Certificate

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
File:                     481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer (raw, json)
Hash identifier:          M469yn5k93oloLnp+97PB2habQeMlMaIaqMMwyeHk0Y=
Subject key identifier:   48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       1891DBC9B15F5BA5B6D4A8DDB9EF22B9046D6DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Manifest:                 rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.mft
caRepository:             rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1
Notify URL:               https://rpki-test-repo.net.kagl.me/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 07:33:39 +0000
Certificate not after:    Tue 28 Nov 2023 07:38:39 +0000
Subordinate resources:    IP: 2a12:dd47:8600::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:db:c9:b1:5f:5b:a5:b6:d4:a8:dd:b9:ef:22:b9:04:6d:6d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 29 07:33:39 2022 GMT
            Not After : Nov 28 07:38:39 2023 GMT
        Subject: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:fe:2f:b1:14:ba:d0:de:d2:5c:ed:db:c4:
                    36:45:10:f5:b5:cb:38:ca:f4:d5:0f:18:2f:70:38:
                    4e:b1:38:ff:6a:fe:92:97:5e:f9:75:9a:db:dc:ec:
                    22:86:ab:5f:f4:90:bf:78:b8:3b:3f:fb:c2:32:da:
                    10:63:46:a4:65:f7:3a:d5:77:29:13:34:0f:4c:bd:
                    bd:d9:00:1b:ca:d5:22:b0:6e:7e:ab:d2:ca:80:c4:
                    c8:3d:d2:ff:4a:03:b8:9b:e0:58:0a:00:46:8c:4c:
                    7d:3f:4b:fc:58:af:c5:91:80:79:97:0f:c2:4c:9b:
                    79:f9:c2:af:83:50:ac:a9:57:43:2b:d9:2d:c0:79:
                    a4:3d:02:f4:6b:d4:2d:c0:85:ce:98:94:11:c5:42:
                    c7:06:c1:85:d9:f4:c1:0c:b8:5a:d1:8e:89:1e:e5:
                    7b:45:bf:fa:48:4c:42:bb:1b:43:38:75:8a:dd:48:
                    a9:2b:6b:a4:24:c1:69:ef:79:80:a0:5c:cd:99:5b:
                    6a:52:2b:8c:11:d8:e0:42:17:92:d6:8f:3a:40:a4:
                    7e:9f:31:4c:c3:0c:87:4a:07:09:c8:06:18:2d:f4:
                    24:3f:9e:8c:39:02:77:1a:7c:b7:af:f2:77:b3:1d:
                    31:d7:35:49:e5:d7:e1:31:7e:d1:b2:51:fc:b8:26:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1
                RPKI Manifest - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.mft
                RPKI Notify - URI:https://rpki-test-repo.net.kagl.me/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:99:08:d0:71:65:b6:03:00:d0:81:14:a1:42:bc:69:1b:3c:
         dc:15:27:2e:79:01:0a:ef:9f:b7:68:bc:4e:72:97:2d:f3:90:
         03:5e:71:f6:4d:c3:1d:b0:e1:3e:ae:ad:bd:b0:1d:6b:fb:26:
