Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
File:                     F6C069B14BA97AC6141837495668AE6C873FDFFE.cer (raw, json)
Hash identifier:          H5Y/Ntm8X1h/4f2BKEF90gfwzLyHyeOG72ZP1/FTMNc=
Subject key identifier:   F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       61002C25B431801DB5F23FDC7DA59929AA2E4DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.mft
caRepository:             rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:51:56 +0000
Certificate not after:    Wed 20 Dec 2023 16:56:56 +0000
Subordinate resources:    IP: 2a07:54c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:2c:25:b4:31:80:1d:b5:f2:3f:dc:7d:a5:99:29:aa:2e:4d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:69:ef:6d:9e:fc:d0:c3:dc:e7:b5:7b:7e:
                    04:56:2d:ee:6f:f8:3b:85:83:38:a7:3e:02:60:19:
                    25:4d:75:c9:66:b2:3d:3a:0f:f0:b0:3c:5d:57:e5:
                    4c:87:e7:e0:eb:c1:e1:b0:ad:53:bc:6e:a3:1e:ab:
                    de:69:cc:fd:89:f3:ce:9c:aa:35:21:7f:72:6a:1e:
                    78:53:0f:fe:ae:7a:cc:25:32:9c:92:ae:88:96:e3:
                    3d:20:9e:aa:80:5e:77:f1:b9:ec:f5:71:11:31:5b:
                    8f:cb:92:db:bb:87:2e:dc:6e:32:8b:3d:63:d7:0f:
                    2d:a9:de:eb:22:5d:3f:4f:d4:7b:d4:e6:c1:00:5d:
                    1c:23:19:cc:9c:f0:90:83:64:7d:89:f5:6b:95:9c:
                    d1:97:46:d4:c6:f2:c1:29:e2:27:88:15:ab:e0:32:
                    fd:62:09:f8:7e:72:6f:48:8e:5b:f7:ed:68:cb:4f:
                    5e:58:af:f0:7e:17:36:38:d3:2f:f0:9b:48:f0:31:
                    ce:13:ea:e1:62:0b:e2:5b:75:69:3e:08:79:b8:0d:
                    f0:40:d9:d3:34:a9:20:c5:9f:01:c6:b2:59:c2:10:
                    1d:00:ff:8c:c4:3f:ea:1d:d1:e2:5a:b8:98:12:1c:
                    c0:58:f3:a8:cf:e2:bf:32:02:92:4d:e6:d4:ae:ae:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:70:e8:ea:d4:6d:ec:98:44:bc:53:51:aa:59:53:ff:c0:
         08:c6:a6:6a:67:91:88:88:bc:03:b2:6b:f9:00:75:f6:34:c7:
         6b:a4:3e:84:3f:87:81:82:6d:34:16:a6:1f:51:e2:04:2b:1b:
         8c:91:7d:66:9f:8c:b4:90:2d:bb:8a:39:bf:2b:8e:2f:50:26:
         8d:d3:89:89:af:14:d1:88:fe:30:51:92:4e:d3:12:9f:bf:f8:
         2d:8f:ee:70:23:ca:f8:77:ed:69:af:0d:77:e2:67:c1:79:6e:
         87:29:3b:2b:07:c4:0a:cf:48:3d:bb:72:ff:70:cf:89:74:f2:
         ef:19:2c:cf:86:e6:05:3a:37:11:69:d5:77:24:bb:75:78:32:
         71:7c:6f:7f:cd:c0:ca:a4:44:2a:56:21:01:47:61:48:d7:ff:
         34:f2:83:fe:2f:4f:ae:ec:36:79:c3:ef:98:1c:ef:39:ce:3c:
         1d:33:47:cc:fc:68:2f:1c:31:72:78:8f:f9:03:18:b1:1a:00:
         94:41:c3:ae:d1:af:09:56:89:1c:c6:85:6f:d5:61:09:0f:1c:
         79:27:11:bc:cd:92:86:95:e3:b9:4e:46:97:41:0d:55:46:f0:
         4a:c6:36:25:d8:a4:e3:ca:c0:3d:53:16:61:e6:b2:3b:b9:c7:
         82:d3:ce:88
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUYQAsJbQxgB218j/cfaWZKaouTc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTZaFw0yMzEyMjAxNjU2NTZaMDMxMTAvBgNV
BAMTKEY2QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxmnvbZ780MPc57V7fgRWLe5v
+DuFgzinPgJgGSVNdclmsj06D/CwPF1X5UyH5+DrweGwrVO8bqMeq95pzP2J886c
qjUhf3JqHnhTD/6ueswlMpySroiW4z0gnqqAXnfxuez1cRExW4/Lktu7hy7cbjKL
PWPXDy2p3usiXT9P1HvU5sEAXRwjGcyc8JCDZH2J9WuVnNGXRtTG8sEp4ieIFavg
Mv1iCfh+cm9Ijlv37WjLT15Yr/B+FzY40y/wm0jwMc4T6uFiC+JbdWk+CHm4DfBA
2dM0qSDFnwHGslnCEB0A/4zEP+od0eJauJgSHMBY86jP4r8yApJN5tSurrZTAgMB
AAGjggJ/MIICezAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2wGmxS6l6xhQY
N0lWaK5shz/f/jAfBgNVHSMEGDAWgBSr2/q68gHiu4W57bTWQ1lKwwu/4jAOBgNV
HQ8BAf8EBAMCAQYwbAYDVR0fBGUwYzBhoF+gXYZbcnN5bmM6Ly9ycGtpLnphcHBp
ZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMi9BQkRCRkFCQUYyMDFFMkJCODVC
OUVEQjRENjQzNTk0QUMzMEJCRkUyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cTl2NnV2SUI0cnVGdWUyMDFrTlpTc01Mdi1JLmNlcjCCAQYGCCsGAQUFBwELBIH5
MIH2MEMGCCsGAQUFBzAFhjdyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVw
by9OT1JUSExBWUVSX1VJRF8xMzg2NC8wMHAGCCsGAQUFBzAKhmRyc3luYzovL3Jw
a2kuemFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVSX1VJRF8xMzg2NC8wL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUubWZ0MD0GCCsG
AQUFBzANhjFodHRwczovL3Jwa2kuemFwcGllaG9zdC5jb20vcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQMqB1TAMA0GCSqGSIb3DQEBCwUAA4IBAQAFPnDo6tRt
7JhEvFNRqllT/8AIxqZqZ5GIiLwDsmv5AHX2NMdrpD6EP4eBgm00FqYfUeIEKxuM
kX1mn4y0kC27ijm/K44vUCaN04mJrxTRiP4wUZJO0xKfv/gtj+5wI8r4d+1prw13
4mfBeW6HKTsrB8QKz0g9u3L/cM+JdPLvGSzPhuYFOjcRadV3JLt1eDJxfG9/zcDK
pEQqViEBR2FI1/808oP+L0+u7DZ5w++YHO85zjwdM0fM/GgvHDFyeI/5AxixGgCU
QcOu0a8JVokcxoVv1WEJDxx5JxG8zZKGleO5TkaXQQ1VRvBKxjYl2KTjysA9UxZh
5rI7uceC086I
-----END CERTIFICATE-----