Certificate

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/B41FECDA6195DCEC2576781253AE07C2F56EF035.cer
File:                     B41FECDA6195DCEC2576781253AE07C2F56EF035.cer (raw, json)
Hash identifier:          cX1mIaugRMAuG27kwix8jUM42shjfzrl9XGlaI5URvQ=
Subject key identifier:   B4:1F:EC:DA:61:95:DC:EC:25:76:78:12:53:AE:07:C2:F5:6E:F0:35
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       28A558A9F01D6F2FC348F2EB43BCE62EB04E67A1
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/B41FECDA6195DCEC2576781253AE07C2F56EF035.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 26 Jul 2024 06:39:35 +0000
Certificate not after:    Fri 25 Jul 2025 06:44:35 +0000
Subordinate resources:    IP: 2a0a:6045:c000::/34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a5:58:a9:f0:1d:6f:2f:c3:48:f2:eb:43:bc:e6:2e:b0:4e:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Jul 26 06:39:35 2024 GMT
            Not After : Jul 25 06:44:35 2025 GMT
        Subject: CN=B41FECDA6195DCEC2576781253AE07C2F56EF035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:cc:ce:73:0c:3f:d6:45:9a:da:09:ad:1a:
                    8b:da:48:13:78:e8:28:c8:3c:30:ed:3c:b4:90:9a:
                    e0:cd:64:f7:dc:5a:f7:43:65:c2:13:9b:2f:f4:36:
                    c1:d3:a9:ae:35:35:a8:08:de:f4:6f:13:e3:4d:5b:
                    b7:e3:79:c0:5d:f7:65:a6:a4:8c:5f:db:47:be:8e:
                    4b:c8:74:bc:3e:43:18:46:03:7e:96:b5:dd:9a:50:
                    f7:67:ed:36:cd:48:d2:1c:c6:f1:8f:9b:1f:16:ba:
                    de:ef:a5:b9:6a:bb:89:c7:c0:58:e8:4d:da:95:07:
                    62:9b:ce:06:5a:65:a1:85:37:91:7a:4a:10:38:e4:
                    48:a3:6d:64:2f:17:c5:87:07:af:2a:f8:69:4e:85:
                    5a:9f:bc:f9:e8:4a:9d:a9:a2:db:2c:af:37:f6:76:
                    2f:2f:5c:aa:e4:05:84:a4:a4:b2:25:ac:a4:63:e4:
                    c7:4c:69:97:3b:13:aa:47:1f:f3:05:6d:f8:40:84:
                    73:9e:9f:35:bc:56:7a:81:3b:6d:a0:4a:51:25:b0:
                    1c:90:f9:3e:7b:4d:6a:af:55:f2:32:e9:0c:f0:54:
                    c1:09:0c:f5:d5:35:24:01:a8:56:d1:7d:14:54:5e:
                    68:14:bb:f9:8b:6c:12:e8:84:b4:e7:bf:d5:e4:97:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:1F:EC:DA:61:95:DC:EC:25:76:78:12:53:AE:07:C2:F5:6E:F0:35
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/3/B41FECDA6195DCEC2576781253AE07C2F56EF035.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:98:14:6e:67:f9:21:30:0b:1e:c1:89:c9:6e:ea:b9:2f:
         52:df:7d:50:70:c1:eb:b1:69:93:04:c0:ea:81:d2:af:1a:67:
         61:18:c8:81:fa:8c:2e:a4:d9:f5:6a:be:8d:82:b7:47:94:ad:
         40:df:c9:93:49:92:02:dd:df:31:34:b7:83:84:45:34:b0:3b:
         f3:d2:c6:04:fc:92:63:dc:8e:45:d2:ec:b6:cb:1e:8c:65:49:
         67:5a:35:a6:01:94:fc:31:fe:39:03:ee:94:9d:87:22:20:72:
         39:5f:88:bb:72:6a:11:a2:2a:ee:75:2a:fd:f2:b8:2f:0d:66:
         28:68:43:2d:1c:6e:da:24:34:9b:a5:33:ce:c1:5a:10:94:65:
         be:01:01:4c:c7:07:9a:53:51:d7:fa:79:09:b5:76:62:5a:99:
         5e:8e:a7:72:37:d2:f8:5d:3c:5c:a4:88:fb:56:bd:ce:e8:df:
         fa:a6:1f:40:88:2b:6e:89:50:dd:7a:78:5d:3e:6d:9a:c7:46:
         a4:1a:28:2e:2b:29:7f:ac:f2:aa:37:15:e1:d9:06:2c:0c:0e:
         26:42:e1:b7:44:7f:b9:f4:33:82:1c:b8:cb:d2:80:28:81:20:
         04:c8:b3:69:1f:f7:19:72:5d:5c:06:c4:6b:8c:6c:1d:92:97:
         be:8d:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----