Certificate

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
File:                     B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer (raw, json)
Hash identifier:          0ctFz6BdYjWj4cw/mQALp5tAyYF8Z68rqM4NI5r8N0E=
Subject key identifier:   B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority key identifier: 61:61:76:FA:FF:44:AC:F8:73:0A:F1:C1:2C:37:1B:1D:B4:7E:DC:EE
Certificate issuer:       /CN=7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3
Certificate serial:       3EE4BB3064E9B55DBA97FD2E08A09A348FBD7D5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Thu 17 Feb 2022 11:40:05 +0000
Certificate not after:    Thu 16 Feb 2023 11:45:05 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 5.45.36.0/22
                          IP: 181.41.192.0/19
                          IP: 185.135.156.0/22
                          IP: 185.170.56.0/22
                          IP: 2602:ff62::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:bb:30:64:e9:b5:5d:ba:97:fd:2e:08:a0:9a:34:8f:bd:7d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:4a:7d:73:23:55:38:32:0a:4d:89:bc:e4:
                    c7:71:6b:51:c3:aa:3b:99:d6:39:8b:cb:90:e4:52:
                    5b:51:e1:a2:d9:41:94:74:c8:bc:e0:f8:58:63:19:
                    6b:82:e2:83:22:03:2f:2d:ce:35:00:c6:21:8c:ea:
                    7d:c1:f1:c0:a7:3d:72:43:03:12:6d:2e:ac:85:15:
                    59:9d:e7:b4:79:08:fa:2b:9c:3f:82:f8:a2:01:5d:
                    a6:66:11:d3:69:41:b9:26:78:5b:4d:70:54:0a:19:
                    9e:c5:f9:c4:11:26:ce:34:19:9e:9e:f8:97:86:60:
                    8c:c7:69:fc:f2:2e:0f:55:ce:9d:2e:36:51:7f:e8:
                    61:b0:55:56:9e:01:39:3e:2b:55:c3:68:f9:b3:b2:
                    1c:87:d0:68:93:22:f8:c1:1a:89:2a:f3:d7:eb:05:
                    34:cf:cc:c0:ef:20:b2:94:51:69:18:d2:55:92:25:
                    15:45:18:a3:86:ba:9c:f6:aa:6e:f7:99:ac:59:97:
                    de:d2:fb:64:76:ec:d7:20:f0:53:1b:9f:35:b4:a7:
                    5f:38:8b:48:9d:d7:d3:e3:15:97:61:2a:af:9f:7f:
                    96:f4:79:02:fd:09:86:5c:50:40:43:ed:18:06:6c:
                    7d:a7:53:63:88:b6:4b:c4:3c:8c:81:bd:ee:25:66:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
            X509v3 Authority Key Identifier:
                keyid:61:61:76:FA:FF:44:AC:F8:73:0A:F1:C1:2C:37:1B:1D:B4:7E:DC:EE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/616176FAFF44ACF8730AF1C12C371B1DB47EDCEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22
                  181.41.192.0/19
                  185.135.156.0/22
                  185.170.56.0/22
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:e5:a8:e5:19:14:56:10:dc:a5:4b:e5:49:45:53:8a:32:
         a5:49:52:4e:f0:ce:e9:71:02:a1:66:7e:15:99:cf:f2:1b:00:
         2f:c7:82:10:7f:44:8d:e1:8d:73:29:98:cd:fb:9c:e0:cd:0d:
         e2:5d:74:40:9f:de:6f:cd:f9:98:6c:10:90:94:7f:d3:d4:42:
