Certificate

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.cer
File:                     2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.cer (raw, json)
Hash identifier:          krAmLfIJKSsRZ2TZosWfhVqajcT6B4rI1z3KkBv6C0U=
Subject key identifier:   21:40:E3:C7:B9:CE:2B:95:EA:4D:FB:3B:66:4D:E1:45:0E:FC:CC:6E
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       4A3BBFF5D78E2B933963634CA9ADB2D562A53673
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Manifest:                 rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.mft
caRepository:             rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/
Notify URL:               https://k43.rrdp-rpki.athene-center.net/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:40:44 +0000
Certificate not after:    Wed 26 Mar 2025 19:45:44 +0000
Subordinate resources:    AS: 208162
                          IP: 158.220.172.0/24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3b:bf:f5:d7:8e:2b:93:39:63:63:4c:a9:ad:b2:d5:62:a5:36:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 19:40:44 2024 GMT
            Not After : Mar 26 19:45:44 2025 GMT
        Subject: CN=2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:a7:00:9a:03:4e:2f:09:b6:7c:84:1b:87:
                    97:7a:be:05:b3:d4:fd:3d:87:4b:a2:25:1b:f3:70:
                    81:e5:e2:a9:ed:ee:4e:38:b9:9f:5b:2a:c4:27:2d:
                    cd:6f:37:14:83:d0:2b:95:52:0f:0e:40:bf:58:8a:
                    d5:75:68:5a:47:f2:3e:bc:43:6c:55:a8:4a:d6:bb:
                    bb:26:f1:cd:87:70:f0:8d:27:06:c9:ef:64:92:d9:
                    78:56:0c:a0:51:74:37:67:d4:21:86:50:43:1f:c1:
                    61:02:a6:6c:e2:54:e7:44:cd:0e:6f:ae:33:83:83:
                    d1:e9:cc:14:ca:bb:63:9c:23:0d:76:5b:f8:ad:1c:
                    16:42:e6:ab:77:2c:81:c5:fa:81:53:55:f4:f0:bf:
                    1c:d3:3f:52:ff:7f:5c:44:ce:38:4f:c1:85:5d:6c:
                    3e:32:e1:0b:40:e9:95:a5:0c:e2:da:e6:6f:24:42:
                    59:35:52:dd:e1:65:42:52:c9:9f:26:ea:ad:1b:79:
                    17:ea:bf:eb:96:aa:29:fd:69:a2:41:73:8a:a7:a5:
                    6f:73:27:c7:a6:89:05:52:cc:60:fe:a9:38:d2:75:
                    7f:69:99:a0:49:f6:b7:ef:4c:a6:c9:86:e9:a7:59:
                    42:ba:90:98:40:72:d9:14:4c:a0:05:b2:13:88:46:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:40:E3:C7:B9:CE:2B:95:EA:4D:FB:3B:66:4D:E1:45:0E:FC:CC:6E
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                CA Repository - URI:rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/
                RPKI Manifest - URI:rsync://k43.rrdp-rpki.athene-center.net/repo/k43-rpki-athene-center/0/2140E3C7B9CE2B95EA4DFB3B664DE1450EFCCC6E.mft
                RPKI Notify - URI:https://k43.rrdp-rpki.athene-center.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.172.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208162

    Signature Algorithm: sha256WithRSAEncryption
         a9:fe:8a:34:6f:eb:5d:59:ac:d0:68:69:f7:71:6c:c9:a8:96:
         f5:f9:b0:5d:e2:0e:29:5e:8e:f7:fa:c5:79:ea:c4:15:1a:5b:
         44:85:7d:0b:cf:60:02:1c:8b:ae:00:0e:32:19:69:8d:2b:3e:
         b7:c5:da:5a:1f:01:de:60:9f:94:ad:6f:be:2f:00:03:b1:19:
         f6:73:b3:43:c0:4a:88:65:07:17:28:a9:99:b7:fd:ed:00:e8:
         d6:c2:9e:94:fa:ea:78:19:50:79:0a:d4:22:26:70:10:f3:ca:
         74:3e:60:45:dc:ff:cb:24:8f:39:61:c0:d4:2f:be:8e:42:6c:
         48:41:c7:39:85:9c:89:32:b1:2c:36:03:8a:b3:5f:b5:4d:2a:
         61:a0:f6:35:04:ff:16:8c:1b:be:a4:ca:8d:c3:0d:99:ca:be:
         9f:6e:fb:44:e4:e2:28:0e:55:f8:25:bc:23:e9:5a:c0:e0:86:
         12:99:e8:ad:40:02:3e:f4:3c:78:ce:aa:dc:43:f1:99:ac:52:
         67:78:f6:5c:17:9b:a6:9a:fb:3f:51:86:d2:6a:51:33:57:82:
         2f:e9:8e:54:ef:c3:78:cf:55:6b:0c:6e:e1:a3:00:1b:9c:ee:
         16:f9:96:25:47:74:37:09:d5:ab:ed:56:77:4f:01:08:79:32:
         7d:aa:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org