Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
File:                     AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer (raw, json)
Hash identifier:          VhKN6/3osQp1PydeprOMAx9RMdjuQRcGGzS3T4ovxOQ=
Subject key identifier:   AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       3F5E98D82674A09DDA3FE8C3B7F6C92395CD9397
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 13:07:55 +0000
Certificate not after:    Thu 19 Jun 2025 13:12:55 +0000
Subordinate resources:    IP: 2a12:dd47:3300::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5e:98:d8:26:74:a0:9d:da:3f:e8:c3:b7:f6:c9:23:95:cd:93:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 13:07:55 2024 GMT
            Not After : Jun 19 13:12:55 2025 GMT
        Subject: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:0a:1a:9f:16:1f:5e:ef:c5:85:a0:e2:34:
                    17:27:7d:de:11:4e:04:9a:b6:78:49:01:a9:fb:e0:
                    92:fc:ce:d4:c2:c0:22:46:9b:b1:31:e0:cb:83:ff:
                    10:ce:b1:6d:3a:84:cd:0f:75:b7:ff:7b:40:3c:0a:
                    56:25:b5:50:bd:8b:34:f2:2f:4f:dd:8a:6e:03:29:
                    56:a1:ec:c1:04:e4:47:70:7f:98:ac:6a:e0:f9:10:
                    f1:b0:0a:00:9a:39:82:10:96:2b:c9:1c:63:aa:30:
                    95:c8:80:3b:8f:83:58:61:7c:09:e4:1b:a1:02:b8:
                    3f:ce:99:fb:73:84:31:99:6f:9e:f7:d3:5d:6a:67:
                    28:1f:bd:ef:c2:88:b6:b7:3c:8b:bd:9e:5f:96:5a:
                    d7:be:6b:cc:61:f5:fe:2b:b9:88:d0:42:71:c5:f5:
                    bd:ad:e4:50:57:7a:03:54:07:ba:2e:11:4d:f5:f2:
                    f5:a8:b8:0c:dd:16:d9:8a:ac:28:14:42:fc:66:c5:
                    82:a8:b6:ff:f0:77:0c:9b:c3:d9:41:05:27:16:dd:
                    45:1c:87:9b:20:7c:aa:c2:36:20:44:fb:f5:c6:96:
                    ce:3f:09:a6:f8:7b:58:99:34:4e:9b:53:07:fe:58:
                    c1:74:0b:3f:78:71:f0:f0:83:71:55:e8:61:bd:03:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:93:0a:de:c3:dc:48:05:df:0d:54:1f:a4:58:06:42:98:39:
         b2:80:fb:a7:77:a7:51:b4:ea:58:1b:cf:b0:5b:45:f8:7d:c2:
         d5:97:4e:9c:af:07:1b:1b:f9:78:49:70:72:80:e6:03:8e:c9:
         9b:c8:b6:cd:7a:12:90:2f:bb:c5:aa:d5:7a:04:ee:8a:0a:76:
         bd:b3:a3:a5:21:2d:20:ed:26:14:92:f0:ff:74:83:45:66:39:
         8f:50:2e:d8:45:9d:fa:71:0d:29:3d:a9:1e:97:0e:bd:fa:16:
         3d:91:6a:36:c7:c6:7f:f3:6f:ef:42:72:27:2f:4b:c1:2c:f8:
         5e:a1:86:5d:a1:11:2e:45:0e:ec:1d:78:01:01:36:74:d8:97:
         7f:f2:9d:1a:ca:36:67:8f:a4:b1:d8:61:6b:f2:ae:c8:d2:b3:
         cd:b3:99:da:ab:db:04:b0:6e:6d:74:be:a5:0b:6b:da:18:a4:
         e7:fd:7f:64:5c:df:a4:56:f6:e6:9b:35:9e:28:3b:05:ad:16:
         f6:2f:f7:e2:fd:16:ed:9e:8a:0f:e9:7a:c8:b9:db:43:90:00:
         66:ed:79:8a:29:a4:ae:d0:93:b0:42:c3:94:3a:ec:d6:e1:13:
         7d:d3:f2:31:0d:17:98:e9:23:02:ed:cb:e9:0a:15:cb:24:cc:
         22:5b:a7:00
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUP16Y2CZ0oJ3aP+jDt/bJI5XNk5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxMzA3NTVaFw0yNTA2MTkxMzEyNTVaMDMxMTAvBgNV
BAMTKEFFMTI0NzJEQTFFMEFGRDJCMEU5RDVEQzZGNEVERTE2QzREMTExQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mwoanxYfXu/FhaDiNBcnfd4R
TgSatnhJAan74JL8ztTCwCJGm7Ex4MuD/xDOsW06hM0Pdbf/e0A8ClYltVC9izTy
L0/dim4DKVah7MEE5Edwf5isauD5EPGwCgCaOYIQlivJHGOqMJXIgDuPg1hhfAnk
G6ECuD/OmftzhDGZb573011qZygfve/CiLa3PIu9nl+WWte+a8xh9f4ruYjQQnHF
9b2t5FBXegNUB7ouEU318vWouAzdFtmKrCgUQvxmxYKotv/wdwybw9lBBScW3UUc
h5sgfKrCNiBE+/XGls4/Cab4e1iZNE6bUwf+WMF0Cz94cfDwg3FV6GG9A6B1AgMB
AAGjggLUMIIC0DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuEkctoeCv0rDp
1dxvTt4WxNERzzAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzEyODI3
MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVjLzIvMIGLBggrBgEFBQcwCoZ/
cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4
MjcxZS1jMjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMi9BRTEyNDcyREExRTBB
RkQyQjBFOUQ1REM2RjRFREUxNkM0RDExMUNGLm1mdDA8BggrBgEFBQcwDYYwaHR0
cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAqEt1HMzANBgkqhkiG9w0BAQsFAAOCAQEAMZMK3sPcSAXfDVQfpFgGQpg5
soD7p3enUbTqWBvPsFtF+H3C1ZdOnK8HGxv5eElwcoDmA47Jm8i2zXoSkC+7xarV
egTuigp2vbOjpSEtIO0mFJLw/3SDRWY5j1Au2EWd+nENKT2pHpcOvfoWPZFqNsfG
f/Nv70JyJy9LwSz4XqGGXaERLkUO7B14AQE2dNiXf/KdGso2Z4+ksdhha/KuyNKz
zbOZ2qvbBLBubXS+pQtr2hik5/1/ZFzfpFb25ps1nig7Ba0W9i/34v0W7Z6KD+l6
yLnbQ5AAZu15iimkrtCTsELDlDrs1uETfdPyMQ0XmOkjAu3L6QoVyyTMIlunAA==
-----END CERTIFICATE-----