Certificate

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.cer
File:                     368B4CE2B4E5ABE8639CDD6D75E538CA59521572.cer (raw, json)
Hash identifier:          ndaEk68Drettal3GPrMfI0qmuLf+duUJvb8WufUPniE=
Subject key identifier:   36:8B:4C:E2:B4:E5:AB:E8:63:9C:DD:6D:75:E5:38:CA:59:52:15:72
Authority key identifier: F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19
Certificate issuer:       /CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
Certificate serial:       1A0F6F6B93465EB3D1B720BC306137193C31E3E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer
Manifest:                 rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.mft
caRepository:             rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/
Notify URL:               https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
Certificate not before:   Mon 21 Feb 2022 16:45:02 +0000
Certificate not after:    Mon 20 Feb 2023 16:50:02 +0000
Subordinate resources:    IP: 2602:feda:bb0::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:6f:6b:93:46:5e:b3:d1:b7:20:bc:30:61:37:19:3c:31:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be
        Validity
            Not Before: Feb 21 16:45:02 2022 GMT
            Not After : Feb 20 16:50:02 2023 GMT
        Subject: CN=368B4CE2B4E5ABE8639CDD6D75E538CA59521572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:d8:01:0e:82:41:2f:f9:35:30:d9:39:55:
                    3f:4d:43:6a:fc:d6:29:df:f6:23:05:cd:d6:dd:0a:
                    ff:18:74:51:16:6c:b7:c0:83:75:9b:7a:c2:80:95:
                    b6:28:3a:4d:2d:4e:e6:49:5c:9e:6b:e0:e5:16:ea:
                    3d:9e:a9:e6:49:4d:33:8e:47:97:02:82:d8:00:d3:
                    32:a9:b2:85:ea:e5:f6:84:ec:08:73:bd:8a:94:56:
                    07:74:3d:35:7e:dc:87:6b:1f:03:58:cd:87:f4:12:
                    43:6f:be:de:57:54:dd:e1:95:8d:04:c5:d6:ce:33:
                    02:4c:48:c7:54:86:e2:0d:63:04:3e:5a:9d:ee:57:
                    e9:ee:32:21:97:a4:fb:f1:b7:e7:0e:77:5f:f4:e2:
                    e7:ed:e1:3d:1f:60:f8:a7:96:c5:61:16:10:25:f3:
                    5d:e0:7c:8a:de:1d:86:4d:61:6c:8e:dd:d8:99:e6:
                    cf:4e:14:e6:d7:8b:de:f9:3d:b4:bb:e1:96:d3:c9:
                    40:a3:98:5a:44:16:e0:15:c5:e7:10:4e:34:b1:da:
                    5d:77:69:f1:bb:54:42:f3:ab:f8:a3:0d:dc:70:4e:
                    33:4c:ed:72:33:ff:fc:4b:12:05:8e:c3:6d:2d:73:
                    84:8b:71:8b:23:a3:12:9b:04:d5:72:f8:4e:dd:1c:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:8B:4C:E2:B4:E5:AB:E8:63:9C:DD:6D:75:E5:38:CA:59:52:15:72
            X509v3 Authority Key Identifier:
                keyid:F4:3E:07:03:28:FC:CF:A5:C9:99:CE:F9:7F:3D:0B:3C:2D:62:CA:19

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/0/F43E070328FCCFA5C999CEF97F3D0B3C2D62CA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46fb1b96f7d8798f565e92eb683a28d8da9191693be.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/
                RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/0/368B4CE2B4E5ABE8639CDD6D75E538CA59521572.mft
                RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:bb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:f9:99:84:8b:18:18:ac:e7:ee:3c:d1:14:71:27:14:2f:
         76:e8:c7:44:e7:5c:84:c7:66:95:e4:d3:93:15:08:76:99:60:
         4a:15:69:54:70:93:79:7a:01:c2:c3:93:c7:ac:f7:86:b0:40:
         74:cd:2b:2c:a8:88:e3:3a:91:a0:4f:d3:a2:76:ee:26:78:dc:
         0d:19:9b:27:57:82:bf:e1:c3:2b:e6:73:08:1d:43:92:7d:ad:
         b1:0e:69:f3:55:94:6a:e4:81:bf:05:98:62:7c:00:d8:8f:73:
         3e:f1:40:67:f5:af:6b:cb:ad:1d:09:3a:43:0c:8b:98:ca:a1:
         c4:e3:ce:5d:85:90:e5:9a:92:a5:48:94:da:58:9e:0d:5d:cc:
         77:16:56:59:1b:c1:e2:0f:f4:1e:6f:a2:3a:f9:1e:47:9e:92:
         df:e5:c2:85:d6:c6:89:8f:91:71:01:0b:c0:d5:f7:24:aa:e0:
         83:69:8e:75:21:69:25:fe:c2:3d:40:79:24:87:54:eb:b4:d2:
         c4:7f:ea:4a:4a:0c:df:e4:7d:31:e1:32:1e:35:a4:fc:ff:46:
         4d:ad:12:55:48:78:af:e8:db:a0:fa:1e:c7:81:c9:54:4d:e5:
         be:4b:cc:24:17:56:d5:1e:75:c4:38:ff:cf:34:fc:c9:20:34:
         e8:19:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org