Certificate

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
File:                     4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer (raw, json)
Hash identifier:          POD2/fXeo/GRY7hRNo72iEB/8q0z0O4tuUMbdb3/jVM=
Subject key identifier:   44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority key identifier: 91:C4:86:3D:8E:4D:37:19:A1:90:C9:DA:6F:67:68:9A:94:70:88:44
Certificate issuer:       /CN=44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b
Certificate serial:       1B29A7B55CFAB8BFD9351DEA1BC03895299F0A38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 12:49:47 +0000
Certificate not after:    Mon 24 Oct 2022 12:54:47 +0000
Subordinate resources:    AS: 15244
                          AS: 23273
                          AS: 32241
                          AS: 40092
                          AS: 394738
                          IP: 45.56.216.0/21
                          IP: 45.114.224.0/22
                          IP: 64.50.160.0/19
                          IP: 66.102.128.0/20
                          IP: 67.210.96.0/19
                          IP: 74.50.0.0/19
                          IP: 89.35.92.0/22
                          IP: 103.26.140.0/22
                          IP: 162.213.0.0/22
                          IP: 172.96.176.0/21
                          IP: 190.92.160.0/21
                          IP: 192.228.112.0/20
                          IP: 204.44.192.0/20
                          IP: 208.68.104.0/22
                          IP: 208.76.40.0/22
                          IP: 208.79.216.0/22
                          IP: 209.200.224.0/19
                          IP: 216.7.88.0/21
                          IP: 216.97.224.0/20
                          IP: 216.227.208.0/20
                          IP: 2604:9780::/32
                          IP: 2605:6f00::/32
                          IP: 2606:bd00::/32
                          IP: 2606:c680::/32
                          IP: 2620:b:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:a7:b5:5c:fa:b8:bf:d9:35:1d:ea:1b:c0:38:95:29:9f:0a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b
        Validity
            Not Before: Oct 25 12:49:47 2021 GMT
            Not After : Oct 24 12:54:47 2022 GMT
        Subject: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:42:7c:85:dc:33:ea:90:76:a7:a5:35:03:
                    e4:2e:97:20:8d:ba:2b:96:8e:9d:7c:33:13:95:8b:
                    db:95:f8:64:cf:4e:93:df:4a:e5:b1:55:2d:84:2f:
                    eb:19:9c:1c:61:bf:ea:ee:86:ec:ca:51:47:bb:09:
                    e1:12:86:df:a0:bc:e0:ba:6c:70:76:bc:ac:e8:48:
                    e9:69:31:76:79:6b:0b:51:46:af:b9:d5:3a:a1:d9:
                    fd:56:ec:1a:a8:f9:4b:18:bd:90:46:36:19:45:fb:
                    f5:7d:05:2a:b2:35:47:0c:70:d0:d3:1c:c1:e2:66:
                    0e:dd:61:db:b7:7b:dd:94:6b:5e:cf:9a:c3:a0:39:
                    b8:60:cb:24:ad:dc:fc:38:cb:87:2a:1d:a2:d3:ff:
                    1a:b4:c2:8e:31:28:10:f4:b8:bd:1d:cd:3e:5d:ce:
                    78:44:e8:77:9d:38:8d:af:92:be:1c:31:a3:dc:d6:
                    12:43:20:cd:cf:bb:0a:44:12:c2:4b:ac:38:91:01:
                    ea:40:ed:36:53:ef:3b:f2:a8:10:e4:c5:91:8b:cd:
                    ac:88:52:45:79:05:b4:ae:a8:45:9a:f2:4c:b4:1a:
                    08:ba:ac:9b:c1:28:98:d8:83:ac:3a:87:b5:7b:a9:
                    39:71:0f:e9:ae:11:99:4f:64:9c:b5:de:0a:59:0d:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
            X509v3 Authority Key Identifier:
                keyid:91:C4:86:3D:8E:4D:37:19:A1:90:C9:DA:6F:67:68:9A:94:70:88:44

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/91C4863D8E4D3719A190C9DA6F67689A94708844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325cfea697731e6cf8324739124f71c65f77eaa87b.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.216.0/21
                  45.114.224.0/22
                  64.50.160.0/19
                  66.102.128.0/20
                  67.210.96.0/19
                  74.50.0.0/19
                  89.35.92.0/22
                  103.26.140.0/22
                  162.213.0.0/22
                  172.96.176.0/21
                  190.92.160.0/21
                  192.228.112.0/20
                  204.44.192.0/20
                  208.68.104.0/22
                  208.76.40.0/22
                  208.79.216.0/22
                  209.200.224.0/19
                  216.7.88.0/21
                  216.97.224.0/20
                  216.227.208.0/20
                IPv6:
                  2604:9780::/32
                  2605:6f00::/32
                  2606:bd00::/32
                  2606:c680::/32
                  2620:b:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15244
                  23273
                  32241
                  40092
                  394738

    Signature Algorithm: sha256WithRSAEncryption
         25:db:ed:88:c7:a3:33:8e:8c:46:69:26:6a:57:1d:8b:14:ba:
         9d:da:a2:e7:eb:9e:88:fd:22:ae:58:1d:9f:f8:7c:1b:15:ae:
         2b:81:50:c2:c9:b2:a3:c6:f0:3b:b5:86:c1:9f:ef:21:1c:4a:
         d8:79:42:4b:8a:74:13:63:51:56:6e:dd:fb:c5:55:40:6b:dc:
         f6:14:9d:41:4d:1e:aa:08:d2:6d:63:9e:51:c8:1e:08:2a:fa:
         48:de:6e:b9:ec:5d:b0:92:f6:f4:99:82:27:2a:ad:f3:a3:26:
         ca:78:58:8b:3d:21:97:03:9d:0a:3e:a0:5d:53:c3:0a:d3:73:
         f6:14:83:e5:42:c5:1b:72:0f:32:cd:1a:e9:80:32:b8:20:08:
         88:e2:7c:df:b9:12:c7:74:e6:83:6a:8f:c1:23:f2:c8:e5:37:
         52:4e:b0:14:64:94:e0:37:18:f5:a4:52:ee:24:ad:71:30:89:
         41:25:62:98:50:eb:8a:72:81:26:82:79:17:16:18:42:7e:99:
         b9:33:4f:a6:4a:92:07:a7:cb:b1:cf:2c:8e:cb:3a:70:e6:09:
         64:eb:9e:d4:f2:a6:ce:3b:b7:6b:24:1b:3e:c9:27:51:c1:77:
         6e:96:6f:c7:cc:8c:34:7e:33:ec:82:b3:aa:1f:be:89:0c:ba:
         37:fd:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org