Certificate

$ rpki-client -vvf rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
File:                     AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer (raw, json)
Hash identifier:          Gnt2hXMvQgtuUq2KPUhb+W3CA4VCGjOguj8QQdA7ETI=
Subject key identifier:   AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority key identifier: 50:EB:1A:F3:8E:AB:DE:95:EB:D6:8D:91:64:22:8B:64:74:88:E8:74
Certificate issuer:       /CN=50eb1af38eabde95ebd68d9164228b647488e874
Certificate serial:       09C3D16D4F6090F09B2A413EA1B79E548E567A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOsa846r3pXr1o2RZCKLZHSI6HQ.cer
Manifest:                 rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
caRepository:             rsync://rpki.co/repo/AS945/5/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:43:54 +0000
Certificate not after:    Mon 20 May 2024 21:48:54 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:d1:6d:4f:60:90:f0:9b:2a:41:3e:a1:b7:9e:54:8e:56:7a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50eb1af38eabde95ebd68d9164228b647488e874
        Validity
            Not Before: May 22 21:43:54 2023 GMT
            Not After : May 20 21:48:54 2024 GMT
        Subject: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:ce:3a:54:96:fd:8e:25:c6:da:fa:7d:aa:
                    bd:76:49:13:01:7f:21:f9:f2:44:dd:93:17:ae:07:
                    30:75:fc:b0:74:43:1a:6d:b2:07:14:a9:55:9b:64:
                    48:ab:8a:4e:24:aa:c5:3e:95:6c:1e:f5:2a:57:51:
                    a6:21:da:c7:90:74:88:8e:f5:5a:24:ed:b6:00:d3:
                    38:91:3f:44:7b:77:5d:55:df:6b:d4:dd:95:37:97:
                    12:a8:87:e2:b6:28:30:9b:c9:43:d5:3b:9b:c7:c0:
                    e3:b0:63:4c:7f:6f:e8:cc:50:70:58:ac:b7:6c:8c:
                    db:24:37:de:d2:3d:e8:75:92:cb:d0:c2:75:fe:b1:
                    4c:3e:ee:9c:70:69:f3:48:e0:64:96:4e:24:ba:71:
                    ed:01:2a:98:4b:f1:7d:24:32:12:6b:a1:ae:40:ec:
                    f2:c0:16:bc:88:5a:7c:18:30:2f:e1:3d:6b:80:6a:
                    f0:a4:79:00:83:1d:ce:8e:08:d7:97:a4:20:96:03:
                    af:39:05:8f:85:e5:5c:85:a2:57:2a:6e:2d:6d:e7:
                    38:23:ed:1f:a8:6c:ef:1c:c3:cb:05:d6:9b:00:f4:
                    f5:1c:f3:c7:fc:84:3f:16:99:61:7e:d8:97:27:43:
                    a8:b8:c6:6d:6c:14:ae:ba:95:47:69:21:2c:c4:86:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
            X509v3 Authority Key Identifier:
                keyid:50:EB:1A:F3:8E:AB:DE:95:EB:D6:8D:91:64:22:8B:64:74:88:E8:74

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOsa846r3pXr1o2RZCKLZHSI6HQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/5/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:dd:3d:42:d7:7b:47:3a:1f:c0:da:d9:d7:12:c3:e2:6b:
         b0:f9:44:12:b9:35:ee:4f:72:f1:63:6c:30:50:67:6b:23:d7:
         b2:54:c7:eb:8a:d4:41:76:11:f0:cb:6a:8b:de:8e:e9:b2:c8:
         bc:44:f5:dc:2d:28:72:7a:39:28:3c:ec:b2:ab:06:68:12:7d:
         95:c3:bd:c0:ec:bf:dd:ec:1c:97:9e:cc:cd:bd:91:9d:cc:65:
         af:52:ba:25:bd:19:4d:ec:6f:f5:35:49:6b:81:a7:b4:0c:56:
         c7:8b:40:a5:a2:f3:53:93:59:78:74:52:d0:f3:68:e0:af:c8:
         c4:9b:1e:7c:9c:30:b9:2c:ef:5e:e8:8d:fc:0f:7b:fa:18:23:
         f3:71:6a:92:4a:e2:97:10:c9:b2:de:26:c0:3a:a3:4c:04:77:
         f5:f3:47:96:9e:ea:80:3b:49:de:62:20:94:86:b8:7b:fb:b9:
         72:e4:64:c9:2d:bb:70:0e:9d:46:b3:24:54:59:ba:3e:aa:16:
         e5:f7:86:6d:60:f7:8a:8d:06:5e:ac:a6:d2:4f:e7:f3:42:18:
         95:8b:a3:b6:cb:c8:d6:70:04:2b:a1:93:66:61:a4:b7:1c:90:
         33:ae:54:43:f5:3c:fa:bd:6a:d9:3e:38:d1:48:36:cb:43:83:
         4f:71:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org