Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7.cer
File:                     7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7.cer (raw, json)
Hash identifier:          TWnU0qj7KPQ/J3TmOMyn3ShidpTOgw7ttCOOQ/xODVM=
Subject key identifier:   B3:D4:47:A1:EC:AB:29:EA:EF:7D:EF:42:81:DA:67:5A:FD:E5:AE:D3
Authority key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1
Certificate issuer:       /CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
Certificate serial:       010D0C9F4328583BA9306C5EC6DA8806457843B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/B3D447A1ECAB29EAEF7DEF4281DA675AFDE5AED3.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Thu 21 Oct 2021 08:25:53 +0000
Certificate not after:    Tue 21 Oct 2031 08:25:53 +0000
Subordinate resources:    AS: 397071
                          AS: 397727
                          IP: 5.45.36.0/22
                          IP: 181.41.192.0/19
                          IP: 185.135.156.0/22
                          IP: 185.170.56.0/22
                          IP: 2602:ff62::/36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:a9:30:6c:5e:c6:da:88:06:45:78:43:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc
        Validity
            Not Before: Oct 21 08:25:53 2021 GMT
            Not After : Oct 21 08:25:53 2031 GMT
        Subject: CN=7fd6a57f46d9d02509bdc5a3b90b8b7db5fa217c47e8e22cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:9a:ef:01:80:d0:89:cc:1d:9b:87:5a:77:
                    df:e3:21:41:46:b9:7b:41:66:b2:af:1c:9a:35:64:
                    97:5b:00:e2:91:fc:81:0b:55:3d:4d:fe:a3:87:5a:
                    0a:f7:f9:42:10:e4:7c:68:63:75:f1:fa:53:f7:cf:
                    7b:63:63:e2:f3:d6:a2:25:a8:bc:90:c7:34:e5:b6:
                    3b:eb:b8:65:af:99:26:a9:19:16:10:c5:5c:b2:7e:
                    1d:0f:04:62:65:c8:15:29:08:49:ac:aa:ae:e6:47:
                    12:64:8c:88:12:0f:c6:de:14:e2:55:d9:c5:24:25:
                    4b:32:8b:63:84:73:03:0e:54:e7:88:1e:54:7b:ec:
                    b8:ec:03:59:90:f4:7c:fa:9d:58:eb:d6:53:24:7d:
                    b1:4e:6b:19:5f:10:e3:04:ae:7b:8b:68:8d:a2:04:
                    08:15:74:db:0b:a0:22:0f:7a:01:38:c6:7c:c9:e8:
                    04:c4:c8:d3:aa:02:23:fd:76:4d:a6:f1:17:4e:d7:
                    fd:fd:39:c0:2e:9b:58:11:c7:7c:6f:c8:93:e8:2c:
                    4e:66:51:76:cd:49:c9:14:54:6d:9b:51:42:d5:a5:
                    a1:55:7b:12:56:02:18:c9:f6:cd:27:18:7b:a1:65:
                    d1:58:46:80:b8:77:9e:51:a2:e2:b8:e2:ec:97:96:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:47:A1:EC:AB:29:EA:EF:7D:EF:42:81:DA:67:5A:FD:E5:AE:D3
            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/B3D447A1ECAB29EAEF7DEF4281DA675AFDE5AED3.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22
                  181.41.192.0/19
                  185.135.156.0/22
                  185.170.56.0/22
                IPv6:
                  2602:ff62::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397071
                  397727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:0c:05:0d:1d:2b:e1:1a:10:df:6d:5a:20:d9:23:52:92:
         6b:3d:1f:ce:19:0e:71:cd:8c:67:58:fd:ac:ca:eb:41:4f:e1:
         e1:cb:b3:79:cf:96:1c:de:62:91:b1:01:8a:a6:53:e3:e0:28:
         3c:00:5a:9a:86:b6:c7:87:eb:74:66:91:d7:83:2b:f9:64:54:
         df:6e:59:74:38:9b:d7:0d:ab:1d:13:08:ec:3a:9e:2e:bc:4e:
         44:46:94:d4:e0:1d:7f:23:3c:f5:5c:12:e3:c9:e5:e3:78:f8:
         a4:f1:c9:60:7f:3f:ca:4e:e6:05:19:9c:14:03:fb:32:56:5b:
         60:78:fd:f1:d0:24:e7:19:b5:83:93:12:b7:2c:92:32:fd:b8:
         47:70:74:01:47:c6:8b:5b:96:58:0b:58:65:1a:53:da:d2:6f:
         99:dd:42:93:2e:77:0d:ea:c6:d6:f6:38:59:dc:fa:3f:d4:5d:
         e4:13:5b:0c:3d:c5:ec:03:63:84:aa:e8:8d:05:d8:52:e2:b9:
         40:3e:34:11:17:1b:8d:b3:e8:e9:88:36:57:ef:20:e3:5d:e2:
         78:dc:7a:b9:dc:91:ae:42:6e:35:ec:35:91:cf:4f:5e:79:2d:
         34:eb:f9:03:3e:2b:b5:34:a4:d3:2b:a1:97:ec:f2:76:47:a7:
         23:5d:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:58 2024 by rpki-client on console-fra.rpki-client.org