Certificate

$ rpki-client -vvf rpki.co/repo/AS945/10/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.cer
File:                     2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.cer (raw, json)
Hash identifier:          YOtK+52HUuEANUOObX7BOF2aUOveoC1rCoGMvd9XQ9Q=
Subject key identifier:   2B:5A:0F:F6:78:D2:DF:A6:FE:09:2B:57:BF:09:11:8C:6D:0D:81:2A
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       59BD5371CA13C6F01C0464F1B353EE042DD67421
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Manifest:                 rsync://rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft
caRepository:             rsync://rsync.rpki.co/rpki/rsync/1/
Notify URL:               https://rsync.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 09:40:47 +0000
Certificate not after:    Wed 02 Oct 2024 09:45:47 +0000
Subordinate resources:    AS: 1012

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bd:53:71:ca:13:c6:f0:1c:04:64:f1:b3:53:ee:04:2d:d6:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Oct  4 09:40:47 2023 GMT
            Not After : Oct  2 09:45:47 2024 GMT
        Subject: CN=2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:79:dc:9d:19:8d:54:b7:95:6e:4e:44:0e:
                    62:86:8b:f3:38:58:22:3c:84:00:d5:3c:2e:a0:45:
                    f4:fb:ad:e4:94:24:99:56:7e:67:2c:0f:89:b8:60:
                    27:88:74:3a:35:9d:9e:3a:16:2e:f9:16:3c:84:48:
                    5b:4f:3c:d5:73:04:9b:7d:b0:23:1a:7c:8b:d9:5d:
                    99:21:fe:38:06:56:60:c9:fd:3d:d8:cc:c4:bd:8c:
                    9b:40:d4:18:dd:59:5a:fc:1a:6e:3e:e6:79:e5:30:
                    94:8c:d9:4a:69:16:8a:46:65:c1:7b:11:18:43:fc:
                    fa:1d:01:f6:fa:cb:00:e7:0a:d3:e6:dd:8f:d4:ab:
                    97:5e:d9:76:67:c2:b5:69:3e:d2:84:b8:97:18:d1:
                    68:fb:a7:89:84:fc:9b:b5:1e:2e:05:75:2a:40:50:
                    6c:71:3b:1d:a5:be:2f:87:09:99:83:fb:38:73:ab:
                    62:a9:10:5c:d0:a1:14:4b:dd:06:e4:52:35:30:fc:
                    3d:8e:97:49:9e:b5:8a:85:7c:f2:13:df:4a:88:b0:
                    30:fc:d2:c1:3f:37:3c:e9:56:d5:73:85:38:43:08:
                    59:0a:8b:3d:94:43:b5:2b:a6:f7:84:cc:04:6a:ee:
                    36:b5:0f:39:d5:3d:18:98:c4:4f:f7:5b:f4:25:63:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:5A:0F:F6:78:D2:DF:A6:FE:09:2B:57:BF:09:11:8C:6D:0D:81:2A
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rpki.co/rpki/rsync/1/
                RPKI Manifest - URI:rsync://rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft
                RPKI Notify - URI:https://rsync.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

    Signature Algorithm: sha256WithRSAEncryption
         82:80:74:2e:dc:b8:3a:ac:58:58:a1:01:af:03:33:74:d9:91:
         f4:d8:9b:1a:4a:9a:e8:c6:fc:a3:a3:61:2c:f5:84:f0:73:e7:
         2e:89:ca:b9:13:73:ad:d2:ce:95:4a:79:9a:ad:fe:79:1e:29:
         dd:b0:26:01:14:3e:76:7e:cb:9b:83:33:6c:d7:ae:b4:24:52:
         57:5e:56:42:f0:81:62:ec:76:24:5c:de:8a:19:89:e8:1e:78:
         4d:55:3c:56:61:57:ae:2b:a8:3e:bf:10:34:b9:3a:8f:69:9a:
         7e:c1:51:e6:da:44:84:ae:a0:b3:93:59:6c:6e:0b:69:f4:45:
         80:d7:2f:bb:90:c0:bc:45:d0:c0:f6:7f:f1:08:9e:31:67:23:
         83:a9:11:bd:de:59:ac:94:98:db:e0:0a:c2:ad:91:f8:19:61:
         13:75:15:68:13:69:f8:fc:bc:ee:17:2d:22:9d:43:ac:d5:a5:
         e7:db:25:b9:22:17:6a:3d:f0:be:b8:b6:b4:32:f9:82:57:12:
         9b:60:01:69:01:33:35:dd:14:29:3f:84:19:09:ca:f6:f7:18:
         94:92:b6:25:bc:69:ed:02:97:86:9e:b7:b1:9c:07:f4:62:01:
         ed:1c:0e:31:6d:d7:14:96:f9:8b:ce:25:6f:ed:b2:37:62:8c:
         03:ef:d7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 01:27:44 2024 by rpki-client on console-fra.rpki-client.org