Certificate

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer
File:                     4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer (raw, json)
Hash identifier:          UFv3N0rpEejMpR3u3+RAIK3gLenCzAqos36FHmSpUso=
Subject key identifier:   4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       5832773999A66F875B88A045EDC2FE6EF9F8C903
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
CRL Distribution Point:   rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
Manifest:                 rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft
caRepository:             rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/
Notify URL:               https://krill.proxy-arp.network/rrdp/notification.xml
Certificate not before:   Mon 02 Nov 2026 16:40:51 +0000
Certificate not after:    Mon 01 Nov 2027 16:45:51 +0000
Subordinate resources:    IP: 2a13:c8c4:fc00::/39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:32:77:39:99:a6:6f:87:5b:88:a0:45:ed:c2:fe:6e:f9:f8:c9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Nov  2 16:40:51 2026 GMT
            Not After : Nov  1 16:45:51 2027 GMT
        Subject: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:83:ee:8f:e2:39:ee:a5:fe:de:01:55:8d:
                    a2:28:e8:25:7f:78:3e:d6:07:e1:47:db:32:77:69:
                    3c:54:19:7a:29:0d:ed:b2:4d:69:27:16:fd:39:53:
                    6d:cc:a4:cd:b4:a3:7e:09:64:c1:c8:62:c5:b2:70:
                    b0:0f:e8:29:e7:1b:56:7c:57:a4:ec:76:8b:2f:f8:
                    da:6d:b4:ab:97:f4:c2:e9:eb:33:69:45:64:08:81:
                    94:ff:37:3e:f6:73:58:95:de:7e:19:69:d5:ac:d3:
                    fb:9a:23:be:df:62:7a:ed:5f:38:8c:2d:86:a6:2f:
                    8d:d2:ee:f6:f6:51:a5:a5:0d:e1:70:fc:1f:4e:8b:
                    ec:ba:ec:21:82:c2:ff:cb:c6:c6:a7:d1:5b:46:ff:
                    f3:8e:c9:eb:bc:0a:f6:0a:00:4a:ce:be:af:2e:86:
                    2a:ce:b9:7c:24:e0:87:cd:90:19:5f:39:41:59:9d:
                    29:8c:93:6f:30:7c:2c:77:d6:75:ad:32:3e:6c:51:
                    cd:f0:d5:14:0f:ba:4f:18:32:d3:fc:cf:1c:74:da:
                    4a:60:ab:58:a2:a4:42:ff:d7:ea:bb:30:5c:a2:7c:
                    e5:5d:2b:c8:39:76:bd:54:11:91:23:cf:99:e9:2b:
                    27:62:82:24:3f:36:76:be:7e:5b:9c:df:8a:57:dd:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/
                RPKI Manifest - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft
                RPKI Notify - URI:https://krill.proxy-arp.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:fc00::/39

    Signature Algorithm: sha256WithRSAEncryption
         19:35:d1:87:3e:2e:00:e2:60:02:d6:b5:43:83:34:a3:18:1c:
