Certificate

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/86760B61C442883AE7965D68D1D7AA8988B7746F.cer
File:                     86760B61C442883AE7965D68D1D7AA8988B7746F.cer (raw, json)
Hash identifier:          LhlR4eMkwBdTzxdzwFzB1iNQF7i4ZfUXWdnRD/ykGOU=
Subject key identifier:   86:76:0B:61:C4:42:88:3A:E7:96:5D:68:D1:D7:AA:89:88:B7:74:6F
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       1BBB2B7E753FD7CAFE541C9AB5CD97D43D1F8E02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Manifest:                 rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/1/86760B61C442883AE7965D68D1D7AA8988B7746F.mft
caRepository:             rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/1
Notify URL:               https://child.rov.koenvanhove.nl/rrdp/notification.xml
Certificate not before:   Sat 16 Jul 2022 13:15:22 +0000
Certificate not after:    Sat 15 Jul 2023 13:20:22 +0000
Subordinate resources:    IP: 203.119.21.123/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:2b:7e:75:3f:d7:ca:fe:54:1c:9a:b5:cd:97:d4:3d:1f:8e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 16 13:15:22 2022 GMT
            Not After : Jul 15 13:20:22 2023 GMT
        Subject: CN=86760B61C442883AE7965D68D1D7AA8988B7746F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:bc:8e:73:64:18:c9:ea:75:81:3e:fe:3c:
                    08:a7:14:4e:9b:58:27:7f:bf:34:aa:2c:2c:9d:f9:
                    34:60:5a:04:12:87:77:13:12:09:fb:01:92:5c:ef:
                    cb:99:9b:83:d3:79:4e:f6:b7:97:fc:63:48:d2:3c:
                    8c:39:bf:8e:aa:fb:66:39:48:27:0f:67:30:29:3b:
                    b2:b9:2a:3f:27:84:fb:bd:65:f0:98:21:65:ed:cd:
                    a0:db:eb:67:92:5b:f1:91:2d:e1:36:1f:95:d2:e9:
                    e2:17:b2:8f:c8:2d:cc:79:0a:8d:89:38:64:29:4c:
                    df:1a:d4:48:40:fc:8f:dd:77:8e:52:d1:54:df:79:
                    94:d1:a1:f0:91:38:21:8a:00:f3:8d:c5:d8:c6:19:
                    98:10:37:3e:19:dc:50:ef:a6:57:1c:08:fc:c2:c2:
                    e7:1e:19:37:16:e4:86:38:5e:2e:5e:cc:da:a7:59:
                    06:39:06:49:96:78:c5:53:cc:87:e2:2a:f3:52:76:
                    61:07:76:e7:2b:61:22:78:24:62:9a:4b:a4:d4:ec:
                    b1:1e:0e:43:2a:a6:f4:ad:99:c8:86:0c:9c:3f:be:
                    bb:56:37:6b:c4:25:63:58:71:97:2c:8e:3f:17:61:
                    ed:d0:45:3a:41:5a:ba:8f:bc:b4:57:e9:27:cf:1f:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:76:0B:61:C4:42:88:3A:E7:96:5D:68:D1:D7:AA:89:88:B7:74:6F
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                CA Repository - URI:rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/1
                RPKI Manifest - URI:rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/1/86760B61C442883AE7965D68D1D7AA8988B7746F.mft
                RPKI Notify - URI:https://child.rov.koenvanhove.nl/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.123/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:77:a6:a9:43:62:d4:17:56:0c:a1:09:4f:75:d4:5a:70:
