Certificate

$ rpki-client -vvf rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
File:                     9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer (raw, json)
Hash identifier:          cHuABgfstBWWzJk0oTaBNnuDK5/Nhcq+0Bj5VeBwI2U=
Subject key identifier:   9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority key identifier: 3E:1F:AF:F3:3A:2D:6D:3A:87:6C:57:82:A7:D6:FA:46:2A:5A:D1:75
Certificate issuer:       /CN=7e6381cf358144f667cc4c1782db3a80919170f217b95a66d1
Certificate serial:       076920D3F2D00D4819F4A70276A76B7C7AB130DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358144f667cc4c1782db3a80919170f217b95a66d1.cer
Manifest:                 rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.mft
caRepository:             rsync://rpki.co/repo/AS945/10/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 22:51:20 +0000
Certificate not after:    Fri 27 Sep 2024 22:56:20 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 199.189.156.0/22
                          IP: 2602:234::/32
                          IP: 2602:fb44::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:20:d3:f2:d0:0d:48:19:f4:a7:02:76:a7:6b:7c:7a:b1:30:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf358144f667cc4c1782db3a80919170f217b95a66d1
        Validity
            Not Before: Sep 29 22:51:20 2023 GMT
            Not After : Sep 27 22:56:20 2024 GMT
        Subject: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:39:ac:53:0b:9a:32:7d:7b:e3:65:82:f7:
                    42:e2:08:5d:c6:d9:1b:ce:f8:ac:78:4b:2f:b1:88:
                    ad:ca:a5:bc:eb:a9:dd:1a:6e:89:49:34:a0:14:1c:
                    ce:ac:19:c8:ff:ce:b0:eb:b7:c1:68:18:3c:34:1a:
                    68:50:e5:42:c7:36:60:c9:39:2b:97:fc:49:09:1d:
                    2e:20:33:3a:67:35:65:58:da:10:2f:28:1c:8d:a3:
                    48:9d:84:f6:da:c1:07:78:6e:8a:96:3b:a4:15:c4:
                    d2:a8:49:72:5f:65:7a:10:f4:9d:da:3f:c9:5a:6d:
                    e1:e5:8f:eb:01:e6:72:ad:4d:52:75:fe:58:2e:b8:
                    63:1f:df:62:f8:50:d8:7a:1d:f3:bd:e7:eb:da:83:
                    a8:2d:3b:1b:d3:e8:b7:d1:dc:5f:c9:be:3e:02:9b:
                    07:93:15:d7:7d:f1:7a:72:9d:b0:65:a0:82:be:85:
                    32:27:cd:c6:3b:53:5d:d1:5d:56:d9:62:8d:e2:81:
                    36:dc:4e:9d:e9:16:29:ae:a0:94:36:89:94:a0:c3:
                    ac:df:10:0c:5a:6e:d3:d0:ce:d3:c1:fc:75:c8:4c:
                    be:44:f2:66:3a:cf:be:86:eb:5f:4a:ab:f9:ef:76:
                    81:c4:f9:0e:c6:ab:1d:a9:41:92:6e:f7:05:a8:6f:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
            X509v3 Authority Key Identifier:
                keyid:3E:1F:AF:F3:3A:2D:6D:3A:87:6C:57:82:A7:D6:FA:46:2A:5A:D1:75

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/6/3E1FAFF33A2D6D3A876C5782A7D6FA462A5AD175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358144f667cc4c1782db3a80919170f217b95a66d1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/10/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                  199.189.156.0/22
                IPv6:
