Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/5DC98C9C4226EBEA74E4D3593B33CAD5F956CE58.cer
File:                     5DC98C9C4226EBEA74E4D3593B33CAD5F956CE58.cer (raw, json)
Hash identifier:          kKKtpWIdjzLQWWlrn4QA1OCuGiHh2PJrksAUZwi6sJY=
Subject key identifier:   5D:C9:8C:9C:42:26:EB:EA:74:E4:D3:59:3B:33:CA:D5:F9:56:CE:58
Authority key identifier: A2:41:E7:D9:19:F0:F1:16:AC:3B:88:FE:14:39:20:42:20:2D:EA:0C
Certificate issuer:       /CN=A91115900000/serialNumber=A241E7D919F0F116AC3B88FE14392042202DEA0C
Certificate serial:       14EBCA36A30FFD7305AE87129C24CBDFAB4DD8CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okHn2Rnw8RasO4j-FDkgQiAt6gw.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/1/5DC98C9C4226EBEA74E4D3593B33CAD5F956CE58.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/1
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 18:31:04 +0000
Certificate not after:    Fri 15 Dec 2023 18:36:04 +0000
Subordinate resources:    IP: 103.68.108.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:eb:ca:36:a3:0f:fd:73:05:ae:87:12:9c:24:cb:df:ab:4d:d8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=A241E7D919F0F116AC3B88FE14392042202DEA0C
        Validity
            Not Before: Dec 16 18:31:04 2022 GMT
            Not After : Dec 15 18:36:04 2023 GMT
        Subject: CN=5DC98C9C4226EBEA74E4D3593B33CAD5F956CE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:ff:d3:bf:de:88:eb:ec:f7:a3:ab:41:0f:
                    9c:9f:b9:ac:fb:67:ac:d3:d1:eb:a0:c5:58:fe:65:
                    2c:fd:a2:ec:b7:33:69:3b:98:21:fd:67:d7:db:43:
                    f4:3e:62:d5:59:41:d1:e1:5c:2b:fb:62:03:6a:b5:
                    ef:b8:aa:3d:2f:aa:76:6d:bd:41:4b:5d:7d:46:0d:
                    93:db:95:a3:c5:16:00:98:30:1e:c6:63:6e:00:63:
                    1d:e5:c7:29:63:f3:2d:17:56:cc:a7:83:b5:55:10:
                    46:4a:6b:f9:2c:a9:54:58:ed:95:66:a3:38:0c:a5:
                    59:e3:93:00:c7:ba:1e:a0:de:84:c9:c0:f9:db:67:
                    fe:98:e9:0d:fe:a4:8a:09:9f:5e:ad:86:9c:cc:c9:
                    e5:59:a0:b3:f1:f0:9e:9a:08:b0:bd:a5:1a:cb:f5:
                    d1:35:98:b0:15:f1:72:be:00:34:0c:af:92:17:cb:
                    ef:94:56:8c:d6:3f:83:ba:90:dc:1b:15:70:5e:d8:
                    17:21:f2:0a:ac:29:b5:57:56:85:0a:57:06:1b:dd:
                    f7:36:c5:e6:f4:27:55:f0:7d:61:be:8a:a8:24:2a:
                    6c:6e:02:b1:58:1a:2f:fd:32:6e:78:61:75:6a:cd:
                    12:f8:f3:1d:5d:73:0d:93:a7:48:de:29:44:05:8d:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:C9:8C:9C:42:26:EB:EA:74:E4:D3:59:3B:33:CA:D5:F9:56:CE:58
            X509v3 Authority Key Identifier:
                keyid:A2:41:E7:D9:19:F0:F1:16:AC:3B:88:FE:14:39:20:42:20:2D:EA:0C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/A241E7D919F0F116AC3B88FE14392042202DEA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okHn2Rnw8RasO4j-FDkgQiAt6gw.cer

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/1
