Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
File:                     C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer (raw, json)
Hash identifier:          41j+hp5FzI0hb468ZGXPIw2MlRQLkM2h2CJWmDjLl7o=
Subject key identifier:   C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       04196125478008C4F3988017D9BB6505ADE85A1D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.mft
caRepository:             rsync://rpki.co/repo/yuki/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 01:01:17 +0000
Certificate not after:    Tue 10 Sep 2024 01:06:17 +0000
Subordinate resources:    IP: 2a06:1287:5600::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:19:61:25:47:80:08:c4:f3:98:80:17:d9:bb:65:05:ad:e8:5a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep 12 01:01:17 2023 GMT
            Not After : Sep 10 01:06:17 2024 GMT
        Subject: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:a3:bc:8a:d9:85:29:14:b5:9c:98:84:de:
                    83:44:aa:29:b9:6e:e3:f3:21:75:4f:18:0f:1b:a4:
                    b6:6b:41:39:cc:3b:d7:34:8d:5c:e3:96:e2:72:f1:
                    8a:73:96:81:69:c8:d7:e6:15:3a:43:c7:eb:02:3c:
                    71:20:51:2c:0b:9c:23:8d:f2:3f:83:41:1f:73:eb:
                    17:b2:ab:ed:67:d2:93:e2:d0:9a:07:4a:c4:3b:c6:
                    d5:63:00:0b:0b:d7:ea:1c:39:f6:26:c4:e9:eb:57:
                    6b:62:f3:3c:7e:8d:6b:98:bf:62:5f:71:e1:18:c0:
                    3a:0f:24:94:5a:da:b4:51:70:60:59:1a:7f:d2:7a:
                    a6:38:6d:2e:cf:a1:30:96:aa:bc:3e:96:22:ae:8e:
                    56:1a:a5:99:dc:f1:24:a8:a4:fc:d4:2f:cb:f0:a5:
                    d8:1e:53:04:7c:92:8f:20:4a:3b:cc:e8:fa:13:12:
                    f0:af:33:d7:dc:1b:eb:54:40:75:6a:c6:35:23:20:
                    6d:58:34:84:5b:ce:61:18:09:f2:5c:e7:e3:95:e4:
                    5e:50:b3:d4:82:53:69:7c:85:b7:02:79:e5:a0:cf:
                    50:80:a8:aa:e0:99:e8:90:02:4e:9f:87:d3:48:fd:
                    fe:40:f7:2c:5b:e4:a4:be:74:8f:4a:d8:b6:a4:6b:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/yuki/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5600::/39

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:a8:ec:43:7b:78:ea:f2:ad:7b:69:72:cc:39:54:ff:5d:
         61:6a:6a:6a:86:c9:df:e4:d7:11:ec:80:67:d8:79:a6:3f:36:
         90:dd:a0:37:94:b4:e9:aa:b8:c7:52:31:fb:13:4d:46:70:af:
         0a:b1:5c:14:f0:54:d8:df:79:2a:39:1c:21:d2:ed:ed:51:f8:
         6f:e0:07:66:51:b3:3d:a4:fe:51:1f:62:0c:86:00:7b:e2:73:
         00:53:96:11:3e:e6:9a:08:15:0e:b9:4c:5e:43:c5:24:72:58:
         e1:5a:5c:ff:ca:1e:2d:02:88:ac:0b:09:c2:b7:bc:11:1d:9a:
         9e:77:2f:d9:54:8c:95:0c:3f:82:0d:cb:eb:c6:a7:30:7a:d2:
         f6:30:bf:ee:0d:45:16:3f:1f:c1:7f:47:3d:80:cf:fc:67:99:
         29:01:df:f3:96:5f:08:72:8e:22:24:e8:1a:70:b0:6f:24:e5:
         8d:07:e7:f3:91:f0:12:b2:8b:7a:a7:9f:fe:9b:86:1a:2d:75:
         ce:c5:30:bd:e6:c6:af:03:5c:6a:6f:5d:2f:85:b4:c6:81:9a:
         b2:53:c4:e6:04:af:7b:a6:a6:cc:62:fe:a9:f2:a4:35:8a:1a:
         7b:77:1d:16:a1:b5:0a:dc:ce:78:2f:b5:28:8a:a7:aa:28:77:
         69:ec:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----