Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer
File:                     78739F607E14E11BD03439F7A388E78EDD031A1B.cer (raw, json)
Hash identifier:          mx+Rg5zFdPJxJhFIEQPxfo0iZ8UyVKZ6cZeNrbqPNMw=
Subject key identifier:   78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       036A9ECC58F7E144370D9B6CE23C4BF4538E0F28
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 18:58:58 +0000
Certificate not after:    Fri 10 Apr 2026 19:03:58 +0000
Subordinate resources:    IP: 2a06:1281:9000::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:9e:cc:58:f7:e1:44:37:0d:9b:6c:e2:3c:4b:f4:53:8e:0f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Apr 11 18:58:58 2025 GMT
            Not After : Apr 10 19:03:58 2026 GMT
        Subject: CN=78739F607E14E11BD03439F7A388E78EDD031A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:fc:b6:94:a7:b2:be:a7:7d:22:06:7c:2a:
                    48:af:ad:c6:ad:7a:88:01:f0:60:70:c1:de:c0:63:
                    0f:d5:ea:cf:63:2e:90:04:f2:d4:12:07:ff:f3:15:
                    29:a2:2a:c7:f1:38:83:0d:2a:c4:14:ec:e3:e2:ad:
                    42:e4:55:d6:50:9b:33:b0:b3:7c:05:ba:34:f3:23:
                    fa:7f:0b:d8:c8:bd:12:48:83:a4:d8:d0:aa:c2:f7:
                    c6:a5:d6:bf:47:97:37:1a:4b:c8:aa:b6:60:24:74:
                    ef:6e:c3:80:a3:16:0d:f9:b7:75:8e:c0:01:55:18:
                    31:de:33:73:6c:25:8a:e5:88:a1:3d:50:9c:d2:c1:
                    6e:e2:76:71:d7:72:e0:fc:cc:96:9e:89:97:7f:c4:
                    06:14:8d:f0:48:45:8c:f5:fd:bf:a8:b3:6c:a6:de:
                    b7:d2:14:65:48:9e:4a:a6:dc:f3:2c:67:17:25:73:
                    e8:2e:ac:06:5c:8f:41:39:92:4d:7b:69:64:35:08:
                    74:2e:46:ab:f9:16:d1:64:a7:af:09:32:b3:cb:46:
                    7e:a6:4a:80:45:91:38:90:18:8c:4e:5d:41:45:c9:
                    4d:03:80:70:59:85:90:63:ba:8f:03:68:de:84:45:
                    9f:cc:ea:d2:61:af:95:68:a2:95:0b:19:9a:a2:4a:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:9f:7c:aa:92:a5:63:05:32:5c:59:b5:fd:f2:33:83:f6:
         f2:ec:06:77:8a:71:16:e7:37:42:79:f6:64:52:79:15:ae:4f:
         c6:30:2d:4f:f3:b2:87:11:8d:96:3b:87:de:cf:03:7e:28:05:
         fb:3e:d7:15:8f:03:55:f3:70:29:d9:83:de:b5:b4:7f:29:8b:
         c2:9c:9d:df:c6:d0:69:2f:e2:b2:c7:69:9c:cb:43:21:72:48:
         f2:96:66:42:57:f3:91:02:c0:f9:09:1f:f4:26:7a:51:66:d0:
         3e:8a:e4:19:5a:15:f1:86:b4:95:3b:40:c1:e5:85:43:ae:69:
         3b:83:4f:b4:17:54:3b:50:39:9e:3f:3a:15:2b:4e:99:ad:f1:
         d9:a8:2f:90:e8:7a:da:05:94:d7:9b:8c:6d:19:52:b5:75:2c:
         2d:62:85:76:e7:1f:97:4d:8b:e5:6b:3f:35:3e:40:98:31:e4:
         47:fa:3d:77:e3:8e:45:1f:bc:d0:e7:5f:d3:ae:a2:03:94:26:
         78:bc:a6:9e:35:cc:2e:81:ff:6d:5c:af:2f:2d:c0:c0:4a:22:
         18:4d:68:8d:c2:1d:bc:fa:06:56:30:7b:d4:75:21:97:ab:50:
         ac:ac:59:e3:bf:f4:8b:00:ae:2b:a8:53:e6:ab:4b:05:d3:5b:
         f9:58:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net