Certificate

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/0/83A83258295119F96CCBEA06CA664AC7FB95BD4C.cer
File:                     83A83258295119F96CCBEA06CA664AC7FB95BD4C.cer (raw, json)
Hash identifier:          yG2wCKgzh52GXecNvciwlcOX72MU4qH6MGYH5aCl5xA=
Subject key identifier:   83:A8:32:58:29:51:19:F9:6C:CB:EA:06:CA:66:4A:C7:FB:95:BD:4C
Authority key identifier: 77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71
Certificate issuer:       /CN=7773ED99C6A9084BD4E42AFA0DA15D17F86A2571
Certificate serial:       135DAEEDC368C6F7F69889D2E5231CC91C25062F
Authority info access:    rsync://rsync.krill.cloud/repo/nlnetlabs/1/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer
Manifest:                 rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/0/83A83258295119F96CCBEA06CA664AC7FB95BD4C.mft
caRepository:             rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/0
Notify URL:               https://child.rov.koenvanhove.nl/rrdp/notification.xml
Certificate not before:   Wed 22 Jun 2022 10:15:14 +0000
Certificate not after:    Wed 21 Jun 2023 10:20:14 +0000
Subordinate resources:    IP: 2a04:b905:abcd::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:ae:ed:c3:68:c6:f7:f6:98:89:d2:e5:23:1c:c9:1c:25:06:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7773ED99C6A9084BD4E42AFA0DA15D17F86A2571
        Validity
            Not Before: Jun 22 10:15:14 2022 GMT
            Not After : Jun 21 10:20:14 2023 GMT
        Subject: CN=83A83258295119F96CCBEA06CA664AC7FB95BD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:97:71:15:5e:a6:29:c8:9f:a7:60:fe:88:
                    66:7c:6e:7e:91:12:68:bd:69:3d:3e:24:6c:d1:0b:
                    70:1c:78:8c:46:8c:ff:dd:5b:c5:c1:ee:62:04:0c:
                    94:4f:fb:91:08:21:99:ce:2b:c3:e0:6b:c7:67:5e:
                    85:78:90:d8:66:8b:04:4e:7a:dc:fc:e1:30:b7:89:
                    85:11:ad:e7:f8:f3:94:2a:e0:79:34:fb:2b:1b:42:
                    f7:f9:ff:9f:1a:a5:3e:8f:08:ce:1c:9e:26:88:35:
                    11:55:9e:e1:88:96:a3:1f:33:db:12:d2:9b:6f:1a:
                    b2:c6:b3:8d:5c:c6:90:d5:35:de:d3:fa:e5:94:d6:
                    ef:c3:1c:bb:5e:65:9f:77:bf:d6:e9:95:34:16:99:
                    7c:88:15:8d:b5:47:b5:8c:77:e0:ec:9e:1e:b7:05:
                    2e:f8:b9:4f:ef:52:a0:88:2c:62:fa:46:cf:b3:14:
                    d4:5a:ce:f4:08:5d:a9:c1:20:44:73:7c:7f:ab:9f:
                    bb:9e:44:7d:a7:9d:2a:cc:50:34:cb:86:7b:63:aa:
                    c7:f1:3d:73:f6:b2:92:d4:e6:3f:ff:18:68:5b:99:
                    c8:92:3f:bb:7c:7b:2c:15:e9:5f:75:f6:33:42:c2:
                    14:25:04:37:95:17:8f:56:68:05:b6:a9:ee:b1:00:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:A8:32:58:29:51:19:F9:6C:CB:EA:06:CA:66:4A:C7:FB:95:BD:4C
            X509v3 Authority Key Identifier:
                keyid:77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer

            Subject Information Access:
                CA Repository - URI:rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/0
                RPKI Manifest - URI:rsync://child.rov.koenvanhove.nl/repo/KoenvanHoveChild/0/83A83258295119F96CCBEA06CA664AC7FB95BD4C.mft
                RPKI Notify - URI:https://child.rov.koenvanhove.nl/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b905:abcd::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:28:4e:60:e4:a5:b1:5f:ff:b5:d3:20:59:ea:df:a6:87:0b:
         2c:3f:93:4e:29:85:8c:dd:bf:b5:bf:cf:d1:5c:eb:06:ee:5d:
         b0:c4:91:53:92:0e:0d:04:e7:d1:a5:7a:8c:76:b1:d5:6c:3b:
         19:e9:15:ed:48:6b:d5:85:db:a6:4a:4c:e6:1f:3d:67:6a:6e:
         f4:0e:26:9a:1a:c8:4c:ef:c6:46:4f:5d:e7:15:da:5b:fa:a6:
         de:94:e6:07:bd:60:41:a3:27:71:b2:e5:c8:e0:c6:4e:b7:8b:
         98:a6:78:a0:90:fc:ce:b7:6c:98:0c:7b:ab:7b:38:04:6e:fc:
         81:d8:7f:24:48:76:b5:4c:77:6e:b4:59:cf:7b:8c:76:e6:7f:
         95:91:4e:c2:53:ad:c2:99:19:fd:64:b7:95:b4:67:db:74:a2:
         f4:16:fa:b4:10:5e:56:ab:5e:f2:f8:35:c8:46:ee:3a:f0:a5:
         41:57:c9:14:d0:94:23:f3:cd:d9:3d:45:44:f1:b1:6c:5a:73:
         c5:10:c4:b1:8a:68:68:cf:85:57:09:0e:0b:a0:31:7d:2d:06:
         20:dd:54:83:fe:ed:a3:5e:29:f0:8f:b3:3e:ad:de:17:83:9f:
         e0:55:16:e5:38:b5:21:70:1e:17:22:2d:14:f3:e8:06:20:3a:
         f4:0b:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org