Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f469b48cd1f2d148fd0796656c36ed6902dbd22c9a2.cer
File:                     7fd6a57f469b48cd1f2d148fd0796656c36ed6902dbd22c9a2.cer (raw, json)
Hash identifier:          2TrDflrSl5H1H6GvsWlA8xKgtjanl9kPB9YCyzNBiko=
Subject key identifier:   76:EF:D7:82:2D:12:E8:01:B3:3C:FD:38:BF:1A:E4:0B:E8:D5:B5:6A
Authority key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1
Certificate issuer:       /CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
Certificate serial:       010D0C9F4328583E1873B0F0AAF0C5CA36D8CF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/76EFD7822D12E801B33CFD38BF1AE40BE8D5B56A.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Wed 01 Jun 2022 14:30:01 +0000
Certificate not after:    Tue 03 Sep 2024 14:30:01 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 2602:ff62::/36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:18:73:b0:f0:aa:f0:c5:ca:36:d8:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
        Validity
            Not Before: Jun  1 14:30:01 2022 GMT
            Not After : Sep  3 14:30:01 2024 GMT
        Subject: CN=7fd6a57f469b48cd1f2d148fd0796656c36ed6902dbd22c9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:d8:ba:e5:9c:a5:56:a2:a0:b0:1a:c5:8c:
                    97:9d:2f:e8:ee:36:28:3f:7a:b0:80:e2:71:0f:c4:
                    1b:ed:06:86:e2:06:b2:45:3c:37:d4:0b:65:89:16:
                    53:09:b1:2c:82:c3:be:21:9e:50:48:d1:a2:7a:94:
                    66:3f:8e:85:bc:6a:e5:63:8e:b4:2c:51:fd:b4:0f:
                    c7:82:79:3b:f0:d2:0e:33:da:ad:26:6e:75:f8:f7:
                    28:64:06:0c:8f:e4:c1:bb:8d:92:c1:2a:be:63:14:
                    cb:1a:a4:10:04:20:90:38:fc:cf:97:f0:a3:af:56:
                    7b:08:67:9f:23:e3:f6:d4:c7:96:ec:fa:c0:b6:c9:
                    6f:28:7b:74:c8:64:3f:ae:00:f8:ca:75:58:1c:d2:
                    a2:42:94:18:73:2e:69:d3:dd:d5:b0:9f:98:8e:bc:
                    bf:d0:ed:e2:f1:34:2a:71:38:c4:51:ba:e0:71:c9:
                    4e:17:be:83:be:c9:4a:30:87:2a:a8:5f:eb:c1:7e:
                    e8:0c:ba:17:d9:5d:64:8a:31:fd:9e:23:f3:95:be:
                    4a:0f:34:67:10:26:6d:10:9d:3c:75:68:83:4c:82:
                    a8:93:ac:fd:22:eb:e7:54:49:9e:e8:e2:ce:fd:bb:
                    68:58:eb:39:38:ca:db:08:7a:ef:cd:7c:fe:d5:26:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EF:D7:82:2D:12:E8:01:B3:3C:FD:38:BF:1A:E4:0B:E8:D5:B5:6A
            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/76EFD7822D12E801B33CFD38BF1AE40BE8D5B56A.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:c8:3b:f3:df:03:f0:8c:fe:5b:42:03:68:c0:7e:a3:67:
         5d:8e:a5:f3:6d:59:d1:30:fa:55:e3:56:97:6e:84:f9:b6:38:
         1f:d2:27:8f:5c:70:2f:66:fe:c2:f5:2e:cb:5a:90:88:8b:32:
         3b:38:17:b5:6a:34:93:08:97:32:e7:54:1e:82:1e:50:c6:d3:
         bf:1e:83:8c:b8:f6:c6:9f:1d:30:e3:0e:97:be:aa:5d:d3:eb:
         dd:88:ee:f7:3f:19:c4:4c:b5:f3:83:df:d4:0f:90:4e:d8:72:
