Certificate

$ rpki-client -vvf rpki.co/repo/Simple/2/E7E1668921295F86E7B1FF74F30B5983AF178B06.cer
File:                     E7E1668921295F86E7B1FF74F30B5983AF178B06.cer (raw, json)
Hash identifier:          rfA979TodGdY6mgnT4tJit8tLB8+jkzm3dEIGnzlM7U=
Subject key identifier:   E7:E1:66:89:21:29:5F:86:E7:B1:FF:74:F3:0B:59:83:AF:17:8B:06
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Certificate issuer:       /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial:       57BA1F87CF9BB9FFD8AB3C3325968868078FCB44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/17/E7E1668921295F86E7B1FF74F30B5983AF178B06.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/17/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:11:56 +0000
Certificate not after:    Thu 19 Jun 2025 04:16:56 +0000
Subordinate resources:    AS: 9663

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:1f:87:cf:9b:b9:ff:d8:ab:3c:33:25:96:88:68:07:8f:cb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
        Validity
            Not Before: Jun 20 04:11:56 2024 GMT
            Not After : Jun 19 04:16:56 2025 GMT
        Subject: CN=E7E1668921295F86E7B1FF74F30B5983AF178B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:31:6e:86:87:81:9b:e8:14:22:cc:2c:2d:
                    8e:58:1d:70:ba:6c:f6:67:b9:2c:32:5c:52:69:07:
                    c7:18:1f:6d:2e:6f:3a:ae:40:81:d3:61:19:78:a4:
                    9c:af:ce:3a:6c:c6:1e:a9:4e:37:89:5b:2f:09:84:
                    fb:3f:b9:35:c4:87:25:66:45:d4:6c:ee:5f:87:e6:
                    3a:8d:90:40:85:03:9a:05:6e:4b:96:b7:37:3f:d4:
                    f2:e2:7f:66:d4:f2:41:0c:2a:e6:5e:ee:67:77:01:
                    07:fb:51:01:77:89:76:7b:62:74:10:c6:54:a2:07:
                    f3:93:ff:24:8f:91:02:f8:db:32:ad:b0:16:9b:ad:
                    80:ef:1b:f7:39:75:cc:81:dc:3f:01:aa:3c:2b:3d:
                    50:f2:87:97:e6:e4:da:79:f0:ab:5c:7e:8d:0c:33:
                    ca:20:07:d8:cc:9e:f1:2e:b7:52:f6:a7:69:dc:31:
                    ab:3e:3b:44:19:4c:9c:ba:59:2a:94:0b:63:ee:de:
                    97:5b:c2:a0:5c:e4:1c:f0:6b:b8:51:7b:da:f8:f1:
                    27:39:3a:4a:73:04:f6:fb:af:f6:55:bf:91:40:87:
                    0f:99:9b:c6:43:00:8c:df:48:75:83:b4:65:a4:55:
                    db:99:d1:64:45:aa:a5:24:61:07:1c:38:28:9c:e2:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:E1:66:89:21:29:5F:86:E7:B1:FF:74:F3:0B:59:83:AF:17:8B:06
            X509v3 Authority Key Identifier:
                keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/17/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/17/E7E1668921295F86E7B1FF74F30B5983AF178B06.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9663

    Signature Algorithm: sha256WithRSAEncryption
         75:99:cf:f8:2e:8e:8a:60:ee:5f:c7:ed:ca:61:ff:fe:84:fe:
         d6:63:7f:95:27:68:85:c7:84:63:15:01:24:8c:fd:2f:aa:14:
         03:23:86:9b:b4:83:0e:53:60:72:71:15:82:73:18:bd:b6:d5:
         32:74:04:a9:33:af:f0:ac:e0:7e:c9:47:29:b1:05:53:53:7a:
         bb:29:6b:3b:fa:8f:8a:d9:a4:2d:b2:59:a9:e4:c1:6a:e1:60:
         8f:c9:96:cb:4e:5f:3a:34:95:bd:34:f7:6b:83:f1:80:e7:51:
         0c:4e:2d:8f:d0:af:28:da:67:b8:ee:93:15:29:09:a2:80:e5:
         7a:1f:6b:a8:ae:87:1c:5f:15:2f:7a:b3:5f:d5:f7:ae:43:27:
         5c:40:a4:3d:e2:7e:6f:3c:75:92:ec:33:ba:2c:e2:2d:35:2e:
         11:0e:e7:50:71:10:cd:85:4c:5e:db:5e:8b:4b:21:ee:3f:ab:
         06:a0:ec:4f:cc:92:7e:0d:61:6d:76:eb:50:c0:d9:53:0f:46:
         b9:2f:71:ca:5f:a2:ce:17:08:32:07:01:c4:c0:e1:38:78:c2:
         f9:7a:4b:2d:39:91:da:aa:05:f7:60:64:4f:bd:64:0c:8c:fd:
         00:ed:af:52:7c:a5:cd:74:d4:eb:cf:3a:50:4e:fb:ec:48:6b:
         78:9d:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----