Certificate

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
File:                     781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer (raw, json)
Hash identifier:          nGqETjG7DiHz/+go/0G9B2QH84Yj73HFEPLSMPqS3WI=
Subject key identifier:   78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority key identifier: B3:D4:47:A1:EC:AB:29:EA:EF:7D:EF:42:81:DA:67:5A:FD:E5:AE:D3
Certificate issuer:       /CN=7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7
Certificate serial:       20EB315EDDA0DA9FC5055EC6E34091812477592A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 08:24:55 +0000
Certificate not after:    Mon 24 Oct 2022 08:29:55 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 5.45.36.0/22
                          IP: 181.41.192.0/19
                          IP: 185.135.156.0/22
                          IP: 185.170.56.0/22
                          IP: 2602:ff62::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:eb:31:5e:dd:a0:da:9f:c5:05:5e:c6:e3:40:91:81:24:77:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7
        Validity
            Not Before: Oct 25 08:24:55 2021 GMT
            Not After : Oct 24 08:29:55 2022 GMT
        Subject: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:07:0f:f9:a1:b6:d3:c2:1d:39:f6:a6:85:
                    10:08:46:1d:69:8e:95:3d:9e:0c:96:06:23:22:4e:
                    a2:58:1f:8d:82:43:29:c3:16:9b:38:14:6b:a5:45:
                    17:73:5d:ed:f2:10:f9:04:d6:0d:9d:89:fe:6b:35:
                    8e:36:be:2f:aa:33:25:07:f2:c1:60:ca:c6:fe:be:
                    3a:31:ea:34:7c:37:34:63:d2:9b:21:86:7b:3d:91:
                    c8:2c:ba:b5:48:2a:4d:a7:38:88:00:5b:2b:70:ea:
                    79:5f:ee:d1:7c:66:06:f0:7e:d3:c5:25:2c:30:fd:
                    e7:c3:3b:b3:c2:59:a3:55:02:78:13:23:f6:bd:84:
                    5b:13:0c:6b:fc:c0:c9:07:b0:ac:21:aa:a3:06:b4:
                    01:19:13:c4:c1:d7:00:5a:c8:78:b8:f2:27:8d:e2:
                    9d:06:29:11:ad:8b:6a:12:4a:8a:8d:5e:fe:2c:a2:
                    2a:18:9f:40:12:d9:a3:f4:03:b4:0d:81:8a:1d:0a:
                    12:7e:1a:ec:80:3a:88:6d:50:ba:db:ab:a5:d0:ce:
                    6c:ee:cd:b8:ee:0d:33:73:34:fb:a8:23:94:a0:4a:
                    67:36:27:97:fe:6e:b5:8f:1f:34:42:0d:a0:c1:17:
                    5f:26:05:02:44:26:2c:8a:eb:5d:a9:fb:03:3b:22:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
            X509v3 Authority Key Identifier:
                keyid:B3:D4:47:A1:EC:AB:29:EA:EF:7D:EF:42:81:DA:67:5A:FD:E5:AE:D3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/B3D447A1ECAB29EAEF7DEF4281DA675AFDE5AED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22
                  181.41.192.0/19
                  185.135.156.0/22
                  185.170.56.0/22
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:d8:34:13:b2:49:13:c0:73:59:60:1d:57:e0:98:53:5f:
         8e:d7:8c:70:68:44:01:32:98:bf:1c:86:c6:0f:f7:4f:63:3e:
         4a:b0:08:de:1e:77:1e:f0:4f:13:cd:55:fa:45:8d:6b:89:50:
         96:2d:b5:2f:84:8d:54:d2:61:2e:94:2c:5b:f6:7c:a2:c0:2b:
         9a:4f:49:c4:2f:f4:a1:9a:99:32:35:96:b6:e4:cf:44:0c:ef:
         ea:20:f3:46:06:62:1d:d4:7f:16:89:b7:4f:d6:df:9b:9b:e7:
         2f:62:09:ea:72:6b:1c:b5:86:f9:10:de:b2:9c:d7:5c:90:80:
         11:75:c4:ae:08:ab:41:a6:26:e7:4b:e7:cd:a8:5a:d6:d0:e7:
         de:b1:8b:ae:63:1d:b9:52:36:4e:d3:6e:fe:93:67:37:87:a0:
         8d:34:c5:ee:d4:ce:2b:ea:41:32:c7:c6:c8:b7:d8:19:c1:06:
         db:d8:3d:5f:25:9d:71:17:d0:48:5d:e6:39:e2:2e:a0:00:c7:
         f4:79:e6:6c:fc:c4:be:30:de:a1:9d:48:80:a2:5c:de:78:cc:
         f3:00:cf:8f:1e:17:cd:9a:87:45:30:f4:d7:83:8b:2a:06:7b:
         35:60:bc:09:4c:f4:3f:b4:f3:32:7c:3d:27:3f:01:a4:47:b8:
         6f:df:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org