Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer
File:                     FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer (raw, json)
Hash identifier:          Ty83M9CNev48Ps7o2A3vylv7qt1oes3B+PGnipD7LIc=
Subject key identifier:   FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       38EB09575529EA32ADA5A87FC6696C656C9111EF
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
caRepository:             rsync://rpki.co/repo/Matt/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:43:23 +0000
Certificate not after:    Mon 20 May 2024 21:48:23 +0000
Subordinate resources:    IP: 2a12:dd47:b000::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:eb:09:57:55:29:ea:32:ad:a5:a8:7f:c6:69:6c:65:6c:91:11:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 22 21:43:23 2023 GMT
            Not After : May 20 21:48:23 2024 GMT
        Subject: CN=FDA07574EA362EFB2E46B3038EE05A6ACA0BF301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:02:db:89:fe:f1:d9:27:33:e7:7c:ca:2a:
                    22:ea:21:8d:65:1b:dc:d1:a7:33:3c:0a:51:17:08:
                    55:6a:07:12:e9:43:3e:c0:3c:e4:38:68:a6:ad:c7:
                    a8:54:b8:82:4d:a0:4a:b3:c4:20:3e:47:2d:98:9c:
                    d4:ee:64:02:55:91:a8:8a:41:8b:46:47:ff:f6:dd:
                    67:0d:80:45:ff:c7:b6:b1:8b:84:1e:e0:65:ee:47:
                    69:0b:35:29:93:29:55:4c:ad:96:2d:a2:7b:a0:3a:
                    89:7d:54:4e:53:20:89:cb:36:3c:30:96:a1:69:81:
                    22:eb:6d:43:c8:d9:d5:f4:78:af:0f:09:6c:32:25:
                    a9:32:80:d7:11:4c:db:e4:7d:5f:f5:17:17:c7:22:
                    fc:4e:2c:78:f8:cd:ff:42:08:f1:f3:ae:70:22:48:
                    3e:51:1e:90:cd:db:00:42:eb:b8:05:69:89:ec:b4:
                    e4:4e:1c:ff:d8:0a:76:32:2b:af:99:ac:70:20:2f:
                    8d:65:d7:6a:c8:83:c7:64:49:05:1f:d8:9b:5a:9a:
                    01:14:90:56:17:cb:54:f5:42:6c:ef:58:4c:8b:22:
                    bc:61:79:67:eb:38:ab:2b:7e:21:a4:e7:6b:31:bb:
                    76:7f:59:58:48:3e:61:45:5e:f0:47:25:42:81:7c:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Matt/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:29:b4:d8:f1:6c:78:27:1c:9f:55:a7:e0:e6:9e:a1:4f:
         e4:82:05:59:ec:73:25:05:00:21:67:29:23:cd:eb:11:4e:20:
         0c:0f:67:2f:51:01:64:7f:61:52:dc:b9:a3:75:ea:76:f3:3e:
         7d:db:27:a0:9c:81:bc:ea:32:a7:d5:c6:f0:47:17:3d:86:d8:
         43:b5:48:d2:52:06:ae:a1:c9:af:81:23:ba:05:ee:40:87:51:
         29:cf:df:b7:62:ad:5f:1c:bc:25:d5:6d:cd:c2:68:57:90:f4:
         e7:ef:6f:02:2a:ba:35:1a:38:8b:cf:ee:f7:1f:da:6d:ba:b5:
         f5:28:15:40:29:04:b9:06:66:34:0d:1e:ab:9d:15:7d:ab:4a:
         20:71:0b:ca:27:80:6f:dd:db:7c:f5:ea:08:bb:64:83:52:d2:
         cb:02:99:50:97:72:f4:13:44:bd:32:54:87:4e:19:26:30:e5:
         58:08:24:33:9a:c3:9f:ef:28:6b:cf:42:d2:65:f9:19:b9:8c:
         3a:0c:56:17:e8:36:d0:3e:f5:e2:8c:75:76:91:b3:99:40:d5:
         f3:5e:fe:bd:ee:9f:2f:03:88:fd:1a:37:40:08:68:a7:48:cd:
         17:74:e8:74:04:46:87:99:22:84:a8:bb:14:3c:31:a2:42:6c:
         16:30:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 01:08:01 2025 by rpki-client