Certificate

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
File:                     2B493543892B31620E0FCE2FCA417069D0647A14.cer (raw, json)
Hash identifier:          wumli8V9Md5NH/5nTLp6oirfpb2NGY8+zo9nRJmSq4Y=
Subject key identifier:   2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority key identifier: F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
Certificate issuer:       /CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
Certificate serial:       2068DBEDA218D37381DED3D16A92B046E9EF12FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer
Manifest:                 rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.mft
caRepository:             rsync://rpki.apernet.io/repo/APERNET/0/
Notify URL:               https://rpki.apernet.io/rrdp/notification.xml
Certificate not before:   Sat 09 Jul 2022 19:41:00 +0000
Certificate not after:    Sat 08 Jul 2023 19:46:00 +0000
Subordinate resources:    IP: 2602:feda:100::/41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:68:db:ed:a2:18:d3:73:81:de:d3:d1:6a:92:b0:46:e9:ef:12:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
        Validity
            Not Before: Jul  9 19:41:00 2022 GMT
            Not After : Jul  8 19:46:00 2023 GMT
        Subject: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:38:32:96:e2:d1:b9:af:2a:c1:3b:c6:4a:
                    47:a5:52:23:03:cd:88:c2:20:4f:a5:c2:4d:9a:c4:
                    f9:fe:f8:53:b0:0c:4a:68:bf:44:2a:b7:cf:c8:6f:
                    ae:6a:8f:a2:61:10:21:64:45:fe:f3:ed:5f:a1:2d:
                    21:99:5d:e9:71:31:f5:5a:85:6b:eb:3a:8e:61:68:
                    14:ad:bf:be:46:c3:71:f9:a7:64:7e:fa:e9:04:82:
                    27:4c:2f:c6:0a:77:47:d6:01:b7:2b:0f:69:1a:39:
                    f5:18:0e:2d:a9:92:9a:7e:6f:56:ce:6c:52:3a:fb:
                    a5:83:74:43:84:5e:ee:0c:46:7e:6b:72:dc:5c:29:
                    5c:93:63:11:b5:af:e1:22:94:c0:2b:2f:56:63:77:
                    82:51:f1:05:da:62:61:94:23:a0:d2:df:18:9a:a7:
                    4f:aa:5e:60:e7:ca:66:7d:10:fa:8e:d0:1f:9c:6b:
                    61:9c:eb:bb:13:96:46:a5:b0:6f:8a:25:64:fc:34:
                    52:10:56:93:c5:0d:a9:b7:fa:aa:40:90:e0:1a:05:
                    82:63:60:4c:89:43:6c:c4:69:c5:50:09:93:18:dd:
                    8f:b1:8d:9c:87:45:71:2f:3b:e6:2c:76:3a:4a:d9:
                    17:66:e8:a6:c2:03:48:9d:73:f5:5b:31:d4:b6:51:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
            X509v3 Authority Key Identifier:
                keyid:F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/0/F43E070328FCCFA5C999CEF97F3D0B3C2D62CA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apernet.io/repo/APERNET/0/
                RPKI Manifest - URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.mft
                RPKI Notify - URI:https://rpki.apernet.io/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:b2:9e:76:f4:cd:b3:2e:cf:b9:50:22:90:a7:c4:0f:d1:
         4b:79:1c:b3:36:9c:b0:ff:c0:66:89:34:6a:b6:77:fe:61:b0:
