Certificate

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
File:                     7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer (raw, json)
Hash identifier:          lGx6iPPejZWLEtw/2hTZyJY0aaGrG/VqLA4Yu/0igPU=
Subject key identifier:   7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       6EA8477B48DB7BF5C5CEC74958A341C5F2388EA4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Manifest:                 rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.mft
caRepository:             rsync://rpki.netiface.net/repo/Netiface/0/
Notify URL:               https://rpki.netiface.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 20:53:27 +0000
Certificate not after:    Mon 06 Jan 2025 20:58:27 +0000
Subordinate resources:    IP: 2a13:df87:2000::/36
                          IP: 2a13:df87:b600::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a8:47:7b:48:db:7b:f5:c5:ce:c7:49:58:a3:41:c5:f2:38:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Jan  8 20:53:27 2024 GMT
            Not After : Jan  6 20:58:27 2025 GMT
        Subject: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:79:f2:ff:22:d9:b6:b3:d1:5d:d8:24:70:
                    a4:c1:9d:1c:8d:2a:a7:cb:ae:d8:cb:71:7e:91:07:
                    52:c9:20:aa:d5:3c:74:a9:ec:93:20:c0:bd:83:f8:
                    bc:67:b6:2e:98:5d:ec:5a:64:43:21:c2:b2:22:10:
                    b9:e5:b6:5e:ca:ec:03:40:02:a6:b9:50:99:9e:34:
                    cf:34:1f:8b:42:c8:4d:13:50:fd:96:9d:ed:f0:5c:
                    e2:32:19:33:64:47:67:08:e5:a4:e4:d3:f6:2e:b5:
                    82:63:63:ae:71:1a:b3:40:14:7d:63:44:dc:82:00:
                    35:fb:19:f2:4a:5b:81:94:5d:64:3a:7c:54:6e:e3:
                    30:7a:17:04:b3:5e:8a:42:8e:ac:71:ce:98:b0:41:
                    89:6c:cc:08:b7:46:32:8c:2d:08:8c:a2:09:e8:62:
                    74:f0:5a:e6:9d:76:29:0a:d1:41:46:1b:1f:d3:2b:
                    3b:73:15:3c:2c:5a:6d:06:d5:f4:67:9a:d1:43:25:
                    a0:8d:cb:e7:99:b3:43:07:4d:d6:31:f0:77:16:03:
                    f9:1e:10:76:b8:40:54:88:ed:9e:ca:93:c1:25:61:
                    af:7d:bf:72:28:ea:3e:08:f6:e4:46:5e:76:a1:b5:
                    d2:72:a4:96:95:71:10:5d:51:e5:ea:38:4c:d4:16:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.netiface.net/repo/Netiface/0/
                RPKI Manifest - URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.mft
                RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2000::/36
                  2a13:df87:b600::/39

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:e5:29:97:7e:cf:9d:2e:16:e7:ed:1d:e0:dd:82:ff:1a:
         bb:fd:7e:be:f7:32:46:e3:6d:58:a1:11:b0:2d:14:20:a8:3d:
         36:54:54:f6:40:aa:4f:33:a3:3d:bc:48:f7:8d:bb:d2:25:95:
         72:c7:f0:82:1a:ed:ec:d6:f3:3a:70:10:fd:c6:4f:2d:59:85:
         f7:48:fd:c5:58:2b:ac:37:42:56:78:a6:4d:10:65:0e:ad:fc:
         42:5a:39:0d:83:67:36:de:51:27:8e:0a:41:61:1d:2c:53:e2:
         84:e5:b7:e0:a5:c0:ba:c7:08:ec:25:39:60:f8:a2:98:57:43:
         fb:02:46:45:f8:7d:04:05:85:21:50:f3:67:e8:37:9e:71:b3:
         79:01:8b:2d:89:9c:c9:8d:03:c2:9d:e3:4e:1e:b0:3b:ca:ec:
         20:e9:07:55:c0:a8:c3:c2:54:08:ac:80:1a:58:ab:1b:ea:e0:
         21:c8:c9:f3:42:b3:f0:e6:af:c8:d1:4c:22:92:2e:17:8c:1b:
         2f:15:96:37:52:50:95:cc:ba:ab:ab:97:f2:9e:29:30:a9:e4:
         e7:67:e3:8f:e4:0a:fb:10:fe:93:b2:50:ed:80:f4:cd:ee:c8:
         10:16:dc:1c:90:c7:7b:74:ca:68:47:a2:3b:72:12:e7:bc:ca:
         66:28:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----