         f6:1e:ab:f8:01:9b:e3:66:71:a0:e9:69:38:2b:3f:11:6d:45:
         3c:f0:64:d5:97:82:ba:64:b8:3b:4e:d5:42:24:ac:c1:4e:3d:
         1e:ed:52:90:2b:ab:d3:21:8f:d8:5d:06:a9:9c:0b:e8:eb:bd:
         52:85:bf:d8:f0:08:6c:d5:43:f4:22:52:8f:6b:f8:81:2e:b5:
         65:19:ea:90:ae:a8:f1:f7:9d:1c:32:8d:9b:5a:ab:77:0c:c8:
         d5:fe:bb:82:21:54:93:e7:af:36:7f:b4:da:06:bb:9b:a8:bd:
         f6:a1:13:5b:c7:5e:eb:85:29:0d:51:09:48:c3:74:5e:a3:c2:
         20:33:7f:70:3b:70:29:bf:1d:28:62:0a:e2:87:46:34:43:ba:
         44:e4:20:62:70:07:b2:5f:75:45:01:f7:f2:96:a0:1a:74:12:
         85:c0:b7:d3:77:d1:1c:71:98:d2:c3:94:20:87:06:d8:22:0a:
         15:aa:58:4f:60:13:ad:b8:19:de:1b:53:ed:44:17:9b:f5:1c:
         51:64:97:66:45:ba:43:95:4d:6a:c6:2a:06:5b:f2:9e:85:9b:
         ad:51:f4:50:4d:95:c3:ce:f5:58:b3:a7:e0:8c:02:ce:8d:2c:
         d9:17:fe:bb
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUWDJ3OZmmb4dbiKBF7cL+bvn4yQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB
NTVGQTQxMTAeFw0yNjExMDIxNjQwNTFaFw0yNzExMDExNjQ1NTFaMDMxMTAvBgNV
BAMTKDRFQzJFQkVFRjFENDFDMzk2RDk2QTNBQzU4NDE0RTlFODIyODUxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqoPuj+I57qX+3gFVjaIo6CV/
eD7WB+FH2zJ3aTxUGXopDe2yTWknFv05U23MpM20o34JZMHIYsWycLAP6CnnG1Z8
V6Tsdosv+NpttKuX9MLp6zNpRWQIgZT/Nz72c1iV3n4ZadWs0/uaI77fYnrtXziM
LYamL43S7vb2UaWlDeFw/B9Oi+y67CGCwv/Lxsan0VtG//OOyeu8CvYKAErOvq8u
hirOuXwk4IfNkBlfOUFZnSmMk28wfCx31nWtMj5sUc3w1RQPuk8YMtP8zxx02kpg
q1iipEL/1+q7MFyifOVdK8g5dr1UEZEjz5npKydigiQ/Nna+fluc34pX3d2ZAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROwuvu8dQcOW2W
o6xYQU6egihRezAfBgNVHSMEGDAWgBQedElGg9jSpOApqtRXOSjSpV+kETAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh
ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1
NzM5MjhEMkE1NUZBNDExLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi80LzFFNzQ0OTQ2
ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEuY2VyMIH9BggrBgEFBQcB
CwSB8DCB7TA9BggrBgEFBQcwBYYxcnN5bmM6Ly9yc3luYy5wcm94eS1hcnAubmV0
d29yay9yZXBvL2JncDQzLXUyMS8xLzBpBggrBgEFBQcwCoZdcnN5bmM6Ly9yc3lu
Yy5wcm94eS1hcnAubmV0d29yay9yZXBvL2JncDQzLXUyMS8xLzRFQzJFQkVFRjFE
NDFDMzk2RDk2QTNBQzU4NDE0RTlFODIyODUxN0IubWZ0MEEGCCsGAQUFBzANhjVo
dHRwczovL2tyaWxsLnByb3h5LWFycC5uZXR3b3JrL3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYBKhPIxPwwDQYJKoZIhvcNAQELBQADggEBABk10Yc+LgDiYALW
tUODNKMYHPYeq/gBm+NmcaDpaTgrPxFtRTzwZNWXgrpkuDtO1UIkrMFOPR7tUpAr
q9Mhj9hdBqmcC+jrvVKFv9jwCGzVQ/QiUo9r+IEutWUZ6pCuqPH3nRwyjZtaq3cM
yNX+u4IhVJPnrzZ/tNoGu5uovfahE1vHXuuFKQ1RCUjDdF6jwiAzf3A7cCm/HShi
CuKHRjRDukTkIGJwB7JfdUUB9/KWoBp0EoXAt9N30RxxmNLDlCCHBtgiChWqWE9g
E624Gd4bU+1EF5v1HFFkl2ZFukOVTWrGKgZb8p6Fm61R9FBNlcPO9Vizp+CMAs6N
LNkX/rs=
-----END CERTIFICATE-----