Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/17/F4DF07ED834F20CF7568CB795C226443F7EE040F.cer
File:                     F4DF07ED834F20CF7568CB795C226443F7EE040F.cer (raw, json)
Hash identifier:          RDKPkpdtvS/YOVOBHMDEUIe5ChC9eX2wvpBNT3fPQTA=
Subject key identifier:   F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F
Authority key identifier: B2:17:82:C1:3C:39:F3:0E:43:98:FC:AA:71:68:96:8E:A1:3A:D5:1F
Certificate issuer:       /CN=a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97
Certificate serial:       45D7ABF9E157875F5FC98DD83488533A7700C048
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97.cer
Manifest:                 rsync://rpki.co/repo/August/12/F4DF07ED834F20CF7568CB795C226443F7EE040F.mft
caRepository:             rsync://rpki.co/repo/August/12
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 23.149.248.0/24
                          IP: 149.112.53.0/24
                          IP: 2602:fa90::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d7:ab:f9:e1:57:87:5f:5f:c9:8d:d8:34:88:53:3a:77:00:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=F4DF07ED834F20CF7568CB795C226443F7EE040F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:51:69:79:83:35:a5:98:da:94:7a:b7:5e:
                    f4:eb:7e:e3:07:a7:0c:ec:52:cf:fe:b7:06:56:d3:
                    ee:7c:6c:c8:05:ab:de:ae:ad:3a:ba:11:78:7d:55:
                    46:e9:ea:c7:69:db:3b:3d:7f:62:52:ef:0e:66:3a:
                    19:cc:93:63:11:4e:e5:50:ea:f2:c8:16:d0:8f:52:
                    b1:dc:56:fb:30:3b:72:45:08:12:21:df:65:e6:a1:
                    51:32:0c:92:54:b0:81:12:6e:b3:53:fe:a7:49:88:
                    68:aa:96:79:03:b6:15:92:e8:67:49:ac:89:98:68:
                    65:75:7a:75:43:5e:28:6e:1b:7c:b2:7c:c5:65:0d:
                    99:a0:47:92:ae:4d:cc:dc:ad:0b:50:f4:0e:c4:2e:
                    5b:20:96:7f:ad:e2:ad:d8:8c:d0:c6:f6:73:f0:d0:
                    35:e1:0a:25:c9:78:e7:30:e6:68:ab:56:17:5e:a0:
                    46:e0:33:fa:69:cd:b4:d6:df:0f:37:6f:35:4a:81:
                    3f:d9:66:17:ab:2b:dc:7c:15:09:f2:b3:a8:89:7d:
                    77:85:f9:69:be:89:63:31:b2:6f:07:ea:b6:54:7b:
                    4b:c1:53:04:6c:c2:b5:00:2b:8d:09:29:05:e4:16:
                    aa:d3:16:9b:8f:da:95:90:98:a2:c1:cb:e5:1f:c4:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F
            X509v3 Authority Key Identifier:
                keyid:B2:17:82:C1:3C:39:F3:0E:43:98:FC:AA:71:68:96:8E:A1:3A:D5:1F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/17/B21782C13C39F30E4398FCAA7168968EA13AD51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a646e41b685f6b19da291c37f87318291de90ff97.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/12
                RPKI Manifest - URI:rsync://rpki.co/repo/August/12/F4DF07ED834F20CF7568CB795C226443F7EE040F.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24
                  149.112.53.0/24
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:c7:16:05:a7:09:1b:c9:fc:ea:61:a9:3c:f0:c9:99:a4:1a:
         a6:6d:79:8f:02:8e:df:90:7c:3d:a1:9d:e0:64:c0:76:6e:ae:
         f7:06:4e:6c:76:6f:61:71:8a:ad:84:44:10:53:dc:23:ef:26:
         bf:97:1b:d7:c0:28:d4:14:79:0e:90:9c:d2:3f:7c:7f:cb:22:
         59:ef:dd:bd:26:f7:f6:90:f2:06:98:a5:e1:bd:5d:0f:a3:95:
         01:4c:0e:6a:f2:45:b6:28:71:e2:b3:16:3d:89:eb:90:80:ec:
         4e:8a:17:1e:8b:83:25:79:03:67:cb:98:9b:b7:dd:81:b9:2b:
         df:d6:2d:8d:8e:f0:6b:89:a9:05:e8:8a:2e:5a:a8:b5:d8:0e:
         7e:0f:44:23:a4:56:07:5f:7c:61:af:53:9d:93:fa:9d:68:f0:
         4b:67:1f:a2:fa:45:06:59:0d:c9:df:4e:1f:29:08:97:14:5f:
         f5:b1:bd:6f:8e:ca:fa:58:c1:96:f2:86:1f:f3:40:79:42:6d:
         66:e4:ef:4c:ba:67:0d:6f:17:57:22:e4:b5:55:cb:80:2a:e9:
         6c:9c:5c:bb:fb:29:1e:47:68:d5:7a:3d:3d:e4:b6:bb:45:c6:
         de:9c:ad:dc:09:03:1b:d7:ff:f6:d2:f5:4f:8b:39:31:4e:c8:
         be:a0:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:26 2023 by rpki-client on console-ams.rpki-client.org