Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer
File:                     05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer (raw, json)
Hash identifier:          HTQzJYOJTVniP1eXH03cRXoInCF4tIKJPjcFnnc/oE4=
Subject key identifier:   05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       23A935FAF6F9355F06E666610752211995CBB473
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/AS199762/1/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.mft
caRepository:             rsync://rpki.co/repo/AS199762/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:45:35 +0000
Certificate not after:    Mon 20 May 2024 21:50:35 +0000
Subordinate resources:    IP: 2a05:dfc7:be00::/39
                          IP: 2a06:1287:5400::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a9:35:fa:f6:f9:35:5f:06:e6:66:61:07:52:21:19:95:cb:b4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: May 22 21:45:35 2023 GMT
            Not After : May 20 21:50:35 2024 GMT
        Subject: CN=05C100A07CDA99C5C82245383B19D4E36A9EDEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:65:c8:46:62:78:2b:91:4a:6f:35:a2:99:
                    6f:e3:ef:74:e1:28:58:ae:ad:34:72:b9:ef:77:f1:
                    43:15:b9:fa:1c:d6:b2:e4:63:a2:6e:6c:67:0d:ea:
                    75:84:b1:4d:96:26:f4:4a:2d:e1:de:7b:0f:fe:3b:
                    8e:ad:ca:c0:e9:97:3d:2b:20:b4:5d:f0:12:9f:e7:
                    07:44:b8:67:08:28:c2:a1:8b:b5:ef:a1:45:9a:aa:
                    59:9e:ba:3a:68:60:17:65:15:f2:e2:46:15:03:69:
                    64:4b:fb:77:52:01:87:82:e4:99:15:9f:1f:88:57:
                    2b:33:74:ec:21:ff:f0:92:cb:e8:15:ab:42:56:a4:
                    b7:c6:31:74:61:97:39:48:0e:88:28:46:6d:c1:79:
                    76:79:07:bc:63:59:ef:69:fc:69:aa:3b:48:6e:31:
                    df:18:9e:79:2e:75:88:b1:e2:20:78:c9:dd:ef:41:
                    a5:1f:74:9f:d8:29:e4:5c:0f:fa:d7:52:06:e4:06:
                    d6:02:5e:e3:77:9f:a5:75:76:a1:3c:30:60:11:2c:
                    94:2d:7b:e3:21:3b:d0:38:08:74:ee:6a:cc:26:65:
                    2b:94:b2:eb:e0:2e:7d:20:6d:fa:c1:58:59:ef:c8:
                    94:77:b1:74:c2:74:da:44:e0:b5:69:3e:19:40:4a:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199762/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199762/1/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:be00::/39
                  2a06:1287:5400::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:32:eb:ef:56:8c:36:81:b5:3f:38:3a:0a:1c:bd:ea:82:e9:
         10:61:5f:89:4a:e8:4f:ce:b5:7d:bf:2b:67:07:71:27:c5:a1:
         4e:88:b0:83:e4:17:b6:f2:de:fb:6c:d4:b5:e0:1c:06:25:8c:
         bf:e7:35:f3:5e:da:af:41:9f:a2:6d:74:ab:9c:18:ee:de:74:
         58:4c:44:3b:6c:57:3a:a4:86:da:71:07:a5:c4:70:a7:44:f5:
         43:41:1a:df:76:32:da:ec:89:40:a7:c4:23:9a:72:b3:15:4e:
         74:45:21:fc:45:34:b8:e2:10:e1:3f:52:bc:41:42:47:24:cf:
         69:eb:86:a0:64:e6:ea:92:c6:f1:0e:97:69:e0:df:31:b2:4a:
         39:5a:a0:f8:04:2d:15:c4:ae:67:c0:38:74:dc:26:57:3e:5c:
         aa:06:4c:f4:84:4d:f2:13:c8:69:44:a5:d6:86:b7:88:7b:90:
         bf:f3:24:77:8f:e2:06:48:fa:3b:b0:e3:70:69:e8:a6:95:e4:
         9d:8e:87:63:fe:5b:6f:95:a1:ea:c9:44:d9:1a:75:2f:d8:f8:
         62:16:98:ee:8a:97:3a:91:46:63:a0:d7:72:fc:db:9b:e2:bd:
         c5:14:95:f7:38:9f:22:2f:b4:a1:33:47:0e:23:77:93:8b:6e:
         df:68:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----