Certificate

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/1/D6568D5C2C70639562FAE75BFF5E37D6DBA1AB8B.cer
File:                     D6568D5C2C70639562FAE75BFF5E37D6DBA1AB8B.cer (raw, json)
Hash identifier:          T8DLJlta+/Pn/NFRMWoCu19EOY1oWlArTNsXtcsVrko=
Subject key identifier:   D6:56:8D:5C:2C:70:63:95:62:FA:E7:5B:FF:5E:37:D6:DB:A1:AB:8B
Authority key identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
Certificate issuer:       /CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
Certificate serial:       32F4F5574C92EFD9E21E6713B8E95D411F8F0EA1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer
CRL Distribution Point:   rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl
Manifest:                 rsync://rsync.proxy-arp.network/repo/proxy-arp/3/D6568D5C2C70639562FAE75BFF5E37D6DBA1AB8B.mft
caRepository:             rsync://rsync.proxy-arp.network/repo/proxy-arp/3/
Notify URL:               https://krill.proxy-arp.network/rrdp/notification.xml
Certificate not before:   Sun 08 Nov 2026 18:10:29 +0000
Certificate not after:    Sun 07 Nov 2027 18:15:29 +0000
Subordinate resources:    IP: 2a13:c8c4:fce5::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:f5:57:4c:92:ef:d9:e2:1e:67:13:b8:e9:5d:41:1f:8f:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
        Validity
            Not Before: Nov  8 18:10:29 2026 GMT
            Not After : Nov  7 18:15:29 2027 GMT
        Subject: CN=D6568D5C2C70639562FAE75BFF5E37D6DBA1AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:86:cc:fb:2d:87:e4:66:2c:98:b0:fa:b1:
                    9a:6c:0d:dd:55:bb:cc:06:fd:d9:34:9a:7d:b1:cb:
                    de:61:da:43:1c:0f:f7:8b:cd:e0:96:c0:36:4b:30:
                    c2:1c:70:47:cc:8c:95:bd:2f:07:6b:8a:57:c4:54:
                    18:d0:20:c5:29:2c:2c:a3:89:70:c2:35:1d:a0:59:
                    4c:cf:5b:ec:77:ac:38:7e:f7:f6:5b:61:24:66:0f:
                    97:79:11:11:a6:54:05:04:d0:3f:19:2f:0c:ee:e3:
                    73:28:88:83:7b:94:8f:7a:d3:d4:0b:a4:8e:40:79:
                    bc:e5:24:17:1e:4f:74:81:e4:d4:6e:0a:e7:9b:43:
                    17:9f:90:f0:26:30:9f:c6:7a:d8:8a:f5:58:77:35:
                    76:39:65:62:44:c6:4f:d9:77:75:ac:81:17:d7:9d:
                    5e:e9:86:c4:6c:25:c0:c3:8d:b7:13:64:14:ee:89:
                    8f:7d:d8:2b:40:b1:a9:c0:8b:48:6b:4e:19:cf:c1:
                    cb:6d:ae:92:8d:57:f7:1d:f6:5b:e7:61:d0:13:b9:
                    84:12:7d:50:c6:1f:1d:cb:c4:b8:10:03:c6:fe:50:
                    41:63:4b:9b:bc:06:6d:54:54:72:b3:a8:c8:98:ef:
                    c9:e9:8f:57:29:1e:c2:7d:79:d6:cf:e6:71:a8:28:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:56:8D:5C:2C:70:63:95:62:FA:E7:5B:FF:5E:37:D6:DB:A1:AB:8B
            X509v3 Authority Key Identifier:
                keyid:4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.proxy-arp.network/repo/proxy-arp/3/
                RPKI Manifest - URI:rsync://rsync.proxy-arp.network/repo/proxy-arp/3/D6568D5C2C70639562FAE75BFF5E37D6DBA1AB8B.mft
                RPKI Notify - URI:https://krill.proxy-arp.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:fce5::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:17:83:d9:0a:12:16:33:9d:fb:32:aa:5f:de:a6:ed:46:09:
         2e:dd:29:55:fe:66:a1:c9:8e:17:d7:57:40:b5:27:af:f3:3f:
         3a:1d:35:72:b3:76:2e:10:39:e9:cf:c1:8c:bb:9c:07:7d:78:
         4d:95:e9:73:d5:99:9d:3b:d1:5e:2b:18:eb:46:55:d1:af:24:
         58:c6:18:d9:23:73:ae:8f:20:04:5c:64:04:b3:f1:f5:e7:0e:
         cf:a5:9b:2b:7f:97:c9:b5:7b:ff:09:3f:88:16:97:c1:65:a5:
         6e:4a:64:92:63:24:c1:2d:e5:b2:0f:61:97:03:24:c9:35:91:
         da:1d:3e:52:08:0d:2b:ab:9d:55:42:ee:64:b6:a7:36:c3:4f:
         d0:3b:6c:eb:e1:c4:7d:3e:48:3d:e9:c0:cc:86:eb:e7:da:b7:
         db:fd:b9:d1:a8:ef:2e:e0:fa:31:c1:79:d0:fe:dd:a3:6f:85:
         f6:52:ac:f1:ae:27:6c:22:d8:4f:48:89:d0:c5:3c:39:53:11:
         d8:88:02:dc:83:bf:cc:ef:c6:93:0e:de:87:55:91:0a:a2:0d:
         5b:d5:66:7e:75:e3:9b:8f:42:a0:90:07:90:95:30:62:6e:5e:
         35:50:33:82:70:f0:a2:52:2c:05:22:c7:32:a6:61:fc:7b:1c:
         85:80:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----