Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIxEzvbWUf77qxG4j5_aFKUCzp8.cer
File:                     sIxEzvbWUf77qxG4j5_aFKUCzp8.cer (raw, json)
Hash identifier:          uGsfHG/jqWTWE1QJz5t7sYwlKoOKjN4zS9c7+LHgm08=
Subject key identifier:   B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C11D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 28 Nov 2024 02:04:12 +0000
Certificate not after:    Fri 28 Nov 2025 01:56:32 +0000
Subordinate resources:    AS: 151274
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49437 (0xc11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 28 02:04:12 2024 GMT
            Not After : Nov 28 01:56:32 2025 GMT
        Subject: CN=B08C44CEF6D651FEFBAB11B88F9FDA14A502CE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:c9:20:d2:1d:71:8c:50:5a:dd:f0:a5:f0:
                    4a:47:91:0e:c9:81:6e:f2:97:83:d5:25:99:22:f9:
                    56:9a:98:18:bc:d8:6b:17:d7:c1:fc:7c:c5:82:59:
                    0d:d2:93:af:7c:e9:85:72:d1:26:45:71:11:e1:d3:
                    e6:79:b7:17:ea:2c:81:c1:f6:71:d4:fa:3e:7d:96:
                    7c:f3:7c:bc:fe:81:a9:cf:d9:a9:1e:65:67:60:09:
                    de:92:55:ea:ad:18:ec:67:43:f0:b6:ed:37:07:16:
                    9b:1f:76:af:14:d7:e5:f5:6d:47:78:52:96:51:ce:
                    b0:63:61:a9:92:ef:a4:5d:ef:17:29:e6:77:5d:1b:
                    6e:37:d0:da:8c:db:05:71:cb:f6:5f:d6:9f:33:fd:
                    c4:ba:28:7e:31:e3:54:4e:a3:fd:2e:fd:63:9b:d9:
                    f0:4f:83:6a:c7:20:ad:02:ad:47:4a:03:f3:02:d7:
                    d3:f0:64:27:7f:ec:e4:47:39:6d:b1:89:e2:eb:ea:
                    a3:5b:21:1f:0e:70:09:d9:7b:84:75:4f:3b:69:a4:
                    31:92:9b:dc:23:34:8c:f9:b5:f0:e5:e0:a7:a7:2d:
                    c0:69:25:c0:c3:fb:49:36:34:fd:d0:c6:a2:59:b7:
                    6a:21:1a:18:39:21:64:96:ee:e5:ac:d6:98:9d:e0:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:44:CE:F6:D6:51:FE:FB:AB:11:B8:8F:9F:DA:14:A5:02:CE:9F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/sIxEzvbWUf77qxG4j5_aFKUCzp8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151274

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:b7:19:d4:14:5c:e9:94:f1:27:8b:40:81:61:ef:58:62:
         f8:fb:e9:c1:77:ac:27:37:9b:44:7e:c1:ee:b6:28:ad:e0:ff:
         95:95:25:c7:89:45:44:21:24:70:1d:29:9c:46:a5:1c:5d:cd:
         d8:2c:cc:a5:e7:6e:67:c0:42:74:02:1c:93:88:c3:8d:f9:b3:
         c0:1b:d8:83:7e:9a:2d:f1:d8:51:14:da:91:30:d3:00:6d:76:
         ae:60:27:ac:a3:52:a4:e0:11:98:12:af:97:5e:d1:24:be:aa:
         cc:86:af:87:c9:11:46:8c:f6:1d:71:5d:f0:bd:9a:7f:19:f5:
         43:ce:7b:c4:92:a5:43:aa:a8:68:0a:2e:4c:77:29:99:72:89:
         14:61:60:b3:b2:d7:7e:2a:69:64:48:c0:76:37:3b:80:80:13:
         20:50:52:de:38:26:95:58:b1:4d:16:0b:72:30:eb:c3:b2:45:
         87:3a:90:27:f6:ff:7f:90:5a:b4:e7:91:67:9b:e6:25:09:3e:
         6e:78:a3:69:c3:75:8d:ae:89:b4:64:58:7c:f3:fe:25:04:b9:
         ef:10:94:c7:df:c5:07:8b:fe:b4:26:55:69:12:86:7b:81:db:
         ca:ac:07:45:68:fa:aa:5e:b4:e6:ef:be:82:c3:2c:bd:fb:7c:
         3b:61:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:06 2025 by rpki-client