Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
File:                     9788ACA0CB104D300847BED012FAF8E3269E8A01.cer (raw, json)
Hash identifier:          aJC4NyaCLV3TkIuCi5CfJcnDhN9wYj/aTS5vO8XigwE=
Subject key identifier:   97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7C2A982A9C9F27DE99CF11CA39CB24C3C1E8281E
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
caRepository:             rsync://rpki.co/repo/John/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:42:39 +0000
Certificate not after:    Mon 20 May 2024 21:47:39 +0000
Subordinate resources:    IP: 2a12:dd47:3e00::/40
                          IP: 2a12:dd47:df00::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2a:98:2a:9c:9f:27:de:99:cf:11:ca:39:cb:24:c3:c1:e8:28:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 22 21:42:39 2023 GMT
            Not After : May 20 21:47:39 2024 GMT
        Subject: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:02:af:d6:37:85:13:fc:de:f8:8f:83:8b:
                    73:c6:ef:a4:5e:34:ad:80:48:18:7d:c2:75:ff:62:
                    0a:f1:14:81:1a:33:f3:d0:4c:1a:ac:1b:46:a0:39:
                    d5:b6:0e:95:83:fd:b6:4d:2f:b5:b0:cf:42:35:3d:
                    a5:4e:2f:8f:0e:67:4f:02:7f:05:b3:ea:d0:36:d4:
                    aa:c2:70:66:ac:db:81:a2:1d:b1:0e:0b:c8:3e:a5:
                    6c:75:a5:6c:d3:12:24:f7:28:b8:85:c6:ae:ba:47:
                    02:00:18:5d:28:74:eb:41:dd:ac:cc:b0:db:4d:1a:
                    0c:c5:58:75:01:5c:cc:a6:30:c2:36:58:cc:0d:af:
                    07:09:85:fd:3d:a4:a8:d9:16:03:6a:90:c0:02:23:
                    33:c5:14:c9:b5:0a:31:72:50:fa:1b:1a:78:1d:4c:
                    72:64:d7:a7:10:b3:b1:35:80:4d:84:ef:f3:bb:55:
                    e6:a9:95:05:8b:fd:ee:d0:44:99:8a:f2:0c:f2:ce:
                    8f:f1:d2:0a:a3:77:32:be:1f:ff:3c:37:b1:b8:08:
                    e1:38:59:6b:71:b9:32:35:b7:f4:87:e2:68:8c:3a:
                    a2:f8:ed:76:ec:bb:6a:d3:78:bf:8f:fd:cd:4d:5e:
                    8c:10:f7:7e:3a:aa:2a:ed:1a:45:46:46:f6:a7:48:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/John/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3e00::/40
                  2a12:dd47:df00::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:50:92:3f:db:8d:19:56:c6:8a:41:63:fc:05:1b:4b:37:ef:
         ac:ad:30:f0:bf:7d:a4:f1:39:cf:d4:ba:ce:3c:3b:ed:ed:61:
         ec:5d:a5:e3:b0:6d:c5:0a:68:9c:fe:ca:b3:83:0f:1b:3f:a0:
         83:79:b2:ba:13:3a:81:f5:0b:5b:46:1a:3f:02:54:64:70:54:
         27:37:e5:89:45:0f:41:4a:82:9f:f9:ba:9a:7b:e4:5c:d3:0d:
         80:df:24:fb:88:5a:42:06:d2:bb:de:0d:a2:88:1d:85:ee:79:
         cb:13:e0:86:71:b2:3c:3e:a0:00:32:c5:e5:61:f4:6c:00:75:
         7d:68:fc:11:27:fb:2e:d7:c5:f2:bf:b2:67:44:f0:01:d4:39:
         b3:7d:d9:bd:3b:d2:14:3a:66:27:39:25:08:7d:db:7b:2e:cb:
         8a:05:e2:45:41:9c:47:f5:d1:64:a4:9e:85:ed:49:1b:57:b8:
         65:6a:d5:38:fb:3e:2f:8e:26:e4:50:e9:f3:5f:9d:15:0c:16:
         db:12:45:9a:53:18:7a:27:71:fd:19:ad:25:48:25:19:3d:39:
         39:81:77:06:b7:5a:00:05:6c:7d:5b:15:ab:39:35:0b:39:9c:
         74:8e:64:e8:a7:16:70:06:6a:91:c2:12:57:97:f5:53:9e:bc:
         bf:04:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 01:19:03 2025 by rpki-client