Certificate

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/8BC4441C8D0707AE7269889E0ECE0395CE3FC4E1.cer
File:                     8BC4441C8D0707AE7269889E0ECE0395CE3FC4E1.cer (raw, json)
Hash identifier:          Bdo7FfcxbaiLWxThay+TZW09t5svu0cDqxqPcZg+WcY=
Subject key identifier:   8B:C4:44:1C:8D:07:07:AE:72:69:88:9E:0E:CE:03:95:CE:3F:C4:E1
Authority key identifier: 0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6
Certificate issuer:       /CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
Certificate serial:       67818E8CAA51BE2E7B817AC0584A0D921D071762
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer
Manifest:                 rsync://k08.rrdp-rpki.athene-center.net/repo/k08-rpki-athene-center/0/8BC4441C8D0707AE7269889E0ECE0395CE3FC4E1.mft
caRepository:             rsync://k08.rrdp-rpki.athene-center.net/repo/k08-rpki-athene-center/0/
Notify URL:               https://k08.rrdp-rpki.athene-center.net/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:34:09 +0000
Certificate not after:    Wed 26 Mar 2025 19:39:09 +0000
Subordinate resources:    AS: 208162
                          IP: 158.220.137.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:81:8e:8c:aa:51:be:2e:7b:81:7a:c0:58:4a:0d:92:1d:07:17:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6700B7D5FF83936E2441D69F0E65D68BA388D6
        Validity
            Not Before: Mar 27 19:34:09 2024 GMT
            Not After : Mar 26 19:39:09 2025 GMT
        Subject: CN=8BC4441C8D0707AE7269889E0ECE0395CE3FC4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:32:63:34:b0:00:20:98:a8:81:92:1f:73:
                    c5:74:8d:b4:71:d4:1d:61:c7:e2:96:82:8c:dc:e4:
                    96:dd:d5:87:f3:a8:30:9f:2a:81:6c:73:9d:65:35:
                    4e:89:d5:0d:de:5f:9c:b9:e9:c1:ce:18:7f:38:39:
                    ee:d0:23:a9:bc:15:67:79:e0:42:cc:eb:4f:c1:12:
                    b5:ff:ba:03:c5:fc:1a:a5:3a:2e:83:7b:7d:c6:c0:
                    62:b0:ab:99:22:d3:75:c0:50:51:6a:4f:3c:db:ab:
                    66:49:5e:59:ce:74:a7:8e:e2:bb:de:91:0f:6a:ba:
                    26:c8:32:28:d3:3e:d8:ad:f4:03:1b:67:e5:ab:9a:
                    d8:48:da:ed:0b:6f:24:4e:3b:0e:61:3a:f8:d0:00:
                    71:94:0a:3c:0c:b9:d2:5c:f2:d4:76:3f:b2:e1:3b:
                    46:eb:a5:0e:ae:9f:19:fe:79:31:33:e2:2d:cb:ff:
                    5f:e7:47:17:a8:4f:f2:bd:10:c4:e5:58:6a:7a:3a:
                    b1:39:60:bb:74:b4:f9:be:50:4c:fc:47:3f:3f:78:
                    9b:d4:81:9e:f1:2b:4b:e7:71:7c:0d:36:ff:23:8e:
                    51:19:96:94:49:77:f8:86:f2:52:a4:f8:79:9c:ef:
                    25:53:f6:01:5a:ff:8a:e8:54:b5:11:b2:92:bd:93:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:C4:44:1C:8D:07:07:AE:72:69:88:9E:0E:CE:03:95:CE:3F:C4:E1
            X509v3 Authority Key Identifier:
                keyid:0B:67:00:B7:D5:FF:83:93:6E:24:41:D6:9F:0E:65:D6:8B:A3:88:D6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/0B6700B7D5FF83936E2441D69F0E65D68BA388D6.cer

            Subject Information Access:
                CA Repository - URI:rsync://k08.rrdp-rpki.athene-center.net/repo/k08-rpki-athene-center/0/
                RPKI Manifest - URI:rsync://k08.rrdp-rpki.athene-center.net/repo/k08-rpki-athene-center/0/8BC4441C8D0707AE7269889E0ECE0395CE3FC4E1.mft
                RPKI Notify - URI:https://k08.rrdp-rpki.athene-center.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.137.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208162

