Certificate

$ rpki-client -vvf rpki.co/repo/August/15/8D6938E003E519E96B0A9EEC938E98EDAC0F5E65.cer
File:                     8D6938E003E519E96B0A9EEC938E98EDAC0F5E65.cer (raw, json)
Hash identifier:          G25tLC1MDq+cFbZVt0DGQcuU+RxjjKGSGRscC5mfzeo=
Subject key identifier:   8D:69:38:E0:03:E5:19:E9:6B:0A:9E:EC:93:8E:98:ED:AC:0F:5E:65
Authority key identifier: 0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B
Certificate issuer:       /CN=0caa1bd8666a6c4bea6632a9febccc30ed92905b
Certificate serial:       7CD5CBAC11581E424A1AD97D7729E0DB4418E1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKob2GZqbEvqZjKp_rzMMO2SkFs.cer
Manifest:                 rsync://rpki.co/repo/AS945/16/8D6938E003E519E96B0A9EEC938E98EDAC0F5E65.mft
caRepository:             rsync://rpki.co/repo/AS945/16/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 14:17:39 +0000
Certificate not after:    Thu 19 Sep 2024 14:22:39 +0000
Subordinate resources:    AS: 48103

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d5:cb:ac:11:58:1e:42:4a:1a:d9:7d:77:29:e0:db:44:18:e1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa1bd8666a6c4bea6632a9febccc30ed92905b
        Validity
            Not Before: Sep 21 14:17:39 2023 GMT
            Not After : Sep 19 14:22:39 2024 GMT
        Subject: CN=8D6938E003E519E96B0A9EEC938E98EDAC0F5E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:93:7a:2e:48:3a:98:32:34:a7:bf:b7:78:
                    0f:2c:28:a6:0f:d4:f8:8c:a7:2c:8f:52:36:73:24:
                    eb:76:8b:52:59:50:c1:fb:52:c6:42:27:e6:79:39:
                    e6:f4:82:2d:ea:29:1d:58:24:a7:f4:f7:9e:b7:7b:
                    60:67:e3:cd:02:5c:8e:d2:35:bf:97:ce:8f:c1:38:
                    ff:f0:dc:2a:00:9e:dc:d9:ac:30:b8:6b:ea:d7:66:
                    b8:52:37:00:76:90:2b:6f:30:c8:62:a2:9a:82:ad:
                    2d:9f:a1:81:05:bf:8e:0c:4e:f3:8e:54:a5:46:84:
                    50:a5:23:ef:87:01:6a:c5:cd:36:0f:ed:24:47:d4:
                    7d:cd:70:e0:34:3a:47:0e:d6:68:4f:0c:99:6c:1f:
                    2a:2c:34:83:e9:81:89:da:6b:ae:f0:8a:d8:3a:7c:
                    1d:2b:31:5c:26:e4:ba:2e:89:13:93:69:bc:d3:66:
                    36:5e:02:d7:72:03:2c:af:ab:5c:72:80:6b:6d:44:
                    6b:e8:03:83:ae:2a:89:2b:81:94:8a:d4:53:a2:56:
                    9e:e5:91:01:03:c9:06:ba:43:b6:08:fa:95:90:e0:
                    16:c6:89:f9:30:bb:2f:64:a4:4e:c4:45:e9:da:4b:
                    f2:60:b5:62:b3:0e:ba:5b:fc:0c:6a:fe:20:74:6a:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:69:38:E0:03:E5:19:E9:6B:0A:9E:EC:93:8E:98:ED:AC:0F:5E:65
            X509v3 Authority Key Identifier:
                keyid:0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKob2GZqbEvqZjKp_rzMMO2SkFs.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/16/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/16/8D6938E003E519E96B0A9EEC938E98EDAC0F5E65.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48103

    Signature Algorithm: sha256WithRSAEncryption
         b1:d8:f2:d4:7a:67:2c:e2:85:50:a9:db:d6:ab:87:6e:a9:3e:
         42:6d:0b:5f:78:7e:92:2c:a9:40:39:79:b9:bd:31:12:fe:b3:
         b7:d7:20:47:58:b7:48:dd:0c:48:8e:6d:e7:5e:36:38:0d:bf:
         ad:c0:2b:0b:cf:11:e5:b1:98:95:14:d5:b6:db:bd:bf:ec:49:
         a9:5e:92:3b:01:d7:65:4a:03:0e:30:64:73:7f:c5:3f:c0:7d:
         3d:f7:2f:53:4b:f3:37:a7:fe:d8:8c:e7:6b:4e:89:8d:51:67:
         3e:1e:ee:bc:4a:01:6f:b3:17:1f:51:5e:bd:07:ba:b4:9b:8e:
         9e:c6:26:7a:0d:22:a2:5e:37:0f:ef:55:b0:af:dd:79:24:ac:
         ce:61:e2:d7:cb:d9:cf:a0:24:85:1f:3b:41:6e:5e:88:66:37:
         6b:60:43:c0:02:30:5d:3d:3b:0c:f6:9d:f2:c2:f4:ef:6c:8f:
         14:63:29:ce:ba:6d:fc:e6:b3:90:84:10:1c:52:f8:8e:4f:5f:
         27:fc:b0:24:41:82:01:a8:38:ca:0b:23:2b:1b:dc:3e:fe:0f:
         75:99:89:6c:1d:c9:ba:9f:ff:55:b9:7c:7e:cb:d0:57:ff:0d:
         22:cf:a2:64:3b:76:7c:88:c8:10:5b:5f:e1:0b:f6:ca:9a:6a:
         ba:8f:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org