Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/13D12C9AC9565A446FDB7ECF31FF247B6A5D3E3E.cer
File:                     13D12C9AC9565A446FDB7ECF31FF247B6A5D3E3E.cer (raw, json)
Hash identifier:          KdgeeAC2JzSH4krbZu8W2d5118IZ6F2G/P+Cycz/zmU=
Subject key identifier:   13:D1:2C:9A:C9:56:5A:44:6F:DB:7E:CF:31:FF:24:7B:6A:5D:3E:3E
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       6593EEC5D9874893589CF3D6977A2372686242C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Manifest:                 rsync://rpki.co/repo/HYSP/11/13D12C9AC9565A446FDB7ECF31FF247B6A5D3E3E.mft
caRepository:             rsync://rpki.co/repo/HYSP/11
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:20:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:25:03 +0000
Subordinate resources:    IP: 104.37.42.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:93:ee:c5:d9:87:48:93:58:9c:f3:d6:97:7a:23:72:68:62:42:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Apr  8 07:20:03 2023 GMT
            Not After : Apr  6 07:25:03 2024 GMT
        Subject: CN=13D12C9AC9565A446FDB7ECF31FF247B6A5D3E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:11:7d:56:e6:de:8b:d6:33:77:11:51:0b:
                    9a:bc:13:6f:be:64:06:6e:5f:2e:c4:be:f1:5e:29:
                    a6:b7:68:25:24:d2:f3:a9:63:bb:cd:c4:c8:12:a2:
                    75:0f:8b:13:12:9e:0e:58:ba:17:72:87:b0:06:19:
                    53:7c:90:3b:f9:a7:9f:b5:1e:d5:6c:a1:ea:37:30:
                    33:ac:c3:af:8b:17:2b:f0:89:22:02:98:f6:ad:5b:
                    22:63:b0:0c:ff:25:2d:6e:17:90:8f:2e:f9:a8:97:
                    29:54:62:f1:42:70:1c:37:fb:f9:23:a7:f3:a5:ac:
                    8f:a5:55:b5:2d:c8:a7:d1:6d:7e:df:6c:ef:dc:d7:
                    54:31:ac:b1:c7:1a:48:52:06:83:30:35:74:ef:22:
                    52:b0:56:1a:37:f8:40:7c:90:45:8a:34:d4:f1:6f:
                    21:c2:b7:d2:cf:8a:aa:fc:d7:09:97:d6:4d:9f:89:
                    b7:9d:08:7d:ed:af:5c:39:8b:74:b0:de:f4:4c:44:
                    83:19:7c:b7:b3:b2:1a:17:96:7e:0b:88:f0:53:40:
                    75:2d:e0:f3:22:fb:a3:52:bd:5e:ab:38:79:c4:30:
                    64:7e:b3:5b:6c:4e:d6:94:6f:15:90:7c:eb:b8:6e:
                    ce:69:fe:46:43:35:22:66:74:7d:02:f7:92:45:d7:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:D1:2C:9A:C9:56:5A:44:6F:DB:7E:CF:31:FF:24:7B:6A:5D:3E:3E
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/11
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/11/13D12C9AC9565A446FDB7ECF31FF247B6A5D3E3E.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:7a:4c:84:28:43:65:de:84:a4:7d:fb:03:98:6d:49:19:58:
         bc:e1:ed:9b:2a:fc:6a:22:3e:f6:2b:a6:9c:c4:cf:a4:f0:ff:
         4b:60:48:bf:ef:1f:11:5d:19:0e:63:ef:96:4b:2e:d9:da:9b:
