:7c:6c:e4:e4:eb:f3:46:
         da:ae:ae:75:fb:86:d9:6c:47:95:35:93:63:cf:8a:37:75:9e:
         4f:6c:62:12:3c:d7:8d:c0:4a:d7:b0:28:77:c8:23:3b:f3:8d:
         6a:e3:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----