Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/10/91E8C1AA609241E419FF4C871B3E2532BF349477.cer
File:                     91E8C1AA609241E419FF4C871B3E2532BF349477.cer (raw, json)
Hash identifier:          UnduQ1s+WWGwy0H0f47sNyTvhRR6XTNJQPAPNJerbbU=
Subject key identifier:   91:E8:C1:AA:60:92:41:E4:19:FF:4C:87:1B:3E:25:32:BF:34:94:77
Authority key identifier: 2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06
Certificate issuer:       /CN=7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949
Certificate serial:       69B2D3A6E30DE90DD019915B3DAD0583968D5C11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer
Manifest:                 rsync://rpki.co/repo/August/7/91E8C1AA609241E419FF4C871B3E2532BF349477.mft
caRepository:             rsync://rpki.co/repo/August/7
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 2602:fb44::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b2:d3:a6:e3:0d:e9:0d:d0:19:91:5b:3d:ad:05:83:96:8d:5c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=91E8C1AA609241E419FF4C871B3E2532BF349477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:35:1e:28:6a:f8:6b:ca:9a:e4:5a:d9:02:
                    d3:a0:44:f1:8c:5f:70:d1:b9:9c:c6:1c:6d:a9:1f:
                    26:fa:18:30:2f:48:b6:48:a2:3f:3d:97:9e:da:c2:
                    91:eb:7c:c9:fe:72:34:54:43:45:1e:3c:c9:f2:ca:
                    30:cf:02:c6:bc:2d:96:f2:d8:6c:89:92:29:fb:44:
                    ae:0f:fe:4b:be:3b:ad:72:ce:db:64:96:5d:e3:d5:
                    ac:bc:12:30:aa:a8:5c:df:90:54:51:bf:4c:bd:60:
                    93:6d:14:5d:d8:16:18:f2:cc:e8:70:3b:82:c2:37:
                    d9:33:d3:67:8f:fe:db:fe:0a:54:a2:91:7f:a9:2f:
                    22:e8:85:06:6b:6d:e4:5f:de:d6:ac:cc:50:0d:46:
                    49:5a:c9:cd:a9:9b:96:3c:0b:52:9a:88:13:c3:86:
                    f9:fe:ab:3b:67:32:9b:db:16:8f:f6:e7:b8:d4:27:
                    bf:44:ce:09:59:4c:a7:d2:d0:25:b4:93:fd:cf:2a:
                    d4:5b:d5:fe:64:c2:d4:ad:2a:69:9f:69:59:3b:a0:
                    1d:64:30:b2:1d:cb:59:b7:9b:2c:ca:bc:5b:1f:66:
                    8c:ad:6b:95:dd:27:ab:66:d5:24:bb:8f:dd:02:cc:
                    64:26:3b:5d:ec:2e:4b:57:e7:e3:4a:60:6a:07:4b:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:E8:C1:AA:60:92:41:E4:19:FF:4C:87:1B:3E:25:32:BF:34:94:77
            X509v3 Authority Key Identifier:
                keyid:2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/7
                RPKI Manifest - URI:rsync://rpki.co/repo/August/7/91E8C1AA609241E419FF4C871B3E2532BF349477.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                IPv6:
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:5f:3e:b5:3a:93:bc:ac:6c:70:53:9a:c0:d5:71:a9:78:
         ed:5f:46:34:ba:fb:ab:e5:8b:95:90:d3:ae:cb:8f:44:81:ca:
         72:30:ed:94:5b:4a:11:a9:7f:82:17:48:01:0f:a5:f4:c2:99:
         a3:fb:a4:1c:d6:d9:48:36:03:85:40:f9:c7:e3:8c:83:0d:87:
         80:3b:94:f5:56:ff:02:97:e5:f7:fb:bd:27:e2:87:60:4f:80:
         7c:0b:5e:c4:ba:fe:49:5b:0b:91:1a:84:52:34:df:79:e2:b9:
         43:33:ea:90:f4:a5:63:74:5f:8b:47:f5:1b:ae:8e:d3:e4:0a:
         1d:fa:a7:b2:0d:52:59:f8:0a:92:d2:0a:3d:94:6f:4e:09:9b:
         d8:ae:e6:fe:f9:61:97:9a:fe:46:2f:25:6a:3a:38:c1:b1:57:
         74:8a:18:4a:6a:d8:98:7b:c7:c2:c6:bd:50:97:5f:0d:40:39:
         d1:ab:3c:e8:0b:28:a8:fb:1a:3f:0d:5c:71:71:63:59:57:e6:
         21:a7:75:5d:10:a2:cc:d2:3c:8b:3c:48:92:3a:20:6b:e7:47:
         94:3d:f2:7e:45:c9:3f:7a:ac:9c:15:9c:c0:80:d1:0e:69:2d:
         4f:c6:2b:85:bd:49:bb:49:00:d2:23:4b:34:75:2f:1a:68:e9:
         b8:14:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:15 2023 by rpki-client on console.sobornost.net