Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/967A5277304F0B129F1D579BC0BC6956F228A387.cer
File:                     967A5277304F0B129F1D579BC0BC6956F228A387.cer (raw, json)
Hash identifier:          3otEWkcWx6vglfzp3Y7SzRhEsyydhQnKffO3N//MBNo=
Subject key identifier:   96:7A:52:77:30:4F:0B:12:9F:1D:57:9B:C0:BC:69:56:F2:28:A3:87
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       2DC9C379D1E2B2B0C809F0AA0F029CEC9163E846
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0/967A5277304F0B129F1D579BC0BC6956F228A387.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:51:39 +0000
Certificate not after:    Wed 20 Dec 2023 16:56:39 +0000
Subordinate resources:    IP: 103.68.109.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c9:c3:79:d1:e2:b2:b0:c8:09:f0:aa:0f:02:9c:ec:91:63:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=967A5277304F0B129F1D579BC0BC6956F228A387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:67:7e:45:be:14:f5:57:17:51:32:91:be:
                    7b:e9:3a:8c:a4:27:d0:59:6f:cf:a4:9f:56:d9:54:
                    62:bb:63:7b:2d:75:86:ba:e8:46:34:40:d9:3b:3a:
                    df:86:f3:a5:71:c6:c7:cc:a4:83:7b:ca:d5:ee:48:
                    d5:c9:4c:12:20:c2:c5:89:10:51:dd:18:33:ea:7b:
                    31:58:4d:b5:cc:a6:14:41:d4:ec:cd:53:01:88:6e:
                    23:39:a2:8a:3f:f2:09:e3:8a:e4:34:7b:42:56:23:
                    5d:93:9b:69:4c:64:3e:89:88:a5:f1:cd:85:e0:ef:
                    6b:33:ac:f7:0c:13:02:24:1d:3d:84:9d:67:4c:b7:
                    77:b9:4f:88:73:1e:0b:c8:20:15:d1:8e:67:11:97:
                    2d:af:b3:cb:44:f1:91:31:90:6d:cf:c8:d5:6a:1b:
                    82:98:ad:42:c2:4e:52:c2:8d:90:99:97:14:44:d5:
                    1b:bd:32:63:a1:e3:67:46:c8:51:ef:cc:f6:d4:90:
                    d5:79:b5:0f:e4:f4:bb:01:a3:8c:66:aa:e8:fc:ae:
                    b6:1b:9e:58:b4:7b:0d:12:20:34:c9:84:b1:14:7b:
                    16:b0:cb:31:83:ae:dd:45:0b:eb:f7:30:79:f3:7e:
                    14:96:d2:f7:bd:45:75:6c:2b:11:2f:36:af:00:ec:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:7A:52:77:30:4F:0B:12:9F:1D:57:9B:C0:BC:69:56:F2:28:A3:87
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0/967A5277304F0B129F1D579BC0BC6956F228A387.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:eb:6a:d8:e5:49:9c:2e:7b:f4:61:6e:cc:64:7f:f7:5b:
         6c:24:16:0c:fe:9c:9b:8a:3e:06:22:7f:79:f0:76:59:f3:7b:
         33:51:3a:69:52:3c:04:50:0a:bf:d3:c2:85:4d:cc:57:69:d4:
         f4:90:c5:fc:70:7d:a6:70:59:7d:b4:1d:bd:da:82:31:05:90:
         a1:cc:53:1f:a6:24:fa:a6:7f:d2:c4:cc:0a:20:3d:a3:59:dd:
         81:ad:70:a8:bb:a8:e5:c2:7c:fd:e2:16:43:62:bd:20:9d:ae:
         e8:92:01:1b:02:56:36:1f:98:e9:3b:75:62:41:0d:01:3c:24:
         db:38:d0:cc:a0:4a:91:d8:0e:40:b2:e4:0e:21:f1:e8:74:3c:
         2e:e3:5d:48:b2:82:57:5d:ad:cc:d6:ca:0e:ad:78:2f:48:e3:
         bc:d5:13:d0:27:ba:a9:37:5d:c1:d6:00:d7:05:be:87:e7:6c:
         eb:1f:cc:42:65:4a:51:44:c7:d3:26:3e:b3:59:8c:e1:4f:d2:
         d4:c6:af:7f:3e:90:22:47:11:0d:34:1f:b9:7c:90:61:c1:4a:
         96:9c:cf:ef:c6:15:35:b2:54:b0:3c:e0:8d:50:66:31:fa:32:
         9a:b9:70:6b:76:c0:57:96:56:80:fd:f9:b3:68:47:f9:00:7a:
         15:2f:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org