Certificate

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/0EF08BF30C2B241280ADBCAE7C990A29BC03F94E.cer
File:                     0EF08BF30C2B241280ADBCAE7C990A29BC03F94E.cer (raw, json)
Hash identifier:          ztyvuCTogq5ZULRAKU1ON7dyBkhBE0n/Jxf+whmTou0=
Subject key identifier:   0E:F0:8B:F3:0C:2B:24:12:80:AD:BC:AE:7C:99:0A:29:BC:03:F9:4E
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       4544A0CD1D1096BF547055715713177C591A98BF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Manifest:                 rsync://repo.rpki.space/repo/infiniroute-proxiflare/0/0EF08BF30C2B241280ADBCAE7C990A29BC03F94E.mft
caRepository:             rsync://repo.rpki.space/repo/infiniroute-proxiflare/0/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Tue 28 May 2024 17:36:48 +0000
Certificate not after:    Tue 27 May 2025 17:41:48 +0000
Subordinate resources:    IP: 2a0b:9e42::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:44:a0:cd:1d:10:96:bf:54:70:55:71:57:13:17:7c:59:1a:98:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 17:36:48 2024 GMT
            Not After : May 27 17:41:48 2025 GMT
        Subject: CN=0EF08BF30C2B241280ADBCAE7C990A29BC03F94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:ef:36:3e:24:2d:5b:1c:81:23:cb:e0:f9:
                    f8:f3:fa:02:5e:0e:a8:84:e4:7a:a5:84:ce:ee:5a:
                    57:82:81:99:60:ee:0a:cd:3b:3b:dc:85:6b:93:3c:
                    f7:60:e6:b4:07:c7:0a:3f:a3:3e:79:a6:45:d9:70:
                    9d:21:cf:5e:bd:41:dd:c2:a9:ef:93:7a:18:b8:60:
                    e5:bd:d3:4f:82:a1:a2:ab:6d:ab:7b:81:f1:cb:5d:
                    bf:99:7d:47:58:88:ae:89:e0:8f:56:a0:dc:17:dd:
                    9b:0f:f6:de:9d:4b:39:26:79:5b:6a:00:eb:11:a4:
                    b3:ed:6f:2c:e2:65:52:2c:a6:91:0a:96:03:3b:c3:
                    e2:b6:3d:4e:43:c7:7b:06:9a:90:10:e6:c7:b9:a4:
                    1e:25:50:1f:a1:59:12:b3:6a:79:34:25:53:b6:14:
                    81:50:71:70:b6:fa:82:93:1c:9e:93:56:0f:28:19:
                    83:11:8d:dc:11:34:44:4c:b5:80:b9:54:8d:9e:5e:
                    f5:be:8e:24:e9:9a:3b:1d:e8:05:72:72:05:25:f0:
                    bd:78:af:39:b5:eb:89:28:74:af:8a:81:c0:f0:00:
                    b7:f2:81:85:4a:3d:87:20:89:ba:c5:20:db:97:9e:
                    a1:ea:a4:5e:68:e4:86:fc:d7:b3:7a:8a:0d:c3:fa:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:F0:8B:F3:0C:2B:24:12:80:AD:BC:AE:7C:99:0A:29:BC:03:F9:4E
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/0/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/0/0EF08BF30C2B241280ADBCAE7C990A29BC03F94E.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e42::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:49:c1:d2:5b:59:a5:80:93:71:87:34:5c:c9:09:a6:bd:
         1c:02:83:bb:ef:86:a5:18:1b:99:c9:c4:a6:c5:f3:fb:f7:c9:
         25:c3:99:d2:96:24:72:f0:44:7d:82:cd:74:be:1c:6c:16:1e:
         92:ef:77:e0:94:53:35:56:b4:67:72:4d:df:da:7e:7f:35:28:
         42:2d:ca:77:03:47:cb:31:44:49:60:98:7e:dd:c1:1b:f4:b5:
         67:8e:42:8d:c6:28:ef:10:ae:24:52:d2:83:08:8d:6b:de:e4:
         55:ad:8c:3b:3d:13:cf:e8:7e:2d:ea:05:a2:9d:a8:dc:e3:eb:
         03:c0:53:3e:14:6b:2d:75:b3:b0:cf:ef:b5:61:23:33:5b:cb:
         98:30:2a:12:f5:66:aa:79:77:2f:b7:24:ed:74:0a:72:f7:8e:
         db:fb:ad:ac:9f:06:43:ce:64:59:5d:0d:8e:4d:b7:94:cf:77:
         db:af:7d:6d:ea:a2:a7:f8:0e:db:c3:45:f1:85:62:1a:78:63:
         fb:fc:3e:18:9d:0c:5c:f0:89:87:c3:d2:36:19:4d:2a:48:08:
         e4:0a:b4:b9:1c:d0:a5:2d:c9:02:b3:1d:61:85:fd:20:c5:ec:
         3f:98:98:dc:8f:40:c5:f1:77:c3:d9:6d:41:5f:b5:53:89:f2:
         67:e8:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----