Certificate

$ rpki-client -vvf rpki.co/repo/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
File:                     3FF5D408DA7870E6667792E8F8613A14C6562654.cer (raw, json)
Hash identifier:          4MRhuBa17J3LvgCt7tYKxjnDgIB/d0P/KRkhFvh7meo=
Subject key identifier:   3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54
Authority key identifier: 67:96:5B:F4:3B:44:5B:16:05:1D:4A:03:B9:F0:D6:BE:5A:D0:E2:A6
Certificate issuer:       /CN=67965bf43b445b16051d4a03b9f0d6be5ad0e2a6
Certificate serial:       7F4B248D301E717ED09179F0B937A3A002DAB7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5Zb9DtEWxYFHUoDufDWvlrQ4qY.cer
Manifest:                 rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
caRepository:             rsync://rpki.co/repo/AS945/4/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:44:00 +0000
Certificate not after:    Mon 20 May 2024 21:49:00 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4b:24:8d:30:1e:71:7e:d0:91:79:f0:b9:37:a3:a0:02:da:b7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67965bf43b445b16051d4a03b9f0d6be5ad0e2a6
        Validity
            Not Before: May 22 21:44:00 2023 GMT
            Not After : May 20 21:49:00 2024 GMT
        Subject: CN=3FF5D408DA7870E6667792E8F8613A14C6562654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:7c:5b:33:6d:59:f0:92:e8:d5:6a:e8:c8:
                    47:fd:9f:aa:23:15:35:c3:5c:e0:36:32:9c:e3:04:
                    1f:58:e0:dd:64:e8:54:b3:09:ad:e6:89:11:34:f4:
                    a8:92:e8:f9:72:8b:d0:0a:7b:4b:0d:72:62:6f:c8:
                    44:6b:b9:a4:fb:1a:32:87:c8:5b:55:ef:a2:9c:cd:
                    83:10:5d:6a:eb:75:bf:f9:8f:c7:19:f2:7c:bc:e3:
                    c9:73:a4:d3:64:8a:d4:4e:f8:8a:2b:ef:9f:a9:55:
                    76:c3:16:41:18:10:b9:a4:6d:31:a8:44:1f:92:5b:
                    02:ed:3f:23:55:dc:6d:ba:e2:13:9d:8c:59:f1:c4:
                    03:01:b9:d7:d8:a7:03:5f:52:e7:39:49:50:64:b0:
                    42:72:76:84:9e:ad:97:01:c8:8b:f9:47:5d:16:84:
                    c9:51:80:be:8d:df:8c:2b:9e:85:5d:25:ba:f4:f3:
                    7a:25:c6:a5:2d:45:2c:94:0e:cb:48:7c:c1:76:7c:
                    e1:62:d4:e2:8b:7f:c8:17:4e:2f:7b:ea:9d:c4:ea:
                    20:47:53:28:67:a6:35:6f:a3:e5:76:63:57:67:e2:
                    3a:a9:96:d2:f0:73:37:4e:91:5c:ca:f5:4f:0d:db:
                    91:28:ec:72:db:6d:c3:9e:cb:1d:73:7b:5c:30:6e:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54
            X509v3 Authority Key Identifier:
                keyid:67:96:5B:F4:3B:44:5B:16:05:1D:4A:03:B9:F0:D6:BE:5A:D0:E2:A6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/67965BF43B445B16051D4A03B9F0D6BE5AD0E2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5Zb9DtEWxYFHUoDufDWvlrQ4qY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/4/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         95:90:d5:be:4b:86:10:53:40:e8:12:68:e4:21:80:f6:17:99:
         a3:41:dd:fb:5a:02:f7:41:e1:d9:f8:06:af:2e:dc:5a:e5:6e:
         af:82:34:36:5f:0b:aa:91:f0:29:45:41:0f:b3:b8:f9:31:91:
         97:64:48:91:2a:b1:81:0e:1f:6a:4f:4d:98:ee:5b:07:6e:4c:
         de:ce:77:63:b5:a1:9e:93:b0:ba:4e:25:9f:9a:f8:9a:1f:99:
         42:a1:44:1b:42:7a:35:86:bf:fb:9b:8c:59:f0:f6:2d:4e:5b:
         79:a3:a6:fb:29:1b:cd:b7:c6:20:07:0e:0e:69:18:27:b8:20:
         fc:53:d1:1f:1d:1a:6e:7d:7d:ab:43:eb:d0:4e:f8:5d:a4:10:
         95:82:43:fd:54:a4:48:cd:ea:f0:5f:15:87:84:c9:11:4e:66:
         5a:7a:c1:be:f2:b8:58:d0:72:4c:09:53:4a:0f:8c:d4:f9:03:
         08:84:2c:b7:9a:03:b8:87:7d:46:a5:df:21:1a:6a:64:9b:81:
         be:9d:96:32:2c:4f:57:c1:b8:ec:73:c7:56:ef:00:7b:01:03:
         bd:5a:7f:0d:d9:20:2e:c1:5e:ee:18:e7:53:6f:5b:32:f9:7a:
         14:56:16:86:37:fa:67:d0:25:86:ba:15:b9:c4:f1:f2:0e:c9:
         9d:bb:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org