         83:7c:2e:e0:70:cb:a8:59:16:7b:90:5a:cf:9a:d6:20:58:52:
         a9:ce:be:3f:01:9c:be:27:cb:87:b5:29:25:eb:d6:81:00:59:
         59:b8:2b:79:f5:3a:75:f3:ad:76:ce:29:5f:0e:c3:dc:18:5c:
         2c:4f:39:ff:b7:f7:46:81:c6:17:dd:30:db:cb:18:15:8d:ae:
         e6:71:3a:85:4a:b8:87:a7:d1:7a:97:bc:fe:21:a5:3e:73:4a:
         7f:af:e9:91:2b:38:8d:cd:4a:a4:77:82:4c:72:49:cc:b7:93:
         e5:4b:cb:27:97:25:4a:6b:46:28:70:be:ca:9f:2e:42:60:90:
         0c:b0:2b:c3:50:fe:2d:f1:dc:c9:9f:ae:be:3d:c0:90:e2:11:
         9e:91:e3:2b:0e:fe:15:22:fe:a4:81:f8:72:ce:5e:ff:82:b7:
         d7:49:c8:df:e5:c2:a0:46:68:6c:75:13:8d:84:c0:a4:a0:6e:
         79:7c:9f:61:bb:5a:9e:a4:be:87:51:30:39:7e:45:17:14:40:
         00:c3:da:90:76:2f:fb:2b:dd:f1:6a:d0:28:34:26:6e:0c:b8:
         cb:9c:e6:ef
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIUIGjb7aIY03OB3tPRapKwRunvEvswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZmIxYjk2ZjdkODc5OGY1NjVlOTJlYjY4
M2EyOGQ4ZGE5MTkxNjkzYmUwHhcNMjIwNzA5MTk0MTAwWhcNMjMwNzA4MTk0NjAw
WjAzMTEwLwYDVQQDEygyQjQ5MzU0Mzg5MkIzMTYyMEUwRkNFMkZDQTQxNzA2OUQw
NjQ3QTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQ4Mpbi0bmv
KsE7xkpHpVIjA82IwiBPpcJNmsT5/vhTsAxKaL9EKrfPyG+uao+iYRAhZEX+8+1f
oS0hmV3pcTH1WoVr6zqOYWgUrb++RsNx+adkfvrpBIInTC/GCndH1gG3Kw9pGjn1
GA4tqZKafm9WzmxSOvulg3RDhF7uDEZ+a3LcXClck2MRta/hIpTAKy9WY3eCUfEF
2mJhlCOg0t8YmqdPql5g58pmfRD6jtAfnGthnOu7E5ZGpbBviiVk/DRSEFaTxQ2p
t/qqQJDgGgWCY2BMiUNsxGnFUAmTGN2PsY2ch0VxLzvmLHY6StkXZuimwgNInXP1
WzHUtlEsjwIDAQABo4IC4TCCAt0wDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
K0k1Q4krMWIOD84vykFwadBkehQwHwYDVR0jBBgwFoAU9D4HAyj8z6XJmc75fz0L
PC1iyhkwDgYDVR0PAQH/BAQDAgEGMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8v
c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMC9GNDNFMDcwMzI4RkNDRkE1Qzk5
OUNFRjk3RjNEMEIzQzJENjJDQTE5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAG
CCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJp
bi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9m
NjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDRjMTJjNmMtYWIw
ZS00ZDAzLWI5YzgtNmMzNTkyMzY4Yzc3LzUwOTNjYmI0NmZiMWI5NmY3ZDg3OThm
NTY1ZTkyZWI2ODNhMjhkOGRhOTE5MTY5M2JlLmNlcjCB4QYIKwYBBQUHAQsEgdQw
gdEwMwYIKwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5hcGVybmV0LmlvL3JlcG8vQVBF
Uk5FVC8wLzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLmFwZXJuZXQuaW8vcmVw
by9BUEVSTkVULzAvMkI0OTM1NDM4OTJCMzE2MjBFMEZDRTJGQ0E0MTcwNjlEMDY0
N0ExNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnBraS5hcGVybmV0LmlvL3Jy
ZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL+2gEAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPCLKedvTNsy7PuVAikKfED9FLeRyzNpyw/8BmiTRqtnf+YbCDfC7gcMuo
WRZ7kFrPmtYgWFKpzr4/AZy+J8uHtSkl69aBAFlZuCt59Tp18612zilfDsPcGFws
Tzn/t/dGgcYX3TDbyxgVja7mcTqFSriHp9F6l7z+IaU+c0p/r+mRKziNzUqkd4JM
cknMt5PlS8snlyVKa0YocL7Kny5CYJAMsCvDUP4t8dzJn66+PcCQ4hGekeMrDv4V
Iv6kgfhyzl7/grfXScjf5cKgRmhsdRONhMCkoG55fJ9hu1qepL6HUTA5fkUXFEAA
w9qQdi/7K93xatAoNCZuDLjLnObv
-----END CERTIFICATE-----