Certificate

$ rpki-client -vvf rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
File:                     481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer (raw, json)
Hash identifier:          ny1tidK8A78VuMvtmlv2jfuSI36VAu+xdd3bPzdiahU=
Subject key identifier:   48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       7D3D0B529D696A3264E2429DB1C1F840D295EBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Manifest:                 rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.mft
caRepository:             rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1
Notify URL:               https://rpki-test-repo.net.kagl.me/rrdp/notification.xml
Certificate not before:   Sat 23 Jul 2022 05:44:03 +0000
Certificate not after:    Sat 22 Jul 2023 05:49:03 +0000
Subordinate resources:    IP: 2a12:dd47:8600::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3d:0b:52:9d:69:6a:32:64:e2:42:9d:b1:c1:f8:40:d2:95:eb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Jul 23 05:44:03 2022 GMT
            Not After : Jul 22 05:49:03 2023 GMT
        Subject: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:fe:2f:b1:14:ba:d0:de:d2:5c:ed:db:c4:
                    36:45:10:f5:b5:cb:38:ca:f4:d5:0f:18:2f:70:38:
                    4e:b1:38:ff:6a:fe:92:97:5e:f9:75:9a:db:dc:ec:
                    22:86:ab:5f:f4:90:bf:78:b8:3b:3f:fb:c2:32:da:
                    10:63:46:a4:65:f7:3a:d5:77:29:13:34:0f:4c:bd:
                    bd:d9:00:1b:ca:d5:22:b0:6e:7e:ab:d2:ca:80:c4:
                    c8:3d:d2:ff:4a:03:b8:9b:e0:58:0a:00:46:8c:4c:
                    7d:3f:4b:fc:58:af:c5:91:80:79:97:0f:c2:4c:9b:
                    79:f9:c2:af:83:50:ac:a9:57:43:2b:d9:2d:c0:79:
                    a4:3d:02:f4:6b:d4:2d:c0:85:ce:98:94:11:c5:42:
                    c7:06:c1:85:d9:f4:c1:0c:b8:5a:d1:8e:89:1e:e5:
                    7b:45:bf:fa:48:4c:42:bb:1b:43:38:75:8a:dd:48:
                    a9:2b:6b:a4:24:c1:69:ef:79:80:a0:5c:cd:99:5b:
                    6a:52:2b:8c:11:d8:e0:42:17:92:d6:8f:3a:40:a4:
                    7e:9f:31:4c:c3:0c:87:4a:07:09:c8:06:18:2d:f4:
                    24:3f:9e:8c:39:02:77:1a:7c:b7:af:f2:77:b3:1d:
                    31:d7:35:49:e5:d7:e1:31:7e:d1:b2:51:fc:b8:26:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1
                RPKI Manifest - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.mft
                RPKI Notify - URI:https://rpki-test-repo.net.kagl.me/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:de:81:56:15:39:4b:88:0f:3e:62:e0:61:c9:6f:8c:79:dd:
         30:01:b1:40:f4:9e:92:5b:95:4a:5a:6e:08:bd:29:7b:23:d4:
         e0:d4:69:0e:08:44:b9:2a:80:7e:1e:49:27:92:91:7b:51:bc:
         34:86:d4:a9:b7:71:c7:eb:62:6c:28:34:c7:47:ad:af:a4:13:
         b8:2d:1c:07:53:94:18:27:54:a7:28:76:dc:f0:00:04:44:bd:
         98:d6:49:55:3a:5a:d0:01:a8:b1:5d:cc:ae:df:4a:d7:dd:a5:
         95:2e:2b:e1:87:30:4d:97:b0:0d:43:2b:42:74:3c:84:9e:2e:
         01:16:ea:50:84:b3:10:2b:b5:72:83:c8:c3:d3:8d:a5:c3:82:
         c1:49:f9:92:08:26:e7:81:02:5a:c1:e1:47:46:72:e0:18:e4:
         c8:6c:e3:ee:fc:d6:89:d1:f3:a8:f3:38:ce:14:9c:cc:63:73:
         b3:50:fa:4c:b2:fc:85:27:86:7e:3e:d1:00:9f:70:b4:e2:d3:
         a2:4a:37:ef:0f:bb:0b:e8:fa:1c:87:5c:e0:4a:d2:f8:67:85:
         03:88:c6:24:71:27:e9:29:ab:6d:94:f0:88:46:18:e1:48:76:
         6d:d7:d0:5a:88:1b:92:c9:0a:8a:f9:c0:96:fa:e3:6d:31:75:
         23:3e:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----