Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
File:                     FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (raw, json)
Hash identifier:          kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=
Subject key identifier:   FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       65743C802C06BEB5FE90C6C4EE498BD4770A7E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Manifest:                 rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
caRepository:             rsync://rpki.qs.nu/repo/cyntest/2/
Notify URL:               https://rpki.qs.nu/rrdp/notification.xml
Certificate not before:   Mon 07 Apr 2025 14:25:32 +0000
Certificate not after:    Mon 06 Apr 2026 14:30:32 +0000
Subordinate resources:    IP: 2001:67c:1190:555::/64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:74:3c:80:2c:06:be:b5:fe:90:c6:c4:ee:49:8b:d4:77:0a:7e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Apr  7 14:25:32 2025 GMT
            Not After : Apr  6 14:30:32 2026 GMT
        Subject: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:97:31:be:6c:77:50:ba:ad:de:ac:e2:6d:
                    2c:8f:b8:5f:99:76:13:b4:75:61:d1:d6:66:21:55:
                    c4:67:19:d1:f5:fd:48:74:f9:b9:90:5b:99:bf:2b:
                    54:f1:bb:79:91:47:a3:fd:93:48:95:a0:de:72:2a:
                    dd:34:ed:26:3a:a3:02:f7:97:3b:21:80:43:9f:18:
                    0e:f4:b3:d0:ea:3e:50:29:0d:96:1f:05:54:b1:d4:
                    e9:aa:50:30:24:2b:01:47:48:43:fa:53:96:9d:81:
                    b1:04:fc:66:1a:18:ca:7a:97:1a:e1:b2:42:f5:d0:
                    31:8f:e4:9a:f1:05:a4:7e:d5:d5:ec:bf:d3:b7:1b:
                    9e:80:27:1a:4a:8a:dd:c1:93:86:8c:4d:e5:2f:30:
                    94:10:f4:e4:b8:7a:1b:e6:8e:46:d3:4c:13:bf:f4:
                    3e:0e:ea:72:76:5c:50:15:c3:8a:9f:c3:69:aa:dd:
                    98:38:e7:f5:27:46:d9:81:23:70:63:df:5b:8a:76:
                    6a:3f:4a:42:ef:14:a3:01:dd:2d:03:3d:a7:2c:3a:
                    ba:98:5c:c8:f6:7c:e3:10:0b:b9:76:1e:af:57:53:
                    82:74:41:c8:3c:53:b5:90:04:c0:0e:ce:9a:c1:5d:
                    d7:35:15:df:5c:82:a2:50:13:77:04:6a:df:4b:bf:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.qs.nu/repo/cyntest/2/
                RPKI Manifest - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
                RPKI Notify - URI:https://rpki.qs.nu/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190:555::/64

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:7d:9f:3b:06:17:69:06:6a:9c:d5:df:fc:90:06:1c:6a:
         52:40:8e:5f:d9:19:01:44:a0:4e:99:3a:db:34:8f:c0:11:11:
         2e:a9:a8:be:6d:5c:57:f0:53:79:b8:14:4a:1b:f1:83:94:04:
         c7:a2:26:09:52:39:12:71:be:19:c6:75:6a:44:b4:0f:35:3c:
         12:0e:35:fb:7d:e0:1f:e0:14:12:a4:a5:46:f1:6c:66:65:2d:
         62:b0:c4:4f:2d:e8:87:ed:51:36:f9:85:9a:44:55:e3:46:04:
         18:94:29:9d:52:9a:f5:6d:98:03:c1:57:8f:b0:aa:20:a7:48:
         f4:05:b7:9d:66:10:53:4d:5c:02:e6:ad:fa:72:78:0f:ad:66:
         38:ce:05:a5:3b:03:6c:7a:46:a3:0a:2d:89:e4:d8:60:98:b6:
         f4:46:1c:b6:a8:fd:70:fb:c3:b5:9e:bf:77:f5:16:09:78:96:
         dc:57:55:23:10:ca:cf:c3:d0:e9:81:fe:41:b5:d9:61:5e:72:
         ba:6c:c9:30:45:09:c6:bf:01:5f:55:70:d1:58:a7:00:83:29:
         67:60:4c:f5:e7:dd:cb:52:f7:5d:11:e1:b4:47:38:af:4e:87:
         07:67:5b:85:5b:03:0c:8a:8b:9b:af:44:96:fc:b2:5e:d7:db:
         2e:63:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----