Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer
File:                     B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer (raw, json)
Hash identifier:          2W0FFZKfSool2/TuAdhACE9ja/gr2OAwKT+KU4PBpU8=
Subject key identifier:   B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7EFFCD493485BC1600FA51D05B9134B77E98AA8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Dec 2024 07:43:49 +0000
Certificate not after:    Mon 01 Dec 2025 07:48:49 +0000
Subordinate resources:    IP: 2001:df4:64c0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ff:cd:49:34:85:bc:16:00:fa:51:d0:5b:91:34:b7:7e:98:aa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec  2 07:43:49 2024 GMT
            Not After : Dec  1 07:48:49 2025 GMT
        Subject: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:6b:25:1d:73:6e:a5:dd:3b:ae:84:19:15:
                    0d:e9:64:bb:6b:d7:04:34:69:6f:b3:ca:ff:b2:a2:
                    55:23:62:7a:40:12:6a:91:20:08:db:23:de:07:bf:
                    33:c5:b4:00:35:83:f4:04:ef:03:e6:9a:c7:98:e3:
                    b1:ee:fb:1e:4b:18:f2:cc:09:73:fc:91:b6:da:b9:
                    5a:ba:19:04:cc:24:1a:67:34:19:23:35:fc:32:b5:
                    39:bc:d4:c9:7a:ae:83:bf:0e:e7:75:f0:a2:e6:12:
                    ee:10:63:80:7a:75:90:7a:b6:59:fe:02:c6:0d:e6:
                    e7:2c:0d:8a:d2:15:7f:ce:35:c6:e7:b6:59:84:10:
                    71:5c:a6:b5:59:37:a8:2d:e2:fd:e9:77:6e:5f:3d:
                    53:84:47:57:47:77:2c:80:61:12:af:19:c1:f6:49:
                    b5:69:02:05:ad:1f:af:b4:46:3d:78:bd:16:d8:fa:
                    6e:7d:6e:cd:c9:f0:8c:9f:c5:10:f8:46:0f:40:b0:
                    aa:da:da:20:b8:12:7a:29:2b:0f:a6:a6:f1:82:ad:
                    22:9e:39:9f:ac:30:65:8f:2a:31:e3:d8:b5:5e:67:
                    b7:8e:f0:53:ef:63:77:e6:d2:85:a9:8c:0a:6d:c2:
                    91:cb:47:5a:a2:3c:c3:80:8f:e7:ef:8d:50:8a:e6:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:64c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:20:c3:dc:8d:17:51:0d:7b:40:0c:86:10:55:df:99:50:
         44:ea:d9:dc:9d:52:96:76:a9:62:ba:3a:9c:11:92:65:dc:de:
         30:1d:00:64:40:d2:4e:f1:ed:e2:51:2c:30:b3:38:d6:40:ee:
         c1:40:ec:e6:f8:34:f4:4a:5e:82:4a:6f:1d:d4:3c:47:38:b5:
         cb:63:be:4f:b7:bb:0f:e8:14:3d:14:26:d8:61:45:4b:dc:22:
         b4:ed:eb:2d:3a:64:cd:58:1d:6b:6d:4f:5b:21:a6:c7:3c:3e:
         fb:87:78:d2:a2:f5:0c:86:f2:ca:c2:db:c1:1f:76:89:6d:13:
         e2:06:19:84:2a:33:28:f4:5c:c5:80:9d:77:0e:7d:c7:97:e1:
         4c:d8:04:2f:89:9b:ea:50:16:9d:92:26:61:b2:41:d8:2c:e0:
         23:0c:66:f3:07:79:37:e2:cd:7a:07:17:b6:91:30:f2:8e:bf:
         06:59:a5:59:cb:29:c7:19:a1:42:20:4c:4f:09:15:9e:4f:7f:
         af:d4:44:2e:2d:d4:f5:b2:d5:b5:ad:9f:f5:3b:e3:a1:34:9d:
         88:5f:93:bf:a5:f6:3b:50:85:d7:5a:c6:81:b2:04:57:59:70:
         e9:95:6f:57:35:aa:30:e9:53:58:8c:d9:6c:29:2c:99:82:2f:
         5c:49:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:06:12 2025 by rpki-client