         8e:e3:59:77:f1:b6:f4:c4:14:37:94:d0:e5:0e:f7:26:91:4f:
         2d:07:a9:f6:02:f1:fa:9b:5f:f0:7f:12:d0:27:74:a2:e5:2c:
         ae:0b:5b:4c:bc:36:88:1f:c5:79:fa:64:6c:7e:cd:87:11:a2:
         c7:ab:55:5c:c8:c4:3c:0e:ac:fc:c5:18:a8:f3:af:d3:d1:17:
         dd:18:5c:fb:2c:b9:09:11:bd:0e:90:af:64:b0:48:6d:af:b4:
         16:d4:72:33:20:67:6a:5a:ad:7d:e1:e4:4c:0b:e1:c9:22:ea:
         ca:33:49:92:c7:42:4c:9b:fa:d3:9b:00:2e:67:64:5e:42:6d:
         16:9e:45:0d:51:ce:4e:e1:7c:23:02:b1:b6:52:03:b5:7a:05:
         a9:f2:9b:c9:84:a5:09:a5:f8:c8:7d:39:77:37:66:37:9b:15:
         3f:03:10:37:09:b3:44:c3:ea:b2:2d:f8:c3:b9:ca:ca:86:57:
         ad:08:82:8f:79:1a:69:65:58:6b:a0:bf:31:3b:eb:57:9f:8e:
         ca:6d:b7:33
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUGJHbybFfW6W21Kjdue8iuQRtbfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5ODExOWUxNWY4MTA4YWJhZDlkNWUxNTMwMThmYjQ2
NjVjYTYzMDAeFw0yMjExMjkwNzMzMzlaFw0yMzExMjgwNzM4MzlaMDMxMTAvBgNV
BAMTKDQ4MUEwMkI2NTZFRTBDM0U3MjYzNUJERUFEMzExNEFCNzQ2MUEyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dv4vsRS60N7SXO3bxDZFEPW1
yzjK9NUPGC9wOE6xOP9q/pKXXvl1mtvc7CKGq1/0kL94uDs/+8Iy2hBjRqRl9zrV
dykTNA9Mvb3ZABvK1SKwbn6r0sqAxMg90v9KA7ib4FgKAEaMTH0/S/xYr8WRgHmX
D8JMm3n5wq+DUKypV0Mr2S3AeaQ9AvRr1C3Ahc6YlBHFQscGwYXZ9MEMuFrRjoke
5XtFv/pITEK7G0M4dYrdSKkra6QkwWnveYCgXM2ZW2pSK4wR2OBCF5LWjzpApH6f
MUzDDIdKBwnIBhgt9CQ/now5AncafLev8nezHTHXNUnl1+ExftGyUfy4JsHxAgMB
AAGjggKPMIICizAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIGgK2Vu4MPnJj
W96tMRSrdGGi6TAfBgNVHSMEGDAWgBSUmBGeFfgQirrZ1eFTAY+0ZlymMDAOBgNV
HQ8BAf8EBAMCAQYwYAYDVR0fBFkwVzBVoFOgUYZPcnN5bmM6Ly9ycGtpLmF1Z3Vz
dC50dy9yZXBvL0hZU1AvNi85NDk4MTE5RTE1RjgxMDhBQkFEOUQ1RTE1MzAxOEZC
NDY2NUNBNjMwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbEpnUm5oWDRFSXE2
MmRYaFV3R1B0R1pjcGpBLmNlcjCCASEGCCsGAQUFBwELBIIBEzCCAQ8wTAYIKwYB
BQUHMAWGQHJzeW5jOi8vcnBraS10ZXN0LXJlcG8ubmV0LmthZ2wubWUvcmVwby9L
ZWF0b25BR0xhaXItUlBLSS1URVNULzEweQYIKwYBBQUHMAqGbXJzeW5jOi8vcnBr
aS10ZXN0LXJlcG8ubmV0LmthZ2wubWUvcmVwby9LZWF0b25BR0xhaXItUlBLSS1U
RVNULzEvNDgxQTAyQjY1NkVFMEMzRTcyNjM1QkRFQUQzMTE0QUI3NDYxQTJFOS5t
ZnQwRAYIKwYBBQUHMA2GOGh0dHBzOi8vcnBraS10ZXN0LXJlcG8ubmV0LmthZ2wu
bWUvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HhjANBgkqhkiG9w0B
AQsFAAOCAQEAB5kI0HFltgMA0IEUoUK8aRs83BUnLnkBCu+ft2i8TnKXLfOQA15x
9k3DHbDhPq6tvbAda/smjuNZd/G29MQUN5TQ5Q73JpFPLQep9gLx+ptf8H8S0Cd0
ouUsrgtbTLw2iB/FefpkbH7NhxGix6tVXMjEPA6s/MUYqPOv09EX3Rhc+yy5CRG9
DpCvZLBIba+0FtRyMyBnalqtfeHkTAvhySLqyjNJksdCTJv605sALmdkXkJtFp5F
DVHOTuF8IwKxtlIDtXoFqfKbyYSlCaX4yH05dzdmN5sVPwMQNwmzRMPqsi34w7nK
yoZXrQiCj3kaaWVYa6C/MTvrV5+Oym23Mw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:58 2023 by rpki-client on console-fra.rpki-client.org