         24:95:c2:e5:36:97:57:f0:e1:e0:9e:94:1b:00:ed:c5:a7:e5:
         2b:90:bd:1b:db:de:dd:0c:c3:aa:f6:83:d6:84:3a:99:89:21:
         09:2c:84:65:1e:8c:1a:5c:e6:5b:1b:98:3a:fb:db:01:03:38:
         f4:81:9b:f3:68:ff:8a:3f:50:21:7e:c7:ca:68:52:8f:af:d4:
         63:e2:d8:98:39:60:2e:db:d7:3c:1e:37:a7:1c:4f:ee:43:1d:
         06:ce:1a:b3:3b:5a:71:5d:a1:6b:ea:5e:54:d8:5f:4d:b1:84:
         01:70:6a:f1:52:e9:47:11:d0:61:9a:de:87:39:e6:d8:0d:3c:
         67:a9:a1:b1:59:56:eb:8d:6e:cb:0c:18:ec:5f:4f:10:37:b4:
         af:1d:79:e9:8f:bc:86:b9:a1:da:1c:d1:c5:6c:9c:3f:2f:b0:
         d4:64:f1:50:52:05:54:a3:fb:f9:70:b0:6e:15:2a:7a:43:08:
         81:e5:52:29:c9:de:88:e0:36:a4:ce:55:1f:35:24:93:ab:62:
         e5:aa:cc:67:05:81:48:99:e0:85:a2:ec:e8:a2:5b:14:30:be:
         6d:dc:e4:58:96:20:98:8a:02:11:b8:e3:f9:cb:24:f7:14:e3:
         09:b7:b3:c3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUG7srfnU/18r+VByatc2X1D0fjgIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREE2MTMwMDAwMTEwLwYDVQQFEyhDMUY3NDI0Rjc3
RkJGNjY5RkI3NTBDNkRDN0I2NDlDNTk2OURDRDU1MB4XDTIyMDcxNjEzMTUyMloX
DTIzMDcxNTEzMjAyMlowMzExMC8GA1UEAxMoODY3NjBCNjFDNDQyODgzQUU3OTY1
RDY4RDFEN0FBODk4OEI3NzQ2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+YvI5zZBjJ6nWBPv48CKcUTptYJ3+/NKosLJ35NGBaBBKHdxMSCfsBklzv
y5mbg9N5Tva3l/xjSNI8jDm/jqr7ZjlIJw9nMCk7srkqPyeE+71l8JghZe3NoNvr
Z5Jb8ZEt4TYfldLp4heyj8gtzHkKjYk4ZClM3xrUSED8j913jlLRVN95lNGh8JE4
IYoA843F2MYZmBA3PhncUO+mVxwI/MLC5x4ZNxbkhjheLl7M2qdZBjkGSZZ4xVPM
h+Iq81J2YQd25ythIngkYppLpNTssR4OQyqm9K2ZyIYMnD++u1Y3a8QlY1hxlyyO
Pxdh7dBFOkFauo+8tFfpJ88fkzkCAwEAAaOCAqcwggKjMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIZ2C2HEQog655ZdaNHXqomIt3RvMB8GA1UdIwQYMBaAFMH3
Qk93+/Zp+3UMbce2ScWWnc1VMA4GA1UdDwEB/wQEAwIBBjByBgNVHR8EazBpMGeg
ZaBjhmFyc3luYzovL3BhcmVudC5yb3Yua29lbnZhbmhvdmUubmwvcmVwby9Lb2Vu
dmFuSG92ZS8xL0MxRjc0MjRGNzdGQkY2NjlGQjc1MEM2REM3QjY0OUM1OTY5RENE
NTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dmZENUM2Y3OW1uN2RReHR4N1pKeFphZHpWVS5jZXIwggEOBggrBgEF
BQcBCwSCAQAwgf0wRAYIKwYBBQUHMAWGOHJzeW5jOi8vY2hpbGQucm92LmtvZW52
YW5ob3ZlLm5sL3JlcG8vS29lbnZhbkhvdmVDaGlsZC8xMHEGCCsGAQUFBzAKhmVy
c3luYzovL2NoaWxkLnJvdi5rb2VudmFuaG92ZS5ubC9yZXBvL0tvZW52YW5Ib3Zl
Q2hpbGQvMS84Njc2MEI2MUM0NDI4ODNBRTc5NjVENjhEMUQ3QUE4OTg4Qjc3NDZG
Lm1mdDBCBggrBgEFBQcwDYY2aHR0cHM6Ly9jaGlsZC5yb3Yua29lbnZhbmhvdmUu
bmwvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDLdxV7MA0GCSqGSIb3DQEB
CwUAA4IBAQClHnemqUNi1BdWDKEJT3XUWnAklcLlNpdX8OHgnpQbAO3Fp+UrkL0b
297dDMOq9oPWhDqZiSEJLIRlHowaXOZbG5g6+9sBAzj0gZvzaP+KP1AhfsfKaFKP
r9Rj4tiYOWAu29c8HjenHE/uQx0GzhqzO1pxXaFr6l5U2F9NsYQBcGrxUulHEdBh
mt6HOebYDTxnqaGxWVbrjW7LDBjsX08QN7SvHXnpj7yGuaHaHNHFbJw/L7DUZPFQ
UgVUo/v5cLBuFSp6QwiB5VIpyd6I4DakzlUfNSSTq2LlqsxnBYFImeCFouzoolsU
ML5t3ORYliCYigIRuOP5yyT3FOMJt7PD
-----END CERTIFICATE-----