Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
File:                     LsLMuD3fv0MzIma3amIhNiFD42U.cer (raw, json)
Hash identifier:          bkjfieoywB8WKgHFrlC/8d1EvhkgtZOPuOIEc4uKzXU=
Subject key identifier:   2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C0C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 26 Nov 2024 02:25:32 +0000
Certificate not after:    Wed 26 Nov 2025 01:04:53 +0000
Subordinate resources:    AS: 151268
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49351 (0xc0c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 26 02:25:32 2024 GMT
            Not After : Nov 26 01:04:53 2025 GMT
        Subject: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:f8:53:67:7b:01:ef:8c:ae:e4:a5:70:71:
                    6d:e9:0c:ec:56:4f:ac:3e:f4:7e:d1:fc:ea:ce:dd:
                    c5:62:fd:da:4d:9b:73:38:96:e2:8f:d4:b6:fe:1c:
                    94:a3:cd:d3:fc:b0:5e:00:93:29:c1:ea:44:5c:9e:
                    4b:a2:47:7e:f5:21:1e:dd:91:97:29:c1:67:c0:6a:
                    55:29:29:5a:b4:02:ab:72:52:8e:39:8f:20:b9:f8:
                    d5:02:51:da:f6:a4:a6:df:7c:61:da:92:91:bf:4a:
                    cd:99:42:b7:33:b4:3b:3a:3f:19:ea:07:d1:b6:06:
                    fa:0c:5c:1e:20:f6:cd:de:0f:86:3e:d6:ec:c3:f2:
                    68:46:87:8f:3e:06:f7:b7:43:fd:bc:09:b6:ab:fc:
                    51:d9:1f:df:1b:7a:f4:91:00:9c:ac:46:41:a7:a4:
                    0b:50:68:3e:09:08:5a:f7:24:bf:f0:2e:cd:59:f5:
                    a4:ee:5e:ea:c9:a8:33:7f:b7:10:f8:47:48:88:76:
                    e6:76:5e:9b:5e:00:25:1b:a5:9a:aa:91:38:9f:67:
                    42:f0:25:df:75:29:83:1e:bd:7f:e1:ad:c4:a2:aa:
                    91:5c:f2:06:85:c1:e5:de:df:83:6a:a9:e5:0c:e8:
                    43:85:d2:f3:32:09:7e:d2:9e:ce:43:de:f5:2a:cb:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151268

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:9a:7a:10:7f:5e:df:fe:bd:70:bd:e1:2f:34:2a:7e:14:
         81:e6:e4:67:d6:23:f5:d8:75:e3:9d:2a:5b:06:9c:d2:af:d8:
         fb:bc:e4:67:69:60:a8:f7:e3:e4:4a:45:26:f7:de:83:50:e7:
         86:df:e9:ad:1d:8a:61:61:bf:56:74:6f:1f:50:35:07:e0:f3:
         cf:93:f0:61:04:51:2b:d7:43:13:ef:22:6a:64:fe:43:40:a7:
         35:a2:48:50:5b:8e:d8:5e:f3:23:97:ca:b7:e5:a2:be:ac:2d:
         6e:1c:04:2b:cc:03:e0:b3:16:2e:52:33:ca:09:4c:0d:80:08:
         bb:8d:4d:45:69:f4:8e:c3:f6:f6:82:60:48:87:05:67:10:99:
         7e:34:f2:9e:5d:a2:31:47:86:51:80:68:43:63:1e:9e:53:1a:
         75:f3:3e:9a:48:0a:37:53:d0:dd:07:bc:42:75:09:b0:68:5c:
         01:e1:e4:6a:97:c5:04:ea:67:93:8e:7f:48:08:00:9f:85:c0:
         4e:8f:61:87:65:11:f1:50:1d:d2:2f:89:59:ed:e9:f6:0a:08:
         7e:b4:8b:73:69:9b:d5:3c:1a:8c:7d:49:52:1f:cb:80:28:9f:
         8b:22:ff:18:47:fc:93:04:18:35:a9:16:35:d6:fd:9b:22:b2:
         52:11:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:22 2025 by rpki-client