Certificate

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/6A18AEB5B6DDD0D50168C3558DA0523B7EBA5E58.cer
File:                     6A18AEB5B6DDD0D50168C3558DA0523B7EBA5E58.cer (raw, json)
Hash identifier:          gafcsVskrF5fRkPkARsy2JN9fVu1riPfZ33UtfAcpSU=
Subject key identifier:   6A:18:AE:B5:B6:DD:D0:D5:01:68:C3:55:8D:A0:52:3B:7E:BA:5E:58
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       7C3025D4EAC935F728DBEE19384BED05E33CC832
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/customer-moedove/0/6A18AEB5B6DDD0D50168C3558DA0523B7EBA5E58.mft
caRepository:             rsync://rpki.sunoaki.net/repo/customer-moedove/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Wed 08 Jan 2025 18:13:11 +0000
Certificate not after:    Wed 07 Jan 2026 18:18:11 +0000
Subordinate resources:    IP: 2602:2a3:1000::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:30:25:d4:ea:c9:35:f7:28:db:ee:19:38:4b:ed:05:e3:3c:c8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Jan  8 18:13:11 2025 GMT
            Not After : Jan  7 18:18:11 2026 GMT
        Subject: CN=6A18AEB5B6DDD0D50168C3558DA0523B7EBA5E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:65:3c:fc:8e:88:0e:8b:94:db:97:ea:9c:
                    2d:59:64:b0:b9:22:9b:37:6e:1b:0b:79:9b:91:30:
                    d3:d3:35:e3:fb:ac:3d:8e:20:2b:f0:1f:e6:76:90:
                    c1:49:95:ab:0e:ed:b5:32:1f:5b:75:1d:42:3f:4d:
                    6c:7d:cd:46:26:75:c8:5f:b1:d3:66:0e:e3:73:29:
                    91:d1:32:9d:8f:45:af:cb:3c:14:74:45:c8:ee:6a:
                    b9:7a:67:f8:c5:21:9b:e4:f4:b3:5a:5e:ee:f5:3a:
                    6c:2f:23:a7:7b:c6:c4:90:e3:e2:58:b5:fe:39:c5:
                    75:56:c5:95:0c:68:72:bd:e6:db:18:67:d6:10:9b:
                    5d:43:a4:89:20:e6:0b:84:3f:7d:d0:6e:6e:d3:ed:
                    ab:09:51:d4:48:e2:97:76:a1:07:3e:bc:3d:31:48:
                    50:5d:28:e3:4f:ff:9d:d2:87:f4:23:ba:99:82:4b:
                    88:9e:59:b3:84:dd:ab:26:d3:e0:8c:95:44:c7:8d:
                    5c:5a:76:60:2c:aa:73:21:a8:27:87:e8:8e:80:4d:
                    52:48:62:35:8b:58:8a:e5:66:da:7a:3c:88:7e:b6:
                    1c:4b:a8:c1:39:23:bb:6c:b7:26:9f:7c:d4:20:25:
                    30:9d:68:70:bf:ad:11:bd:70:3b:d3:53:63:bd:4a:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:18:AE:B5:B6:DD:D0:D5:01:68:C3:55:8D:A0:52:3B:7E:BA:5E:58
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/customer-moedove/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/customer-moedove/0/6A18AEB5B6DDD0D50168C3558DA0523B7EBA5E58.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:09:39:82:0c:47:ef:22:cf:c4:eb:de:a2:4e:12:53:59:ad:
         97:f0:b9:e8:cc:3c:d7:0b:78:24:a1:92:8b:cb:a9:08:8e:5f:
         79:65:c3:d4:6b:d4:bb:66:24:c4:0c:56:71:6a:e9:8d:25:d3:
         9f:5d:db:1e:6d:11:ff:4a:ff:51:19:ad:8b:36:81:a0:3b:81:
         0a:28:52:0f:79:b7:9c:b1:23:d6:6c:b3:e4:7c:fc:98:9c:c3:
         6f:d0:e9:25:08:92:af:34:f6:e5:b9:c9:95:8b:c0:b2:73:18:
         09:8c:4c:20:f5:1c:72:5b:8a:28:40:ac:c6:2a:db:c5:e0:99:
         55:d7:47:e0:0f:0d:37:6e:c0:bc:96:ae:e4:95:54:f2:24:29:
         d3:f7:c9:7f:4d:7c:bb:04:9c:0e:86:d7:8b:62:bf:15:9b:17:
         38:9d:2f:f2:b2:9a:d7:68:58:4b:c1:81:e5:b5:44:9d:c6:ce:
         e2:b8:3d:91:91:86:6c:f7:18:09:e3:64:8c:87:4a:92:b4:6d:
         86:d9:96:95:17:f3:92:09:21:11:1d:bb:8d:78:5b:04:6a:2d:
         73:95:1d:8a:ed:19:54:7a:c8:e7:93:d4:9b:76:d7:19:75:e7:
         eb:c2:07:f6:68:b8:03:05:1a:2e:03:21:a4:8d:57:a2:89:de:
         da:29:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----