         29:ba:eb:32:20:1b:53:21:6e:62:88:5c:cd:e0:fe:da:7d:d5:
         78:4c:fa:39:f0:17:ac:0d:4d:38:59:ed:a2:78:d1:c7:0f:23:
         ff:19:77:01:f0:f2:1c:24:e4:21:45:0e:9d:6f:0c:6d:33:c9:
         a8:46:11:24:37:f3:b7:67:5f:e7:82:d3:2a:a4:68:f4:6b:6c:
         7e:66:8d:87:33:ce:81:a9:c3:6a:e0:69:91:8b:38:0b:a1:10:
         ed:18:7a:6d:cc:d0:67:55:d5:1e:6c:eb:9d:e5:b4:49:b4:9b:
         42:c2:7c:7f:36:ab:e3:cc:1b:0f:b0:a9:8e:24:ca:99:03:23:
         33:b5:6f:76:18:11:b3:04:0c:55:0e:99:a8:f4:2d:28:d2:15:
         ed:17:86:62
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWD4Yc7DwqvDFyjbYz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU1NzlmNWItZWM3Ni00NTdiLTk5ZDUtNDY2YzdlNGZl
ZmNjMB4XDTIyMDYwMTE0MzAwMVoXDTI0MDkwMzE0MzAwMVowPTE7MDkGA1UEAxMy
N2ZkNmE1N2Y0NjliNDhjZDFmMmQxNDhmZDA3OTY2NTZjMzZlZDY5MDJkYmQyMmM5
YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwdi65ZylVqKgsBrF
jJedL+juNig/erCA4nEPxBvtBobiBrJFPDfUC2WJFlMJsSyCw74hnlBI0aJ6lGY/
joW8auVjjrQsUf20D8eCeTvw0g4z2q0mbnX49yhkBgyP5MG7jZLBKr5jFMsapBAE
IJA4/M+X8KOvVnsIZ58j4/bUx5bs+sC2yW8oe3TIZD+uAPjKdVgc0qJClBhzLmnT
3dWwn5iOvL/Q7eLxNCpxOMRRuuBxyU4XvoO+yUowhyqoX+vBfugMuhfZXWSKMf2e
I/OVvkoPNGcQJm0QnTx1aINMgqiTrP0i6+dUSZ7o4s79u2hY6zk4ytsIeu/NfP7V
Jj5RAgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUdu/Xgi0S6AGzPP04vxrkC+jVtWow
ggErBggrBgEFBQcBCwSCAR0wggEZMFUGCCsGAQUFBzAFhklyc3luYzovL3IubWFn
ZWxsYW4uaXB4by5jb20vcmVwby85ZThkMWYyNi1mOWRjLTQzOWYtOTEzMy1hZDU0
NjVkYzM1ZDUtNC8zMIGCBggrBgEFBQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlw
eG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1
LTQvMy83NkVGRDc4MjJEMTJFODAxQjMzQ0ZEMzhCRjFBRTQwQkU4RDVCNTZBLm1m
dDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25v
dGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHO
oIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZl
MDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmU1NzlmNWItZWM3Ni00
NTdiLTk5ZDUtNDY2YzdlNGZlZmNjLzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2
NmM3ZTRmZWZjYy5jcmwwHwYDVR0jBBgwFoAUen0xP5XUXkW6VNTOSnq6rYC67KEw
DgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKG
gaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv
NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZh
ZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZTU3OWY1Yi1lYzc2LTQ1N2ItOTlk
NS00NjZjN2U0ZmVmY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYE
JgL/YgAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDBg8PAgMGEZ8wVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
TknIO/PfA/CM/ltCA2jAfqNnXY6l821Z0TD6VeNWl26E+bY4H9Inj1xwL2b+wvUu
y1qQiIsyOzgXtWo0kwiXMudUHoIeUMbTvx6DjLj2xp8dMOMOl76qXdPr3Yju9z8Z
xEy184Pf1A+QTthyKbrrMiAbUyFuYohczeD+2n3VeEz6OfAXrA1NOFntonjRxw8j
/xl3AfDyHCTkIUUOnW8MbTPJqEYRJDfzt2df54LTKqRo9GtsfmaNhzPOganDauBp
kYs4C6EQ7Rh6bczQZ1XVHmzrneW0SbSbQsJ8fzar48wbD7CpjiTKmQMjM7VvdhgR
swQMVQ6ZqPQtKNIV7ReGYg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org