Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/17/6933B50843CCE9D912AD654001C699DB152EA139.cer
File:                     6933B50843CCE9D912AD654001C699DB152EA139.cer (raw, json)
Hash identifier:          uIso7jJzTx5hpYv4+6QcT0EHLeHIQOystlqiBpTs/8U=
Subject key identifier:   69:33:B5:08:43:CC:E9:D9:12:AD:65:40:01:C6:99:DB:15:2E:A1:39
Authority key identifier: 0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE
Certificate issuer:       /CN=a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57
Certificate serial:       3BA237E004B14B8ACB30997D5DDFE39FC730BF2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer
Manifest:                 rsync://rpki.co/repo/August/12/6933B50843CCE9D912AD654001C699DB152EA139.mft
caRepository:             rsync://rpki.co/repo/August/12
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    IP: 23.149.248.0/24
                          IP: 149.112.53.0/24
                          IP: 2602:fa90::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a2:37:e0:04:b1:4b:8a:cb:30:99:7d:5d:df:e3:9f:c7:30:bf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=6933B50843CCE9D912AD654001C699DB152EA139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:fd:6f:d6:be:3f:ba:94:71:ec:52:03:91:
                    02:b3:99:f3:78:85:11:b2:da:11:49:15:a4:4d:05:
                    76:eb:94:85:df:13:56:fd:62:81:65:3b:b6:d3:ac:
                    e2:f3:6d:2f:57:d2:ce:40:e6:ee:29:09:fa:62:56:
                    98:50:9c:c8:72:6b:38:0b:c3:00:1a:fe:8e:86:f0:
                    57:1f:3b:9d:ee:00:8b:31:c8:99:3a:f8:b6:cc:cd:
                    ca:7f:7c:cc:16:db:4c:9c:73:74:bd:b8:32:36:76:
                    8d:f1:72:b0:7b:cc:94:fa:2b:78:ee:0f:e0:93:cc:
                    03:f2:43:a9:a4:4c:cc:98:ad:ed:54:8d:d8:74:41:
                    7f:5b:5f:ea:53:3f:1e:cf:ec:58:78:03:ea:3a:39:
                    75:bb:ec:4b:9f:c9:c7:b7:b7:3e:ed:66:4f:69:11:
                    72:bf:55:be:a6:b1:89:bd:68:7d:ef:95:82:59:dc:
                    13:45:c4:84:93:e4:08:34:48:85:da:10:38:d5:2c:
                    c4:e7:5b:34:88:54:5e:5d:62:9d:b8:e1:9b:96:9a:
                    b4:98:1f:a7:27:89:99:f9:0e:5c:69:aa:79:50:3d:
                    30:88:ef:52:5e:59:ee:9f:4f:d3:0e:5d:26:ed:b7:
                    9d:71:d6:ef:4a:d3:7f:1b:66:11:3f:06:26:23:7f:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:33:B5:08:43:CC:E9:D9:12:AD:65:40:01:C6:99:DB:15:2E:A1:39
            X509v3 Authority Key Identifier:
                keyid:0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/12
                RPKI Manifest - URI:rsync://rpki.co/repo/August/12/6933B50843CCE9D912AD654001C699DB152EA139.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24
                  149.112.53.0/24
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:c3:a1:31:6f:76:a3:3d:26:47:dd:16:91:74:ff:f6:77:
         c8:96:aa:2c:8f:9f:c1:94:d4:73:3e:8b:c5:37:5e:dd:8e:32:
         6a:33:00:19:03:7f:47:70:47:de:8d:0a:f1:4e:11:9d:81:a1:
         2b:47:2e:56:0a:a0:f6:55:c6:6d:d1:8a:44:78:ea:d4:15:58:
         2b:25:76:d2:0d:9f:6a:0e:06:ab:39:30:18:6f:55:5a:97:d3:
         e7:62:b2:d2:66:8c:0c:05:34:b2:9f:32:2b:13:99:dc:df:df:
         0d:d6:9b:c1:87:9e:52:8b:7a:ca:70:76:ba:54:a6:83:e2:99:
         ff:6d:55:ca:f0:a8:d6:b5:fb:32:f9:70:e6:b0:cc:3b:01:d8:
         2b:05:2c:e9:e5:13:48:fe:c4:0c:b7:35:5f:1e:89:77:e0:78:
         72:f5:1b:f6:80:01:7e:b7:85:5f:ef:28:d8:5c:17:ba:7a:b5:
         6d:5b:9e:5b:df:a9:5c:8e:11:56:25:0d:6d:42:bd:b5:33:c7:
         6b:bf:1a:c5:f0:62:60:99:3a:8e:c4:5b:e7:eb:3b:97:7a:b9:
         ef:7f:24:52:04:e7:05:fa:d7:44:28:92:f2:64:79:14:1b:60:
         0e:16:12:36:84:81:23:e7:19:47:43:77:e9:76:de:29:94:8e:
         5f:86:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:26 2023 by rpki-client on console-ams.rpki-client.org