Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/8B30E5A9EFDDAFE9024ACD9142AED5C2DC4445D1.cer
File:                     8B30E5A9EFDDAFE9024ACD9142AED5C2DC4445D1.cer (raw, json)
Hash identifier:          KYNpqkS1Lhh2S0O+IkCSCoMgo5kPRjObJDsdNl+rIF4=
Subject key identifier:   8B:30:E5:A9:EF:DD:AF:E9:02:4A:CD:91:42:AE:D5:C2:DC:44:45:D1
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       18C8946D0501F7BCF4BAD4CCC365B4AD28294A30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/1/8B30E5A9EFDDAFE9024ACD9142AED5C2DC4445D1.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 06 Jul 2023 13:32:56 +0000
Certificate not after:    Thu 04 Jul 2024 13:37:56 +0000
Subordinate resources:    IP: 2602:fa6e:100::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:94:6d:05:01:f7:bc:f4:ba:d4:cc:c3:65:b4:ad:28:29:4a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  6 13:32:56 2023 GMT
            Not After : Jul  4 13:37:56 2024 GMT
        Subject: CN=8B30E5A9EFDDAFE9024ACD9142AED5C2DC4445D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:75:e3:4c:91:e2:1f:23:e7:a7:1f:48:2f:
                    b9:96:81:7c:32:a0:5d:99:50:5b:08:6c:58:59:a7:
                    f2:50:17:0d:e6:ef:b0:a9:73:77:35:8a:d5:6b:c4:
                    90:f6:33:42:27:7c:bb:90:30:04:ac:cc:47:c5:7c:
                    90:b8:98:72:9a:57:cc:06:a8:e2:18:79:da:0a:a5:
                    c4:ca:dd:13:1a:50:87:23:21:5a:ac:0e:0b:09:23:
                    28:e6:58:2c:ef:57:46:4a:9d:57:5d:16:be:8c:74:
                    03:e0:64:70:e6:0a:e1:57:7f:28:69:80:e8:e4:84:
                    21:69:1c:5e:8e:63:09:e9:97:a1:84:85:ce:d7:03:
                    d0:ba:a9:37:2b:47:99:8a:90:1e:2b:3d:03:53:a5:
                    d9:53:60:a3:3a:c8:46:b4:2e:c1:ca:d9:f2:c3:6f:
                    79:25:4d:6b:09:03:49:f9:85:a9:c1:ae:06:9d:9e:
                    83:d2:9e:38:84:c5:e3:66:40:61:d7:70:be:90:b1:
                    bd:70:67:2e:26:3b:99:c8:c4:5a:cd:fd:43:f5:55:
                    ce:09:e2:76:c2:b8:80:b1:7c:32:bb:ec:c9:a5:1d:
                    b5:3b:41:61:c7:bb:2f:37:a9:fd:a8:1c:54:1b:2e:
                    8d:58:bf:e4:80:00:65:2e:1f:66:69:55:cf:0e:02:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:30:E5:A9:EF:DD:AF:E9:02:4A:CD:91:42:AE:D5:C2:DC:44:45:D1
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/1/8B30E5A9EFDDAFE9024ACD9142AED5C2DC4445D1.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:57:f3:ea:e8:a0:9b:76:bf:17:ab:b7:94:f6:0e:7b:c2:
         d5:d5:20:7e:02:2c:5e:88:f8:81:77:56:50:4c:d6:10:7a:68:
         a0:be:da:56:87:33:e0:db:eb:16:42:fc:12:b4:9d:02:4c:45:
         db:f2:b3:73:c7:b6:50:4b:e9:e8:7d:5c:e1:85:ff:0b:5b:18:
         aa:a1:0a:48:61:f0:0e:8a:3d:4b:b3:15:ec:dc:b5:98:84:5f:
         6c:7e:e8:aa:eb:e0:dc:3b:90:12:61:41:ff:cc:27:4b:70:28:
         ed:79:ca:2e:bd:86:b5:bf:51:63:e1:18:20:ce:b1:80:96:58:
         3e:69:61:f3:bb:33:f1:d7:74:24:3c:4b:db:1d:36:79:ed:7a:
         fe:4c:04:e1:1e:2f:2c:1f:d2:7e:d9:38:15:ac:a5:92:fd:7f:
         c1:8e:3c:fa:15:69:c2:0c:89:b2:55:d6:ff:88:af:98:9a:70:
         65:0b:4b:ed:fd:f1:28:66:6d:0a:f5:13:58:ad:1a:a5:5c:e1:
         41:88:ba:a6:13:6f:21:d6:5a:1a:df:65:7d:b3:f1:73:49:3d:
         9f:2a:40:c5:b9:2a:e2:99:ed:36:c7:e7:4a:2b:19:bf:46:2e:
         28:48:8f:39:a2:98:a2:14:c9:3a:db:e0:ca:04:ca:8c:9c:e1:
         80:1d:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:46 2023 by rpki-client on console.sobornost.net