Certificate

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer
File:                     C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json)
Hash identifier:          wNQrgODAerZZYe3Wbz28J2vgVlApLi7ZHQTICRGWHYE=
Subject key identifier:   C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       52FB4B109B4C714B9040225B891215C122FD082A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
caRepository:             rsync://rpki.sunoaki.net/repo/net186/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Fri 20 Dec 2024 22:41:28 +0000
Certificate not after:    Fri 19 Dec 2025 22:46:28 +0000
Subordinate resources:    IP: 2602:2a3::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fb:4b:10:9b:4c:71:4b:90:40:22:5b:89:12:15:c1:22:fd:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 22:41:28 2024 GMT
            Not After : Dec 19 22:46:28 2025 GMT
        Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19:
                    a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5:
                    3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75:
                    bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e:
                    91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7:
                    54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61:
                    32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1:
                    d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01:
                    fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad:
                    ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e:
                    b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f:
                    94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b:
                    ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5:
                    ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44:
                    a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91:
                    35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90:
                    57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:61:9a:4a:fb:71:0b:66:2d:f2:d2:3a:7f:28:4c:7b:9b:ae:
         c7:fc:b8:4b:4d:95:6f:d6:52:4f:b8:66:47:98:a4:c7:5f:e9:
         71:dd:55:ba:6f:6c:bb:86:15:f8:e7:9b:4a:3a:46:e7:96:e6:
         9c:ad:11:a8:36:36:c1:95:7a:25:25:0a:e5:94:0e:1a:3b:69:
         f9:bb:2e:e9:53:6f:9b:1d:d8:61:14:d4:b3:ae:a0:1b:76:cc:
         94:8b:66:8d:7e:73:c6:46:68:7d:18:12:35:20:7d:6e:fb:dd:
         05:95:66:4b:cd:97:54:1e:c4:14:5e:b7:bb:45:b3:97:6e:8c:
         1e:c1:19:e0:7a:95:3f:f4:13:02:ef:e4:15:6e:79:37:7b:b8:
         61:6f:1d:80:d3:2f:98:88:be:9b:70:bf:6b:ab:30:fa:62:23:
         f5:a2:ed:c7:d6:1a:27:f7:5f:68:09:f3:6d:03:b2:ce:8e:6e:
         67:b0:41:ca:6c:fb:d2:7f:4f:ee:4b:39:2c:c7:c8:ba:b3:bb:
         4b:e1:d4:fd:c4:40:71:69:14:73:e7:27:c4:cd:d8:0b:b4:51:
         b9:2e:b5:09:f2:dd:40:d5:56:62:ca:23:72:f5:b5:56:f5:07:
         f7:9d:2c:bb:d4:a2:d1:dc:cf:9f:ab:3a:57:c2:cd:c9:57:02:
         8d:77:18:a2
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgIUUvtLEJtMcUuQQCJbiRIVwSL9CCowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjQxMjIwMjI0MTI4WhcNMjUxMjE5MjI0NjI4
WjAzMTEwLwYDVQQDEyhDMjFEMTU4RTYyNUEzM0Y2MkYwMzk3QTVCOEQ3RDY4OUVF
MkZDNEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ToGI3SIqyLX
tz6YeRmhzzttMHx+i4IjEO9gdaU+i5J0if87qb8peyaMh3W74NWMfTBdZx+BinMt
zi6REOMNTE1oiaU/6QA7mqdUcxKWfV+AhXZUKu+QLGEyEU4qS5y9lYl18AN//cHS
z+kNHgqNCgCbj1VtHgH78WVYtfbvly8ET2brOa3sWg3PSl+x82foDjk21x6w41Pg
oXK37jfx5obPeH+UJHCfa+pdh2gtWw5CCRvKsqSkQZOvV17iHN1y3/Wu4PQa2ofZ
kpcfkAecLUSlDNIIt25kwHZlBzKLMZE1z3qEF1pcSksLdwPsK5BX9Umlxru73vp3
qN9HdEv+zwIDAQABo4IC5DCCAuAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
wh0VjmJaM/YvA5eluNfWie4vxLYwHwYDVR0jBBgwFoAUF6jocGCJm9uGaqEPh7E7
igR8rJkwDgYDVR0PAQH/BAQDAgEGMGUGA1UdHwReMFwwWqBYoFaGVHJzeW5jOi8v
cnBraS5zdW5vYWtpLm5ldC9yZXBvL1NVTk9BS0kvMC8xN0E4RTg3MDYwODk5QkRC
ODY2QUExMEY4N0IxM0I4QTA0N0NBQzk5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMw
geAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv
YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQwZTZjYWIt
ZTY2Yy00Y2E3LWFiNjEtMTI2YjNjZmNiYjg2LzcyMDNkZTlhOTNhNjEzNjI0ZmVi
ZjhjZWY4NWViMTc2ZmViNTQ1NDA1MWJiZjY5YzNlLmNlcjCB4gYIKwYBBQUHAQsE
gdUwgdIwMwYIKwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5zdW5vYWtpLm5ldC9yZXBv
L25ldDE4Ni8wLzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0
L3JlcG8vbmV0MTg2LzAvQzIxRDE1OEU2MjVBMzNGNjJGMDM5N0E1QjhEN0Q2ODlF
RTJGQzRCNi5tZnQwOgYIKwYBBQUHMA2GLmh0dHBzOi8vcnBraS5zdW5vYWtpLm5l
dC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYCAqMAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHYZpK+3ELZi3y0jp/KEx7m67H/LhLTZVv1lJPuGZHmKTHX+lx3VW6
b2y7hhX455tKOkbnluacrRGoNjbBlXolJQrllA4aO2n5uy7pU2+bHdhhFNSzrqAb
dsyUi2aNfnPGRmh9GBI1IH1u+90FlWZLzZdUHsQUXre7RbOXbowewRngepU/9BMC
7+QVbnk3e7hhbx2A0y+YiL6bcL9rqzD6YiP1ou3H1hon919oCfNtA7LOjm5nsEHK
bPvSf0/uSzksx8i6s7tL4dT9xEBxaRRz5yfEzdgLtFG5LrUJ8t1A1VZiyiNy9bVW
9Qf3nSy71KLR3M+fqzpXws3JVwKNdxii
-----END CERTIFICATE-----