         d9:24:06:58:34:d9:6e:53:d7:da:6a:69:c7:bb:f7:f7:03:59:
         34:3e:73:76:bd:76:48:4d:5b:ad:9d:c6:98:55:4b:27:fb:b6:
         5b:c8:2d:98:5b:0c:5b:0d:cc:73:ed:4d:03:c1:8e:c0:96:95:
         5f:96:ed:7f:e3:df:4e:95:30:ba:d2:de:6d:28:36:81:de:9c:
         9c:8b:5f:65:a8:a3:9d:e6:6a:89:6d:ed:3f:d8:06:2f:52:65:
         6e:b3:00:61:b2:dc:af:d2:72:dc:38:58:62:27:1e:c3:0d:0c:
         4f:04:1b:b6:d7:3c:26:dd:24:50:c4:2c:bb:d4:b8:46:f4:f8:
         b4:27:f0:2d:61:de:ca:d7:9f:a7:ea:53:43:6b:ef:2b:de:b9:
         fe:63:c4:b1:5e:59:dc:5d:d6:3a:5f:60:00:64:b4:1b:c1:26:
         b9:ab:cb:42:11:60:22:f6:43:25:72:1e:be:b1:fc:e6:b9:55:
         db:0e:64:2a
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIUPuS7MGTptV26l/0uCKCaNI+9fVwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmJiMGYwYjdlMTVlZWE2ZTA2MGQ2ODJl
ZWM0NDAyMWVkM2ZiMWUyZDMwHhcNMjIwMjE3MTE0MDA1WhcNMjMwMjE2MTE0NTA1
WjAzMTEwLwYDVQQDEyhCMUE3REFBMjQ3Qjg4QUJGMjJEMjk4N0E0MTY1NERERThE
RDE5ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjNKfXMjVTgy
Ck2JvOTHcWtRw6o7mdY5i8uQ5FJbUeGi2UGUdMi84PhYYxlrguKDIgMvLc41AMYh
jOp9wfHApz1yQwMSbS6shRVZnee0eQj6K5w/gviiAV2mZhHTaUG5JnhbTXBUChme
xfnEESbONBmenviXhmCMx2n88i4PVc6dLjZRf+hhsFVWngE5PitVw2j5s7Ich9Bo
kyL4wRqJKvPX6wU0z8zA7yCylFFpGNJVkiUVRRijhrqc9qpu95msWZfe0vtkduzX
IPBTG581tKdfOItIndfT4xWXYSqvn3+W9HkC/QmGXFBAQ+0YBmx9p1NjiLZLxDyM
gb3uJWbuowIDAQABo4IDkzCCA48wDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
safaoke4ir8i0ph6QWVN3o3RmFUwHwYDVR0jBBgwFoAUYWF2+v9ErPhzCvHBLDcb
HbR+3O4wDgYDVR0PAQH/BAQDAgEGMIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6
Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlkYy00MzlmLTkx
MzMtYWQ1NDY1ZGMzNWQ1LTQvMi82MTYxNzZGQUZGNDRBQ0Y4NzMwQUYxQzEyQzM3
MUIxREI0N0VEQ0VFLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAC
hoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmU1NzlmNWItZWM3Ni00NTdiLTk5
ZDUtNDY2YzdlNGZlZmNjLzdmZDZhNTdmNDZiYjBmMGI3ZTE1ZWVhNmUwNjBkNjgy
ZWVjNDQwMjFlZDNmYjFlMmQzLmNlcjCCASsGCCsGAQUFBwELBIIBHTCCARkwVQYI
KwYBBQUHMAWGSXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQx
ZjI2LWY5ZGMtNDM5Zi05MTMzLWFkNTQ2NWRjMzVkNS0yLzIwgYIGCCsGAQUFBzAK
hnZyc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby85ZThkMWYyNi1mOWRj
LTQzOWYtOTEzMy1hZDU0NjVkYzM1ZDUtMi8yL0IxQTdEQUEyNDdCODhBQkYyMkQy
OTg3QTQxNjU0RERFOEREMTk4NTUubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL21h
Z2VsbGFuLmlweG8uY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQCBS0k
AwQFtSnAAwQCuYecAwQCuao4MA4EAgACMAgDBgQmAv9iADAfBggrBgEFBQcBCAEB
/wQQMA6gDDAKAgMGDw8CAwYRnzANBgkqhkiG9w0BAQsFAAOCAQEAIfPlqOUZFFYQ
3KVL5UlFU4oypUlSTvDO6XECoWZ+FZnP8hsAL8eCEH9EjeGNcymYzfuc4M0N4l10
QJ/eb835mGwQkJR/09RC2SQGWDTZblPX2mppx7v39wNZND5zdr12SE1brZ3GmFVL
J/u2W8gtmFsMWw3Mc+1NA8GOwJaVX5btf+PfTpUwutLebSg2gd6cnItfZaijneZq
iW3tP9gGL1JlbrMAYbLcr9Jy3DhYYiceww0MTwQbttc8Jt0kUMQsu9S4RvT4tCfw
LWHeytefp+pTQ2vvK965/mPEsV5Z3F3WOl9gAGS0G8EmuavLQhFgIvZDJXIevrH8
5rlV2w5kKg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org