Certificate

$ rpki-client -vvf rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
File:                     6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer (raw, json)
Hash identifier:          xDO3BBn7jaI9zXLxGlfqJ/UbRIpYEc0AtsZhUiuoD58=
Subject key identifier:   66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority key identifier: 33:25:9D:BB:3E:55:12:C0:9F:2D:86:7A:59:33:EA:37:77:34:A1:FF
Certificate issuer:       /CN=33259dbb3e5512c09f2d867a5933ea377734a1ff
Certificate serial:       20E1D961EB77C902FFB1BE5715F26D804105CB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer
Manifest:                 rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
caRepository:             rsync://rpki.co/repo/AS945/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 09:31:49 +0000
Certificate not after:    Mon 29 Jul 2024 09:36:49 +0000
Subordinate resources:    AS: 47449
                          AS: 50058
                          IP: 194.116.227.0/24
                          IP: 2001:67c:a80::/48
                          IP: 2001:67c:a84::/48
                          IP: 2001:67c:a88::/48
                          IP: 2001:67c:a8c::/48
                          IP: 2001:67c:a90::/48
                          IP: 2001:67c:a94::/48
                          IP: 2001:67c:a98::/48
                          IP: 2001:67c:a9c::/48
                          IP: 2001:67c:aa0::/48
                          IP: 2a12:dd40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e1:d9:61:eb:77:c9:02:ff:b1:be:57:15:f2:6d:80:41:05:cb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33259dbb3e5512c09f2d867a5933ea377734a1ff
        Validity
            Not Before: Jul 31 09:31:49 2023 GMT
            Not After : Jul 29 09:36:49 2024 GMT
        Subject: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:db:e2:6d:e2:1a:dd:1b:b6:98:9e:50:52:
                    b6:a3:cf:a9:79:45:37:73:6c:6d:7a:61:3e:a1:04:
                    7f:71:b1:cd:10:47:2f:ce:80:e9:e0:ed:d5:7f:f9:
                    a0:bd:f0:40:fb:39:13:ce:8e:eb:9a:1d:52:54:7a:
                    e1:5a:28:ff:8e:c2:9b:62:1c:49:68:dc:f3:57:ae:
                    a6:30:08:52:6e:e1:e5:0c:6a:de:a1:80:56:8a:1d:
                    f1:9e:8c:df:37:b9:cc:c7:71:21:e5:61:4f:16:1f:
                    ac:03:62:d8:cf:da:46:bd:f9:1d:16:e9:9e:cf:3c:
                    1b:61:73:f6:35:83:91:02:4c:86:97:50:e2:50:20:
                    98:5b:d5:e4:9c:81:61:50:11:70:86:70:c7:d2:79:
                    b4:c3:e2:9d:37:9b:cc:33:3a:60:b8:f8:95:a4:c9:
                    05:1e:3a:34:a8:9f:00:6c:ec:b9:84:a4:13:67:47:
                    c5:56:96:8f:b8:33:9b:45:dd:fa:59:c6:df:83:29:
                    c3:f8:07:2e:60:8a:bf:ed:62:37:8e:1b:af:13:d4:
                    9b:85:f3:5b:0c:73:25:d7:39:f8:28:88:d8:24:00:
                    23:b4:1c:98:72:27:92:56:c4:26:c5:53:78:5e:e2:
                    f4:da:c5:cf:c5:86:58:32:fb:da:99:42:0e:6f:b9:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
            X509v3 Authority Key Identifier:
                keyid:33:25:9D:BB:3E:55:12:C0:9F:2D:86:7A:59:33:EA:37:77:34:A1:FF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47449
                  50058

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:d5:3e:61:0a:02:81:69:2b:79:76:42:a0:7f:3d:3b:1f:
         6d:e1:13:9e:98:a8:da:6c:8b:5b:ac:ce:43:6a:fc:a3:47:89:
         87:38:0c:79:71:56:77:bf:e4:87:e3:1c:9c:2a:eb:c9:2e:56:
         92:1a:a9:ce:62:f8:80:0c:6a:fe:ca:75:8c:9e:51:80:15:50:
         84:36:75:46:d1:bf:32:fc:70:7b:57:1d:8b:20:b9:b6:e8:98:
         df:f6:11:e9:64:16:a3:e7:f8:5b:34:2e:79:93:bf:05:dd:25:
         e8:ac:f4:ed:66:8d:7b:02:c0:49:36:2d:5b:84:a1:82:6f:a6:
         3f:0e:b9:a2:ab:12:9c:e5:35:58:e4:b3:7a:7a:f1:72:90:82:
         93:dc:f3:d3:a6:1f:b4:7d:9d:e1:1d:50:4b:76:1b:62:27:fa:
         dd:b5:f1:12:bc:97:a9:91:30:c4:84:c1:6e:35:2c:ab:0f:fb:
         c5:da:db:1d:2b:64:b7:37:0c:f8:ed:4b:df:a9:46:85:a4:2b:
         c0:64:05:43:5f:b2:8e:73:89:0f:2b:72:eb:9e:ea:59:48:3b:
         98:6b:8d:d2:1f:4b:e5:18:5a:d2:4a:06:c4:61:92:2d:8c:c2:
         86:87:49:b1:0e:23:a8:aa:4e:2b:c1:0e:db:e6:4a:ee:e4:28:
         cf:0f:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org