Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/22C59B931870315D13B44E4163A51ABEACB4C2B8.cer
File:                     22C59B931870315D13B44E4163A51ABEACB4C2B8.cer (raw, json)
Hash identifier:          x6xcfhKzodNgbvt1KZ6jAS/RmtzjYIZ1zr8prpJ3Ois=
Subject key identifier:   22:C5:9B:93:18:70:31:5D:13:B4:4E:41:63:A5:1A:BE:AC:B4:C2:B8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       53517B26A74B2AFACC0F8EB5701F878A1FDF1DBF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/AS207466/1/22C59B931870315D13B44E4163A51ABEACB4C2B8.mft
caRepository:             rsync://rpki.co/repo/AS207466/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:45:52 +0000
Certificate not after:    Mon 20 May 2024 21:50:52 +0000
Subordinate resources:    IP: 2a05:dfc7:cc00::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:51:7b:26:a7:4b:2a:fa:cc:0f:8e:b5:70:1f:87:8a:1f:df:1d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: May 22 21:45:52 2023 GMT
            Not After : May 20 21:50:52 2024 GMT
        Subject: CN=22C59B931870315D13B44E4163A51ABEACB4C2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:9a:da:0d:e7:3c:20:79:53:ed:02:57:d8:
                    9f:c5:3e:5f:23:f9:4a:84:a5:79:3c:ce:d8:d3:76:
                    8a:67:19:fa:16:e5:06:af:ad:f5:22:70:0d:50:1a:
                    72:12:cd:e6:a3:f6:6e:c8:30:d7:6c:30:21:64:8b:
                    87:f9:3e:20:af:cc:15:7c:1a:e4:10:f5:d5:ce:6f:
                    74:31:35:e7:e8:1b:7e:b6:0a:22:4f:b2:7b:4f:a5:
                    9b:38:4e:d8:31:88:76:3e:a8:fa:90:ed:cd:72:59:
                    a9:a6:f1:fc:93:01:22:13:71:1a:f6:7e:ec:fb:af:
                    82:ca:08:db:d8:77:99:2e:e1:2f:3d:72:e7:37:d0:
                    71:8c:7b:06:ed:c2:54:f0:cf:fc:f7:66:5f:de:d7:
                    7a:be:66:28:44:a6:08:e0:bf:c0:4f:5d:ee:1f:76:
                    f3:43:6f:5f:e4:f0:8f:94:93:57:53:b7:ee:d5:9f:
                    c1:b2:75:c6:dd:72:d5:d1:83:99:db:b0:15:90:31:
                    55:c0:bb:c3:da:c9:87:52:3a:f3:7d:52:f9:fd:55:
                    f2:40:9f:3b:fe:78:68:c1:75:e7:f8:c0:1b:48:96:
                    fe:25:1b:7e:94:e0:64:01:7d:18:97:24:da:1d:cf:
                    7d:ec:1e:90:09:57:cb:62:e6:c1:9f:71:0a:c2:65:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:C5:9B:93:18:70:31:5D:13:B4:4E:41:63:A5:1A:BE:AC:B4:C2:B8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS207466/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS207466/1/22C59B931870315D13B44E4163A51ABEACB4C2B8.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:cc00::/39

    Signature Algorithm: sha256WithRSAEncryption
         9a:78:72:ab:97:02:c5:3d:a5:45:2a:4b:5f:f9:b7:fb:4b:ca:
         4a:07:e5:72:ed:9e:3c:76:3c:e5:14:b3:4e:d2:90:50:27:f9:
         f0:b5:f9:f2:2a:dd:98:f5:6a:e3:39:9d:2c:f3:4e:8a:03:2b:
         3f:87:c3:3c:c6:c7:60:82:ad:62:44:a0:f1:62:b6:2f:e6:bd:
         a2:7b:72:8f:49:a6:e2:c9:b4:b8:f4:ac:a3:64:b3:d9:ce:8e:
         69:d4:e4:74:35:f0:70:a3:89:4d:b9:75:ef:1c:60:e5:19:6c:
         f5:0b:78:66:86:7f:b1:7c:28:9c:1b:0e:60:a2:7d:0f:ca:c7:
         03:48:cf:b1:bd:4e:c1:48:fe:41:4b:67:1f:9d:1e:06:ae:7b:
         c0:38:a8:ff:f7:df:0f:98:b2:87:0d:c9:dd:a7:40:98:51:6b:
         22:5c:60:80:db:e5:05:f5:aa:29:f2:c0:80:2b:d9:1e:23:46:
         e8:13:c4:d4:e0:91:07:7a:34:89:cf:91:6b:94:cc:f0:16:a0:
         9c:53:7c:c8:6e:12:28:be:0c:00:b4:9f:90:68:ba:92:26:46:
         88:6f:c7:be:24:1c:fe:e4:90:e3:11:9a:57:33:4f:ab:30:23:
         30:ba:12:1f:48:f3:9b:64:c5:1e:a5:cb:c0:86:9f:01:2c:91:
         9a:76:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----