    Signature Algorithm: sha256WithRSAEncryption
         72:78:11:f4:ec:8e:75:cb:2e:62:0f:22:8b:6f:7a:31:f7:98:
         03:62:85:54:ac:e9:2b:8d:e6:24:ea:e0:db:52:ba:8b:68:74:
         f1:c2:76:84:3d:34:66:06:a6:6c:c6:e7:37:a1:11:50:75:f1:
         41:5f:2f:35:94:ff:49:bd:cb:0c:0c:ee:4d:56:b8:99:b0:cd:
         c1:32:44:ee:c6:48:26:71:f4:0e:55:8f:5b:7f:23:3e:21:12:
         f0:1c:df:8a:66:d0:57:3c:d9:f9:61:41:8f:f6:23:5a:29:32:
         2c:aa:1d:50:8c:68:ae:42:01:40:47:ba:d0:8f:3c:f4:b9:73:
         f6:db:bc:a4:ce:b9:18:63:02:81:2b:bb:50:41:ff:5e:d2:9a:
         0c:ef:9d:97:27:36:f0:fd:63:54:7e:13:15:33:73:f1:3c:b2:
         7e:7c:72:b0:f5:a6:0c:b1:b3:75:b5:35:f2:21:89:17:b1:5d:
         55:7e:00:4b:24:97:0b:fe:f8:6b:09:37:27:b0:67:86:1a:ae:
         0f:6b:af:fd:ae:2c:d8:0f:bd:18:73:49:c5:1e:56:44:ee:99:
         5b:f6:d6:12:5c:5b:2f:1d:73:a9:20:71:d9:83:c2:4b:6a:de:
         ea:a8:3d:17:e1:fd:03:25:95:b7:a4:eb:96:69:df:dc:3a:30:
         9a:e1:89:d4
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIUZ4GOjKpRvi57gXrAWEoNkh0HF2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI2NzAwQjdENUZGODM5MzZFMjQ0MUQ2OUYwRTY1RDY4
QkEzODhENjAeFw0yNDAzMjcxOTM0MDlaFw0yNTAzMjYxOTM5MDlaMDMxMTAvBgNV
BAMTKDhCQzQ0NDFDOEQwNzA3QUU3MjY5ODg5RTBFQ0UwMzk1Q0UzRkM0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQTJjNLAAIJiogZIfc8V0jbRx
1B1hx+KWgozc5Jbd1YfzqDCfKoFsc51lNU6J1Q3eX5y56cHOGH84Oe7QI6m8FWd5
4ELM60/BErX/ugPF/BqlOi6De33GwGKwq5ki03XAUFFqTzzbq2ZJXlnOdKeO4rve
kQ9quibIMijTPtit9AMbZ+WrmthI2u0LbyROOw5hOvjQAHGUCjwMudJc8tR2P7Lh
O0brpQ6unxn+eTEz4i3L/1/nRxeoT/K9EMTlWGp6OrE5YLt0tPm+UEz8Rz8/eJvU
gZ7xK0vncXwNNv8jjlEZlpRJd/iG8lKk+Hmc7yVT9gFa/4roVLURspK9kyTFAgMB
AAGjggL7MIIC9zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLxEQcjQcHrnJp
iJ4OzgOVzj/E4TAfBgNVHSMEGDAWgBQLZwC31f+Dk24kQdafDmXWi6OI1jAOBgNV
HQ8BAf8EBAMCAQYwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vazAwLnJyZHAt
cnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBvL2swMC1ycGtpLWF0aGVuZS1jZW50
ZXIvMC8wQjY3MDBCN0Q1RkY4MzkzNkUyNDQxRDY5RjBFNjVENjhCQTM4OEQ2LmNy
bDCBgQYIKwYBBQUHAQEEdTBzMHEGCCsGAQUFBzAChmVyc3luYzovL3Jwa2kuYXRo
ZW5lLWNlbnRlci5uZXQvcmVwby9ycGtpLWF0aGVuZS1jZW50ZXIvMC8wQjY3MDBC
N0Q1RkY4MzkzNkUyNDQxRDY5RjBFNjVENjhCQTM4OEQ2LmNlcjCCATEGCCsGAQUF
BwELBIIBIzCCAR8wUgYIKwYBBQUHMAWGRnJzeW5jOi8vazA4LnJyZHAtcnBraS5h
dGhlbmUtY2VudGVyLm5ldC9yZXBvL2swOC1ycGtpLWF0aGVuZS1jZW50ZXIvMC8w
fgYIKwYBBQUHMAqGcnJzeW5jOi8vazA4LnJyZHAtcnBraS5hdGhlbmUtY2VudGVy
Lm5ldC9yZXBvL2swOC1ycGtpLWF0aGVuZS1jZW50ZXIvMC84QkM0NDQxQzhEMDcw
N0FFNzI2OTg4OUUwRUNFMDM5NUNFM0ZDNEUxLm1mdDBJBggrBgEFBQcwDYY9aHR0
cHM6Ly9rMDgucnJkcC1ycGtpLmF0aGVuZS1jZW50ZXIubmV0L3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntyJMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMt
IjANBgkqhkiG9w0BAQsFAAOCAQEAcngR9OyOdcsuYg8ii296MfeYA2KFVKzpK43m
JOrg21K6i2h08cJ2hD00ZgambMbnN6ERUHXxQV8vNZT/Sb3LDAzuTVa4mbDNwTJE
7sZIJnH0DlWPW38jPiES8BzfimbQVzzZ+WFBj/YjWikyLKodUIxorkIBQEe60I88
9Llz9tu8pM65GGMCgSu7UEH/XtKaDO+dlyc28P1jVH4TFTNz8TyyfnxysPWmDLGz
dbU18iGJF7FdVX4ASySXC/74awk3J7BnhhquD2uv/a4s2A+9GHNJxR5WRO6ZW/bW
ElxbLx1zqSBx2YPCS2re6qg9F+H9AyWVt6Trlmnf3DowmuGJ1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org