         cf:92:fa:c2:be:9a:52:c6:c2:7d:ca:99:ec:a3:ec:18:d7:bd:
         61:39:2a:be:db:f5:72:5e:72:19:ae:68:db:ce:41:77:ce:75:
         c8:31:ca:4c:a5:71:b7:c7:af:73:3d:f9:b8:b3:ad:5e:e5:c0:
         b7:22:30:50:b7:bd:be:26:d2:df:66:89:c1:ad:52:1e:d9:e8:
         f0:bb:97:9a:a6:1b:55:d7:53:d4:39:31:6e:d9:d4:50:29:10:
         84:e1:8f:b2:db:83:67:d0:18:bb:01:6c:71:9f:e1:ae:5f:ab:
         87:e3:0d:c7:c6:7d:32:70:5c:1b:ed:6e:a7:02:eb:d8:7a:85:
         56:aa:51:1d:40:e1:2f:3d:eb:6a:81:20:8c:d4:07:be:aa:b0:
         78:f0:34:a1:df:84:7f:1c:e8:e2:c5:cf:d3:28:ac:43:83:7b:
         17:d3:84:c0:eb:8c:d2:2e:83:fa:75:4b:91:d7:45:a4:71:be:
         54:64:5b:bb:f0:56:bc:0b:00:a7:36:28:cd:de:75:08:9b:13:
         e4:8c:3a:d6
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIUZZPuxdmHSJNYnPPWl3ojcmhiQsIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGJiZmI1YjMyYjRjYTQ0MjhlYzY3YjJk
ZWU0NGMyODgxMDM3ZWIwNTUwHhcNMjMwNDA4MDcyMDAzWhcNMjQwNDA2MDcyNTAz
WjAzMTEwLwYDVQQDEygxM0QxMkM5QUM5NTY1QTQ0NkZEQjdFQ0YzMUZGMjQ3QjZB
NUQzRTNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLoRfVbm3ovW
M3cRUQuavBNvvmQGbl8uxL7xXimmt2glJNLzqWO7zcTIEqJ1D4sTEp4OWLoXcoew
BhlTfJA7+aeftR7VbKHqNzAzrMOvixcr8IkiApj2rVsiY7AM/yUtbheQjy75qJcp
VGLxQnAcN/v5I6fzpayPpVW1Lcin0W1+32zv3NdUMayxxxpIUgaDMDV07yJSsFYa
N/hAfJBFijTU8W8hwrfSz4qq/NcJl9ZNn4m3nQh97a9cOYt0sN70TESDGXy3s7Ia
F5Z+C4jwU0B1LeDzIvujUr1eqzh5xDBkfrNbbE7WlG8VkHzruG7Oaf5GQzUiZnR9
AveSRdcGiQIDAQABo4IC5TCCAuEwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
E9EsmslWWkRv237PMf8ke2pdPj4wHwYDVR0jBBgwFoAUJnGBsKXdONYLzCKIE0LG
T/yMvB8wDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAx
ODIzYmQ0NTQ3NTJiZTYvMC8yNjcxODFCMEE1REQzOEQ2MEJDQzIyODgxMzQyQzY0
RkZDOENCQzFGLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlh
LTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwNjVhY2MtYmVlZC00MTE1LWJjNmMt
NjNkZTIzMmYyYTA0LzAyYmEzZjUyNTRiYmZiNWIzMmI0Y2E0NDI4ZWM2N2IyZGVl
NDRjMjg4MTAzN2ViMDU1LmNlcjCBxAYIKwYBBQUHAQsEgbcwgbQwKAYIKwYBBQUH
MAWGHHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTEwVQYIKwYBBQUHMAqGSXJz
eW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTEvMTNEMTJDOUFDOTU2NUE0NDZGREI3
RUNGMzFGRjI0N0I2QTVEM0UzRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBr
aS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWglKjANBgkqhkiG9w0B
AQsFAAOCAQEAq3pMhChDZd6EpH37A5htSRlYvOHtmyr8aiI+9iumnMTPpPD/S2BI
v+8fEV0ZDmPvlksu2dqbz5L6wr6aUsbCfcqZ7KPsGNe9YTkqvtv1cl5yGa5o285B
d851yDHKTKVxt8evcz35uLOtXuXAtyIwULe9vibS32aJwa1SHtno8LuXmqYbVddT
1DkxbtnUUCkQhOGPstuDZ9AYuwFscZ/hrl+rh+MNx8Z9MnBcG+1upwLr2HqFVqpR
HUDhLz3raoEgjNQHvqqwePA0od+Efxzo4sXP0yisQ4N7F9OEwOuM0i6D+nVLkddF
pHG+VGRbu/BWvAsApzYozd51CJsT5Iw61g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org