                  2602:234::/32
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:e0:f5:f0:76:78:0f:72:e4:60:1a:68:78:fd:47:07:75:
         ff:da:60:89:df:53:1f:2e:d4:e8:17:52:3b:64:65:8e:68:0f:
         5e:b3:75:d5:ab:5d:39:d1:dd:b5:85:a6:89:cf:20:cb:67:6b:
         95:77:e2:9a:2a:c7:0f:26:ad:74:63:8b:ad:e4:32:12:01:21:
         ca:13:fa:e4:65:04:29:26:3e:60:d2:19:46:7a:a3:41:8e:3d:
         ba:c1:86:da:f6:56:32:c7:21:20:3c:24:e6:ef:3c:1d:44:62:
         d7:ac:0b:d9:d0:e9:8e:f2:43:2a:25:af:a6:7b:46:ea:81:7f:
         3c:63:48:6b:76:a2:a5:aa:a9:6d:7e:aa:08:22:f0:d3:bf:24:
         be:7d:e0:6b:14:21:31:11:74:7a:d7:ad:fa:3c:71:f6:68:af:
         96:67:82:a7:23:96:3a:06:61:de:d4:1f:36:3d:a6:de:7b:41:
         cd:68:79:ea:96:55:7e:23:e7:24:00:c8:1f:aa:a9:7d:94:7b:
         b5:ed:52:b3:22:83:e5:85:5d:08:ff:33:96:3c:a6:77:36:2e:
         74:71:47:88:51:c5:e4:c0:53:53:0c:99:e7:db:fe:e5:a9:3a:
         d1:f8:68:79:02:71:0b:53:67:83:68:a7:47:04:4a:66:d3:c6:
         b7:05:0e:f1
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgIUB2kg0/LQDUgZ9KcCdqdrfHqxMN0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2U2MzgxY2YzNTgxNDRmNjY3Y2M0YzE3ODJkYjNhODA5
MTkxNzBmMjE3Yjk1YTY2ZDEwHhcNMjMwOTI5MjI1MTIwWhcNMjQwOTI3MjI1NjIw
WjAzMTEwLwYDVQQDEyg5QTU2QjYwMEM0NDY2RTE3RDQ2QjNEQjgwMzA2NjU4QTU1
RUI0RTNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyko5rFMLmjJ9
e+NlgvdC4ghdxtkbzviseEsvsYityqW866ndGm6JSTSgFBzOrBnI/86w67fBaBg8
NBpoUOVCxzZgyTkrl/xJCR0uIDM6ZzVlWNoQLygcjaNInYT22sEHeG6KljukFcTS
qElyX2V6EPSd2j/JWm3h5Y/rAeZyrU1Sdf5YLrhjH99i+FDYeh3zvefr2oOoLTsb
0+i30dxfyb4+ApsHkxXXffF6cp2wZaCCvoUyJ83GO1Nd0V1W2WKN4oE23E6d6RYp
rqCUNomUoMOs3xAMWm7T0M7Twfx1yEy+RPJmOs++hutfSqv573aBxPkOxqsdqUGS
bvcFqG8EyQIDAQABo4IDADCCAvwwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
mla2AMRGbhfUaz24AwZlilXrTjowHwYDVR0jBBgwFoAUPh+v8zotbTqHbFeCp9b6
Ripa0XUwDgYDVR0PAQH/BAQDAgEGMFsGA1UdHwRUMFIwUKBOoEyGSnJzeW5jOi8v
cnBraS5jby9yZXBvL0F1Z3VzdC82LzNFMUZBRkYzM0EyRDZEM0E4NzZDNTc4MkE3
RDZGQTQ2MkE1QUQxNzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJj
LWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMjEwNDMyNy0wOGFiLTRjZmMt
ODFlZi03NmNhZjkwZWNkNzAvN2U2MzgxY2YzNTgxNDRmNjY3Y2M0YzE3ODJkYjNh
ODA5MTkxNzBmMjE3Yjk1YTY2ZDEuY2VyMIHMBggrBgEFBQcBCwSBvzCBvDAqBggr
BgEFBQcwBYYecnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvMTAvMFYGCCsGAQUF
BzAKhkpyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8xMC85QTU2QjYwMEM0NDY2
RTE3RDQ2QjNEQjgwMzA2NjU4QTU1RUI0RTNBLm1mdDA2BggrBgEFBQcwDYYqaHR0
cHM6Ly9ycmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMBgEAgABMBIDBAAX
iugDBAEXiygDBALHvZwwFQQCAAIwDwMFACYCAjQDBgQmAvtEADAZBggrBgEFBQcB
CAEB/wQKMAigBjAEAgID9DANBgkqhkiG9w0BAQsFAAOCAQEAStbg9fB2eA9y5GAa
aHj9Rwd1/9pgid9THy7U6BdSO2RljmgPXrN11atdOdHdtYWmic8gy2drlXfimirH
DyatdGOLreQyEgEhyhP65GUEKSY+YNIZRnqjQY49usGG2vZWMschIDwk5u88HURi
16wL2dDpjvJDKiWvpntG6oF/PGNIa3aipaqpbX6qCCLw078kvn3gaxQhMRF0etet
+jxx9mivlmeCpyOWOgZh3tQfNj2m3ntBzWh56pZVfiPnJADIH6qpfZR7te1SsyKD
5YVdCP8zljymdzYudHFHiFHF5MBTUwyZ59v+5ak60fhoeQJxC1Nng2inRwRKZtPG
twUO8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org