Certificate

$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/A77F73166B16F728527802799910078E98BD9137.cer
File:                     A77F73166B16F728527802799910078E98BD9137.cer (raw, json)
Hash identifier:          GuzczvbQLHkLuxiCKWvch+ZrG7w0x0tz5coDr/OXzXc=
Subject key identifier:   A7:7F:73:16:6B:16:F7:28:52:78:02:79:99:10:07:8E:98:BD:91:37
Authority key identifier: F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7
Certificate issuer:       /CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
Certificate serial:       20DF3F46198ADFA3DDEC14C6D862681D0E40AE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer
Manifest:                 rsync://rsync.krill.cloud/repo/nlnetlabs-tests/0/A77F73166B16F728527802799910078E98BD9137.mft
caRepository:             rsync://rsync.krill.cloud/repo/nlnetlabs-tests/0
Notify URL:               https://rrdp.krill.cloud/notification.xml
Certificate not before:   Fri 17 Jun 2022 08:36:31 +0000
Certificate not after:    Fri 16 Jun 2023 08:41:31 +0000
Subordinate resources:    IP: 2a04:b905::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:df:3f:46:19:8a:df:a3:dd:ec:14:c6:d8:62:68:1d:0e:40:ae:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f560bea5f5c5cb739f20a74b8378b388a2f95bc7
        Validity
            Not Before: Jun 17 08:36:31 2022 GMT
            Not After : Jun 16 08:41:31 2023 GMT
        Subject: CN=A77F73166B16F728527802799910078E98BD9137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:08:3b:05:fa:a6:5f:4e:95:f5:30:18:a4:
                    c5:25:a0:66:e0:b5:b6:7d:79:88:86:3d:12:67:90:
                    1d:81:57:45:c2:8b:77:93:c3:a6:b0:0a:e3:ff:05:
                    9c:4d:df:3b:2f:90:cd:6f:a8:b9:7d:3a:ed:82:79:
                    c3:aa:bb:7f:cc:9c:aa:b2:06:e4:bc:d5:ed:25:f9:
                    16:8b:83:25:3d:e6:26:27:33:e8:de:43:36:6c:54:
                    84:e2:a2:06:5c:e1:cd:b2:69:7b:d5:4f:5c:a7:8b:
                    a9:b7:d8:2a:06:b6:5f:10:de:4a:08:02:3d:01:dd:
                    33:bf:e5:ba:6d:22:81:55:54:5a:9e:2c:86:67:e3:
                    62:e1:84:1b:89:69:0a:b9:68:6b:96:8f:2e:57:bc:
                    3a:c0:2d:95:bc:d5:75:97:bf:9c:09:2d:d6:20:b5:
                    eb:eb:03:b7:ab:b6:89:e4:9b:1d:20:e3:4d:94:fc:
                    9e:d7:e2:87:ed:5b:67:8f:b8:14:3a:2c:e6:45:ca:
                    84:6f:44:36:ac:3d:db:71:c0:72:86:0d:fe:c6:21:
                    39:de:71:2a:72:0f:f9:29:84:db:ed:1e:2a:b4:05:
                    5b:72:08:8a:17:f2:c4:99:db:18:89:a0:89:44:2c:
                    48:2c:dd:66:74:d2:dc:61:e8:0c:11:fd:6d:79:dc:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:7F:73:16:6B:16:F7:28:52:78:02:79:99:10:07:8E:98:BD:91:37
            X509v3 Authority Key Identifier:
                keyid:F5:60:BE:A5:F5:C5:CB:73:9F:20:A7:4B:83:78:B3:88:A2:F9:5B:C7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/F560BEA5F5C5CB739F20A74B8378B388A2F95BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WC-pfXFy3OfIKdLg3iziKL5W8c.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.krill.cloud/repo/nlnetlabs-tests/0
                RPKI Manifest - URI:rsync://rsync.krill.cloud/repo/nlnetlabs-tests/0/A77F73166B16F728527802799910078E98BD9137.mft
                RPKI Notify - URI:https://rrdp.krill.cloud/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b905::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:54:ba:06:ff:5d:95:ec:11:8c:98:47:1e:30:a7:dc:31:
         a0:d8:a8:5c:81:9e:da:be:43:2c:7e:dc:ad:d7:78:95:08:d5:
         20:ad:dd:81:8a:fc:5f:1d:73:f4:e6:35:49:2a:3e:2d:c4:91:
         f8:0a:d6:35:c8:10:cc:f4:da:36:cf:3a:9b:ab:ed:ea:ed:f5:
         84:6f:b4:49:3c:51:a7:b2:7b:20:49:52:40:50:db:38:ab:db:
         0a:7b:a1:59:67:5e:98:e4:37:06:3c:35:18:7a:2b:1c:92:bb:
         8f:e3:27:3e:d0:da:32:d8:96:63:cf:b5:4d:b0:9a:60:31:3c:
         39:ae:de:1d:d2:d9:0f:7a:d1:20:44:2a:1f:db:45:a4:af:76:
         93:fa:72:03:f4:39:c6:a9:9c:76:a2:39:70:28:b9:7c:ad:78:
         7c:57:06:fc:3d:f5:79:83:96:26:42:6a:8f:87:45:49:dd:aa:
         6d:e8:5e:a6:db:19:49:68:2b:94:7a:35:a7:ba:75:30:26:da:
         54:ad:64:44:b2:39:d4:2a:4e:50:ef:c2:6c:09:b1:20:c6:32:
         dd:26:df:ed:96:4b:ef:f5:c9:b9:a7:1d:00:a0:55:ba:8b:d6:
         7d:a3:8c:ea:ee:a0:b2:e7:14:68:56:95:cc:bd:d0:6a:f6:ae:
         9a:cc:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org