Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3.cer
File:                     7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3.cer (raw, json)
Hash identifier:          Y0RKzV/W3yzUwxleI2vFft9ggYFVaWPMDZmwxUTiQWg=
Subject key identifier:   61:61:76:FA:FF:44:AC:F8:73:0A:F1:C1:2C:37:1B:1D:B4:7E:DC:EE
Authority key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1
Certificate issuer:       /CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
Certificate serial:       010D0C9F4328583CF5C349D5566E052B873218C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/616176FAFF44ACF8730AF1C12C371B1DB47EDCEE.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Thu 17 Feb 2022 11:30:10 +0000
Certificate not after:    Tue 17 Feb 2032 11:30:10 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 5.45.36.0/22
                          IP: 181.41.192.0/19
                          IP: 185.135.156.0/22
                          IP: 185.170.56.0/22
                          IP: 2602:ff62::/36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f5:c3:49:d5:56:6e:05:2b:87:32:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
        Validity
            Not Before: Feb 17 11:30:10 2022 GMT
            Not After : Feb 17 11:30:10 2032 GMT
        Subject: CN=7fd6a57f46bb0f0b7e15eea6e060d682eec44021ed3fb1e2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:99:66:7a:c7:1b:4a:c2:84:9e:8c:0c:00:
                    1f:16:62:1c:55:f3:1c:26:f2:5f:a8:8a:8b:c3:8c:
                    78:28:f1:8c:07:a4:5f:42:dd:6b:e2:a0:39:50:c7:
                    3b:ac:dc:9e:13:9e:de:cf:6b:9b:a4:c5:e6:8f:69:
                    5c:5e:a2:7c:e0:16:97:01:18:25:7f:61:59:54:13:
                    6f:a1:c6:7a:b3:94:24:4e:6c:fd:e6:65:c1:b3:97:
                    d8:f6:77:41:8a:9e:6a:25:08:8c:37:00:dc:1c:df:
                    c0:bd:6d:b9:02:84:3c:d0:70:13:73:23:24:d3:04:
                    c1:52:ea:c0:86:24:ad:a5:dc:8b:93:86:21:a2:b1:
                    75:1d:e4:07:70:0c:69:c2:8a:20:ce:41:60:a5:c2:
                    56:9d:84:8f:99:7a:22:06:77:18:08:3f:0f:b5:d6:
                    24:d9:43:df:8d:4a:df:e9:bc:a3:87:e7:c0:66:be:
                    ef:45:ee:cf:35:5f:94:98:bf:17:30:34:8e:da:b0:
                    1e:ca:03:d4:d1:63:ff:5c:bd:af:89:19:8d:5f:76:
                    e6:c1:8b:2d:89:ca:0e:92:e9:df:fb:ca:cc:bb:4d:
                    66:e7:76:82:32:fa:29:6b:dd:92:87:f1:d7:6c:0a:
                    56:75:2c:1b:a9:00:a5:32:92:b1:32:6b:78:26:d6:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:76:FA:FF:44:AC:F8:73:0A:F1:C1:2C:37:1B:1D:B4:7E:DC:EE
            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/616176FAFF44ACF8730AF1C12C371B1DB47EDCEE.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22
                  181.41.192.0/19
                  185.135.156.0/22
                  185.170.56.0/22
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:77:bf:05:43:e8:72:79:83:2c:59:6b:c0:d6:cd:0e:ed:1b:
         21:c8:7e:16:d3:ed:48:37:43:2a:5b:1b:20:6a:b2:3c:d6:33:
         c7:1a:95:08:0e:c3:8e:ff:75:e7:fe:0c:6f:62:c3:95:b0:71:
         02:d0:21:75:8b:7e:94:02:85:5c:8f:c1:de:98:60:00:49:e4:
         66:4a:e9:ff:70:a7:10:11:8d:03:ca:f7:20:c1:c5:32:06:2b:
         87:aa:b9:9d:93:3e:20:7c:1b:32:c5:bf:71:3d:bb:26:92:f7:
         e1:c0:7f:7a:d0:cd:5e:6d:42:d9:79:0d:3b:2d:34:04:34:b1:
         85:b6:45:2b:52:72:ef:46:a4:73:d1:fd:23:5b:a2:15:a2:45:
         96:ae:64:df:6d:d7:db:84:1d:d0:de:aa:b9:ac:24:05:01:16:
         19:b3:35:92:86:9b:4e:f6:76:f4:8d:53:12:60:b1:9b:76:29:
         7a:75:fd:e8:92:32:fe:4c:52:ec:2f:fe:55:19:22:1e:68:af:
         1a:e4:ae:c9:b7:e7:17:7b:bb:aa:f4:ad:0b:42:99:d5:51:7b:
         75:b5:5d:77:68:1d:84:54:f8:85:a6:0e:bf:11:a0:96:b8:29:
         60:cd:5e:f7:5b:e6:6b:ad:87:d1:28:ba:ca:80:7c:19:78:11:
         5c:1f:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org