Certificate

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.cer
File:                     A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.cer (raw, json)
Hash identifier:          f7exy09Qe6ik4aLqqKmpADRHOOTa550ov7CNAjQ9pWo=
Subject key identifier:   A8:28:E0:14:7C:D8:DE:9E:7A:47:4D:CD:F0:6A:D9:6F:B3:77:38:EE
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Certificate issuer:       /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial:       3CE1615F7040C8F7B48F5BFD77FD98FB6D248B47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Manifest:                 rsync://rpki.zsq.im/repo/cernet_child/1/A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.mft
caRepository:             rsync://rpki.zsq.im/repo/cernet_child/1/
Notify URL:               https://rpki.zsq.im/rrdp/notification.xml
Certificate not before:   Wed 26 Jun 2024 06:11:55 +0000
Certificate not after:    Wed 25 Jun 2025 06:16:55 +0000
Subordinate resources:    IP: 103.165.111.0/24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:61:5f:70:40:c8:f7:b4:8f:5b:fd:77:fd:98:fb:6d:24:8b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
        Validity
            Not Before: Jun 26 06:11:55 2024 GMT
            Not After : Jun 25 06:16:55 2025 GMT
        Subject: CN=A828E0147CD8DE9E7A474DCDF06AD96FB37738EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:91:6c:91:75:46:ba:29:10:b6:af:bd:5f:
                    0b:71:c2:26:90:b8:ec:f7:ef:71:55:dc:52:e5:3b:
                    22:9e:fb:6e:f8:cb:f5:d4:e2:83:cf:89:39:4a:3a:
                    39:7c:60:a8:05:bf:dc:cb:01:c1:d3:dc:27:0b:38:
                    85:55:ce:9a:44:76:0f:15:db:14:6f:bd:69:b6:9e:
                    b4:0f:78:92:3a:0d:0e:3b:b9:65:9b:90:fa:5a:98:
                    dd:fa:58:a5:c3:6b:f5:21:27:0b:16:c6:d3:05:df:
                    19:83:4f:c5:28:28:eb:5d:83:06:c1:f7:0b:e4:41:
                    6d:30:42:24:ba:14:88:c2:3f:64:fb:c1:47:73:7d:
                    9c:be:6f:e6:91:f6:5a:bf:8b:0e:be:5d:2a:b4:9b:
                    f4:15:55:4e:0f:68:d5:76:3c:8a:ac:35:87:7b:24:
                    ab:6e:a7:4e:b8:5b:8e:44:28:08:86:ba:9e:36:fe:
                    0b:be:90:f3:33:08:c9:dd:66:bd:db:52:ac:d6:ba:
                    45:21:3f:03:da:17:25:5f:24:4d:ef:3a:24:72:14:
                    54:9e:95:05:2d:b2:0f:14:25:43:9f:9f:20:c0:c5:
                    92:97:b2:17:d9:9a:bd:55:68:91:c8:00:26:10:61:
                    d7:c4:1a:79:5d:4a:4e:23:1d:88:35:0f:7f:c3:19:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:28:E0:14:7C:D8:DE:9E:7A:47:4D:CD:F0:6A:D9:6F:B3:77:38:EE
            X509v3 Authority Key Identifier:
                keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zsq.im/repo/cernet_child/1/
                RPKI Manifest - URI:rsync://rpki.zsq.im/repo/cernet_child/1/A828E0147CD8DE9E7A474DCDF06AD96FB37738EE.mft
                RPKI Notify - URI:https://rpki.zsq.im/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:18:87:ae:3b:16:9b:7c:e2:b7:d5:5c:62:be:24:fe:01:
         e8:e4:d6:48:c6:4d:ef:c3:99:fb:27:19:53:14:f9:48:30:6f:
         15:05:f9:b6:9d:b3:4f:00:21:25:74:a1:89:15:82:21:27:cb:
         f3:23:ab:d9:de:8b:38:6c:7d:00:d8:68:46:55:11:6d:30:b4:
         b7:b0:1d:1b:b5:62:4c:e6:fd:70:ad:8b:c2:b7:1f:9c:b6:1c:
         b9:04:9a:08:f1:cc:27:80:ae:e1:ee:34:77:6e:e7:28:4d:d5:
         56:ca:6c:84:9f:64:cb:02:f4:07:12:c6:34:00:b7:e1:a4:d8:
         ca:0c:9c:34:d2:6d:6d:49:15:f6:01:9b:aa:86:0e:26:d4:7b:
         3b:03:f4:46:00:73:f9:e4:93:4b:f1:57:c1:66:29:73:b4:32:
         f6:85:d5:31:32:e5:45:0d:00:4d:06:dc:c8:d6:2c:48:aa:9b:
         f9:1a:a2:a1:f3:01:c4:db:b3:b4:80:a6:70:e0:a0:09:05:63:
         1f:da:b7:ad:61:c6:fb:b1:3c:39:b0:af:ee:a8:9b:a4:36:6e:
         7d:92:ee:0f:65:09:e6:88:5f:97:63:d9:bf:e8:1a:73:81:df:
         39:e0:c0:0c:e7:4c:27:d6:c8:ca:6b:67:a7:c8:ab:06:ab:3f:
         44:14:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----