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/1/5DC98C9C4226EBEA74E4D3593B33CAD5F956CE58.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:9e:9b:00:91:9f:83:ee:ac:3f:fa:79:9f:24:83:43:96:
         d4:bd:1a:b9:9e:18:3a:30:bb:a6:6b:78:ef:58:ca:75:22:68:
         09:6a:24:59:9a:ff:39:13:9c:cf:d6:7f:59:ca:fc:68:49:be:
         44:b1:07:33:a7:ed:aa:b5:7d:6d:b1:dd:96:90:d7:f9:12:8b:
         71:03:3f:76:31:fa:0c:41:23:bf:47:98:c1:48:df:21:74:2f:
         f5:97:60:49:c6:53:4e:71:af:3e:85:7e:02:bb:b5:88:3b:92:
         6b:53:4a:23:55:f2:1f:1d:42:b3:4f:0e:80:4e:2f:68:66:b2:
         69:04:cb:b5:90:11:9b:7c:0b:83:2f:43:cc:1a:7b:2b:5c:ea:
         3c:4d:49:ac:76:3c:10:39:71:1f:3d:c0:aa:a3:31:5d:96:e4:
         5f:70:6a:ca:0d:dc:e4:f1:34:33:29:6d:c5:8e:9e:84:b3:07:
         10:46:b6:71:98:9e:7d:01:dc:1b:8c:dd:99:cc:28:67:33:e0:
         83:ab:f0:1c:ee:cb:f4:e8:27:66:99:f2:6d:c3:75:9a:51:fa:
         eb:db:bf:b3:1e:b7:b2:cf:19:31:44:8f:f2:eb:b6:8a:6a:59:
         39:19:79:e2:98:76:77:5a:ea:8a:8e:18:1b:ec:ae:0a:f1:1d:
         3e:7d:89:38
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUFOvKNqMP/XMFrocSnCTL36tN2MowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyhBMjQxRTdEOTE5
RjBGMTE2QUMzQjg4RkUxNDM5MjA0MjIwMkRFQTBDMB4XDTIyMTIxNjE4MzEwNFoX
DTIzMTIxNTE4MzYwNFowMzExMC8GA1UEAxMoNURDOThDOUM0MjI2RUJFQTc0RTRE
MzU5M0IzM0NBRDVGOTU2Q0U1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/c/9O/3ojr7Pejq0EPnJ+5rPtnrNPR66DFWP5lLP2i7LczaTuYIf1n19tD
9D5i1VlB0eFcK/tiA2q177iqPS+qdm29QUtdfUYNk9uVo8UWAJgwHsZjbgBjHeXH
KWPzLRdWzKeDtVUQRkpr+SypVFjtlWajOAylWeOTAMe6HqDehMnA+dtn/pjpDf6k
igmfXq2GnMzJ5Vmgs/HwnpoIsL2lGsv10TWYsBXxcr4ANAyvkhfL75RWjNY/g7qQ
3BsVcF7YFyHyCqwptVdWhQpXBhvd9zbF5vQnVfB9Yb6KqCQqbG4CsVgaL/0ybnhh
dWrNEvjzHV1zDZOnSN4pRAWNQ98CAwEAAaOCAr0wggK5MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFF3JjJxCJuvqdOTTWTszytX5Vs5YMB8GA1UdIwQYMBaAFKJB
59kZ8PEWrDuI/hQ5IEIgLeoMMA4GA1UdDwEB/wQEAwIBBjBsBgNVHR8EZTBjMGGg
X6Bdhltyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBL
SS8zL0EyNDFFN0Q5MTlGMEYxMTZBQzNCODhGRTE0MzkyMDQyMjAyREVBMEMuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29rSG4yUm53OFJhc080ai1GRGtnUWlBdDZndy5jZXIwggErBggrBgEFBQcBCwSC
AR0wggEZMFUGCCsGAQUFBzAFhklyc3luYzovL3IubWFnZWxsYW4uaXB4by5jb20v
cmVwby85NWVhZDI0OS05ZDU3LTQ5YzItYjlmMS1kOTEyNDQzNDdlZWUtMC8xMIGC
BggrBgEFBQcwCoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOTVl
YWQyNDktOWQ1Ny00OWMyLWI5ZjEtZDkxMjQ0MzQ3ZWVlLTAvMS81REM5OEM5QzQy
MjZFQkVBNzRFNEQzNTkzQjMzQ0FENUY5NTZDRTU4Lm1mdDA7BggrBgEFBQcwDYYv
aHR0cHM6Ly9tYWdlbGxhbi5pcHhvLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWww
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWdEbDANBgkqhkiG9w0BAQsFAAOCAQEAGUqemwCRn4PurD/6eZ8kg0OW
1L0auZ4YOjC7pmt471jKdSJoCWokWZr/OROcz9Z/Wcr8aEm+RLEHM6ftqrV9bbHd
lpDX+RKLcQM/djH6DEEjv0eYwUjfIXQv9ZdgScZTTnGvPoV+Aru1iDuSa1NKI1Xy
Hx1Cs08OgE4vaGayaQTLtZARm3wLgy9DzBp7K1zqPE1JrHY8EDlxHz3AqqMxXZbk
X3Bqyg3c5PE0MyltxY6ehLMHEEa2cZiefQHcG4zdmcwoZzPgg6vwHO7L9OgnZpny
bcN1mlH669u/sx63ss8ZMUSP8uu2impZORl54ph2d1rqio4YG+yuCvEdPn2JOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org