Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/0/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer
File:                     96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer (raw, json)
Hash identifier:          pqS2XFIf6DFC8zo7tWmW8ZOE+i0HqlmrTD+Qee02kZQ=
Subject key identifier:   96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
Authority key identifier: 21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86
Certificate issuer:       /CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
Certificate serial:       191495EEE59B0E5A5231F0A5F303F73CF799DE32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 2602:fc23:120::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:14:95:ee:e5:9b:0e:5a:52:31:f0:a5:f3:03:f7:3c:f7:99:de:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:39:c0:0f:a5:ce:71:64:0f:71:9f:a9:0f:
                    c9:0a:0e:a3:83:68:c3:e6:da:f0:5d:32:cc:53:5f:
                    2f:4b:e5:9e:50:4e:c5:d0:05:de:c1:95:38:b0:4a:
                    68:09:f6:49:e0:f3:b0:a4:ce:90:14:55:96:a4:63:
                    1f:52:6f:d0:4a:76:4a:51:90:da:f2:61:9d:f4:75:
                    4f:99:2e:e2:6e:ca:c1:68:5c:fe:b3:ba:85:60:96:
                    f1:de:30:45:0e:da:c5:7f:f1:db:da:f2:c2:37:1c:
                    03:24:f3:af:98:85:8c:07:ef:9c:a8:3e:87:64:f3:
                    b2:06:49:6d:ee:20:8e:95:97:cd:c3:50:af:c2:6a:
                    92:10:e7:25:73:7a:78:b5:38:ce:bc:e2:4c:6f:33:
                    4d:a7:7e:b5:3c:cb:d0:13:4d:e4:73:d8:63:4f:85:
                    a1:9d:d8:f3:97:8f:8e:a3:2e:5d:b7:23:ce:8a:1e:
                    da:11:7d:83:3c:10:48:81:76:ee:32:7a:12:5d:94:
                    f1:f3:65:90:fe:c8:1d:8c:e3:10:ca:49:74:0c:e5:
                    a2:f1:00:77:c1:c3:0e:c1:5f:77:48:80:cf:14:0e:
                    5b:58:27:8b:26:44:10:66:b9:6c:71:4e:9f:33:38:
                    26:ca:af:f9:49:ea:b0:5a:dd:7a:3d:9b:5b:2b:2d:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:D0:EC:0D:9F:1A:81:63:6A:AB:CE:EF:A2:CE:15:21:EF:D2:D2:CD
            X509v3 Authority Key Identifier:
                keyid:21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:ae:50:bd:f9:56:7d:bb:96:37:c2:26:e9:f2:51:b1:16:
         e2:24:7f:33:57:52:d2:0a:35:72:4b:4c:7a:9e:45:b0:35:48:
         b8:4a:2c:9d:ef:dd:7e:4f:ed:9c:f6:2b:50:5d:91:d9:1e:29:
         71:36:ae:70:41:29:e2:64:8a:87:34:09:35:6f:59:55:2b:dd:
         38:d4:97:4e:b2:08:07:ad:02:7e:2e:88:f7:f0:2e:b9:cd:39:
         5e:7f:34:33:d4:7b:79:18:ee:dd:53:5d:e6:91:18:6e:0a:34:
         87:63:75:58:dd:f2:0a:9d:51:93:bb:b1:e0:b6:db:0a:e3:33:
         64:33:07:e0:74:c7:e6:ea:d6:a6:0d:eb:bf:c6:62:14:70:fd:
         d0:14:9a:35:1f:ad:cd:19:71:28:5b:34:1c:03:d5:83:58:d1:
         ac:e3:46:c5:d5:13:4b:99:a1:8c:2d:0c:83:63:d9:65:c8:92:
         f0:cb:1f:ad:bc:89:74:e8:d4:86:65:4b:78:6b:f3:5c:77:8b:
         3b:42:3a:1d:21:65:cd:42:d7:fe:93:ae:72:87:ec:29:44:23:
         d1:9a:28:40:bf:45:44:d7:71:56:e4:30:de:53:d2:79:0d:9f:
         c9:f3:06:55:53:34:97:d0:bc:5e:48:9a:95:bf:d0:f6:16:8d:
         e5:5a:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----