Certificate

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.cer
File:                     394AA61A0147B7F3363644034F7CE789A9F9B165.cer (raw, json)
Hash identifier:          DtEeuAZ0tgQtw6xOm9qtMWJlftVmp1UmX84rfHe6xic=
Subject key identifier:   39:4A:A6:1A:01:47:B7:F3:36:36:44:03:4F:7C:E7:89:A9:F9:B1:65
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       4A316E769CB11CD32C74BAF3F7B127216CB2AA70
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Manifest:                 rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.mft
caRepository:             rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/
Notify URL:               https://k34.rrdp-rpki.athene-center.net/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:39:02 +0000
Certificate not after:    Wed 26 Mar 2025 19:44:02 +0000
Subordinate resources:    AS: 208162
                          IP: 158.220.163.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:31:6e:76:9c:b1:1c:d3:2c:74:ba:f3:f7:b1:27:21:6c:b2:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 19:39:02 2024 GMT
            Not After : Mar 26 19:44:02 2025 GMT
        Subject: CN=394AA61A0147B7F3363644034F7CE789A9F9B165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:3c:a1:d1:4e:51:73:e6:57:61:c9:7a:dd:
                    e9:55:23:51:13:f9:e3:b3:bc:61:ba:6e:b7:13:da:
                    35:c6:83:2e:10:b0:24:e4:6b:cb:19:89:13:b1:8f:
                    b5:24:dd:05:59:83:b3:df:5a:47:83:78:aa:4d:0e:
                    cd:de:ea:02:13:75:53:56:8c:c7:41:f0:61:24:26:
                    b2:91:6d:84:37:6c:d2:05:67:a4:90:7d:82:81:35:
                    a6:2d:9d:20:5e:0f:b1:61:57:ff:d3:05:5d:c3:27:
                    8a:02:2c:23:94:eb:ea:16:b4:f7:ec:84:74:f9:51:
                    8e:c1:dd:18:37:28:a6:76:83:a2:54:f3:a9:15:8b:
                    7c:74:ee:48:2b:35:e2:a0:03:f6:f0:ef:1f:9d:4b:
                    44:3c:b7:ca:d6:56:7e:61:28:a0:99:2f:41:83:db:
                    1a:44:ca:ef:42:69:5e:2d:3b:3a:e9:be:bb:6b:56:
                    5d:68:6e:31:97:f9:a9:29:e2:c3:a4:10:b3:cf:44:
                    db:97:39:22:36:e5:27:1b:78:7f:27:b1:c0:f1:48:
                    3f:8d:eb:a6:54:64:6a:e4:15:e7:00:17:e0:8f:b1:
                    8a:88:b9:28:da:7b:11:4f:79:84:98:98:22:aa:54:
                    f0:23:30:fd:49:93:8b:c0:e0:45:fd:40:0a:1d:fc:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:4A:A6:1A:01:47:B7:F3:36:36:44:03:4F:7C:E7:89:A9:F9:B1:65
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                CA Repository - URI:rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/
                RPKI Manifest - URI:rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.mft
                RPKI Notify - URI:https://k34.rrdp-rpki.athene-center.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.163.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208162

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:91:52:32:d4:d5:15:5e:27:b3:e1:90:f9:e8:85:fb:8d:
         99:76:89:23:46:6e:53:7d:56:1b:dc:c6:cd:5e:d0:5f:5b:58:
         99:ee:12:99:0c:bd:d4:02:7d:4b:0a:1e:86:ae:e7:ff:23:5a:
         cc:5f:c2:f4:4a:ca:09:3b:00:59:d7:53:5b:a0:b7:34:81:01:
         ef:ee:a7:0e:37:6f:f5:06:3d:55:3c:d2:de:a4:16:53:5c:47:
         d9:59:cd:d2:e6:ad:b8:34:36:6b:0d:ec:52:14:d3:ce:ac:cb:
         39:7a:70:85:f4:80:40:70:4a:9e:40:39:99:bc:e4:3c:65:4e:
         77:88:aa:39:1e:c6:2c:40:1b:98:0d:56:04:12:9a:2d:bd:94:
         6b:d4:2b:f2:4b:8b:c0:98:42:7a:1c:fb:ad:6c:dc:e7:5c:ec:
         3f:d3:78:b2:b1:65:c6:1d:26:2f:56:93:ca:29:44:57:63:6e:
         cd:4d:15:41:78:cc:85:75:04:a3:e6:e9:81:97:6c:16:d1:64:
         a9:9d:6f:fb:61:d0:55:fd:8f:27:31:ab:fa:67:96:d5:62:95:
         f6:a3:99:98:56:e8:98:05:30:1c:10:93:a5:a3:df:40:ce:51:
         8f:b7:cd:82:d7:e5:12:28:69:8d:ba:d4:9c:f7:bc:cf:60:22:
         e2:31:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org