Certificate

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/B23E86FDC2C6787B2FCE007A2F5C2DBAE27832EC.cer
File:                     B23E86FDC2C6787B2FCE007A2F5C2DBAE27832EC.cer (raw, json)
Hash identifier:          CVM5EqN9iAFzdS++j21PPMrEJZjRWbIAwrh3V1/fECU=
Subject key identifier:   B2:3E:86:FD:C2:C6:78:7B:2F:CE:00:7A:2F:5C:2D:BA:E2:78:32:EC
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       1E9CD4E3C9087FF7B32387587EBD10D7F5D5FA07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Manifest:                 rsync://invalid.rov.koenvanhove.nl/repo/KoenvanHoveInvalid/1/B23E86FDC2C6787B2FCE007A2F5C2DBAE27832EC.mft
caRepository:             rsync://invalid.rov.koenvanhove.nl/repo/KoenvanHoveInvalid/1
Notify URL:               https://invalid.rov.koenvanhove.nl/rrdp/notification.xml
Certificate not before:   Sat 16 Jul 2022 13:15:22 +0000
Certificate not after:    Sat 15 Jul 2023 13:20:22 +0000
Subordinate resources:    IP: 203.119.21.123/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9c:d4:e3:c9:08:7f:f7:b3:23:87:58:7e:bd:10:d7:f5:d5:fa:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 16 13:15:22 2022 GMT
            Not After : Jul 15 13:20:22 2023 GMT
        Subject: CN=B23E86FDC2C6787B2FCE007A2F5C2DBAE27832EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:0f:07:79:4c:39:71:e0:2e:9c:a6:6d:ad:
                    94:fc:5c:3f:56:11:78:77:2e:67:a0:0e:95:90:e1:
                    16:0d:0e:0c:e3:23:48:49:a3:e1:ae:dc:1e:57:0e:
                    08:dd:b7:86:6b:21:26:a4:01:68:fa:ad:6d:6f:d8:
                    e8:f4:fc:18:4d:14:9e:9a:2d:51:39:9b:13:cc:45:
                    01:3e:19:f0:73:98:aa:65:b8:bb:e8:2b:66:4e:2e:
                    1d:c9:49:fc:a2:70:a9:86:ec:9b:df:a8:41:dc:5c:
                    80:cc:5e:c0:eb:df:e5:2f:26:47:35:14:ee:40:b1:
                    4c:5e:ba:53:f7:6f:b7:f4:66:a5:64:cd:1e:7e:a9:
                    b3:f2:90:b3:d9:9a:a1:79:65:c1:32:76:89:14:8e:
                    f8:f5:ef:71:10:b2:a3:5b:ed:97:2c:f2:a7:cf:8e:
                    24:ee:f0:4c:88:7d:a3:37:54:0a:dd:f7:60:9e:d7:
                    a9:df:4d:7e:7e:c4:4c:93:1f:bd:5b:ab:1f:ec:12:
                    98:80:11:6b:c3:66:82:f0:f2:30:c3:b3:3e:3d:fb:
                    92:5e:e3:39:23:bc:13:8a:0a:2f:e5:4e:e9:65:06:
                    69:31:fd:09:e1:6e:87:85:e5:9f:7b:f0:4a:d2:35:
                    d1:57:56:13:89:ab:4e:10:3b:91:ac:5f:6c:ce:b9:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:3E:86:FD:C2:C6:78:7B:2F:CE:00:7A:2F:5C:2D:BA:E2:78:32:EC
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                CA Repository - URI:rsync://invalid.rov.koenvanhove.nl/repo/KoenvanHoveInvalid/1
                RPKI Manifest - URI:rsync://invalid.rov.koenvanhove.nl/repo/KoenvanHoveInvalid/1/B23E86FDC2C6787B2FCE007A2F5C2DBAE27832EC.mft
                RPKI Notify - URI:https://invalid.rov.koenvanhove.nl/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.123/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:b9:0c:de:03:f3:3d:75:60:1d:da:0d:22:fa:0a:a7:e8:
         7e:45:61:52:96:bf:bd:e2:a5:0e:b4:9d:f1:e7:fa:66:b3:ef:
         4f:ca:7f:d9:1c:dd:53:04:63:dd:bb:61:eb:a6:5a:76:e0:db:
         a3:b8:52:d9:66:60:af:ee:3a:f0:ba:b0:f9:3f:ee:8a:f9:de:
         61:2e:81:27:80:07:ae:1a:38:9d:de:19:df:ec:25:ee:2f:1b:
         4a:dd:d2:b3:61:30:c2:67:02:79:2e:2a:3d:c0:05:dc:b4:6a:
         e2:8a:e4:fd:41:dc:35:07:60:8e:c9:f9:5f:4c:05:58:3f:e6:
         55:58:05:eb:b6:8f:36:5f:fa:dd:e7:19:01:60:fc:52:8b:ef:
         62:83:1a:98:5c:60:cd:72:02:e6:84:e5:17:3d:97:f4:9f:14:
         07:59:b1:66:b2:49:f3:3e:d3:55:0f:d5:ef:97:ad:67:5f:da:
         39:10:09:7b:02:4f:17:ba:db:69:86:0b:c7:42:24:0c:b2:a7:
         72:64:e5:67:e0:02:22:49:82:4e:14:fd:dd:c4:39:27:82:e2:
         17:d0:e6:f3:4c:c7:5d:12:de:a5:76:84:fb:42:ad:c2:54:20:
         06:f8:2b:50:94:e0:5b:65:4a:f7:cc:20:1d:4b:d3:3d:db:97:
         d8:d6:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----