Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/5751DFEFDB738B2721C5210F09368B7D6BBED611.cer
File:                     5751DFEFDB738B2721C5210F09368B7D6BBED611.cer (raw, json)
Hash identifier:          giEvp1eBXe3ANbZfa3raE2GJ8R+1OYM4pWoeEEp5fqY=
Subject key identifier:   57:51:DF:EF:DB:73:8B:27:21:C5:21:0F:09:36:8B:7D:6B:BE:D6:11
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       59966EABF0688AA570CF323FF8E9A2F69BDEE845
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/AS202939/1/5751DFEFDB738B2721C5210F09368B7D6BBED611.mft
caRepository:             rsync://rpki.co/repo/AS202939/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:43:43 +0000
Certificate not after:    Mon 20 May 2024 21:48:43 +0000
Subordinate resources:    IP: 2a06:1287:ac00::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:6e:ab:f0:68:8a:a5:70:cf:32:3f:f8:e9:a2:f6:9b:de:e8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: May 22 21:43:43 2023 GMT
            Not After : May 20 21:48:43 2024 GMT
        Subject: CN=5751DFEFDB738B2721C5210F09368B7D6BBED611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:f2:fd:89:3a:ad:7f:08:df:cb:c4:ff:50:
                    6b:0a:01:3a:39:2a:e1:84:66:fd:92:25:b6:c1:26:
                    a4:07:ce:66:16:a6:51:cd:cd:2e:df:bb:f7:2d:ce:
                    ba:92:ea:05:02:f7:d9:1d:d4:5f:6e:2a:1b:52:21:
                    05:89:05:dc:3b:eb:bd:a0:05:7d:6a:64:0d:46:e2:
                    3f:70:ef:14:b8:9c:23:64:19:ff:d1:8e:82:69:ad:
                    54:98:b1:f2:1e:bf:3d:09:54:58:8a:1d:aa:2b:0b:
                    43:52:3c:0e:b0:c0:cd:33:bc:55:e6:24:b3:e2:21:
                    63:52:7a:86:99:f6:79:5a:94:ea:b1:83:dc:66:67:
                    50:e0:fd:b5:38:58:8c:51:cc:a3:d0:43:1a:43:17:
                    0b:bf:3f:97:b3:2e:ca:02:61:25:34:8c:b9:1a:9b:
                    30:d2:39:43:05:79:3b:52:5f:5e:d9:e4:c1:20:eb:
                    0d:a9:f1:68:65:40:3d:81:e8:c1:91:28:61:f4:6e:
                    65:8a:be:a6:b7:bf:85:bf:13:88:14:7b:53:5b:95:
                    e7:90:93:7f:95:bd:3e:5c:a1:9d:2e:e2:18:27:57:
                    73:dc:83:95:99:b8:2b:18:72:98:3d:f3:47:6b:da:
                    ea:c8:20:89:3b:a2:2d:b1:e0:db:62:fa:e4:60:e4:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:51:DF:EF:DB:73:8B:27:21:C5:21:0F:09:36:8B:7D:6B:BE:D6:11
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS202939/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS202939/1/5751DFEFDB738B2721C5210F09368B7D6BBED611.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:ac00::/39

    Signature Algorithm: sha256WithRSAEncryption
         cd:7f:10:0b:37:3a:70:9f:d5:19:91:08:c0:97:6d:75:a6:7b:
         39:27:b7:3c:42:31:ea:18:25:b1:ff:df:47:cd:4a:1e:f1:77:
         29:26:76:7e:22:fb:05:df:da:88:c5:77:b9:a0:af:b2:53:70:
         22:c4:59:1b:f7:3a:72:c4:6e:bc:f1:ad:0d:25:f5:55:94:da:
         06:0f:04:3e:7c:6b:f3:8d:f4:0d:f5:33:f3:50:da:e5:ab:7d:
         37:8a:ca:fe:31:c6:c9:0c:b5:93:15:6e:4f:c3:13:71:ce:6d:
         01:35:59:e4:55:63:dc:a4:0a:d4:7d:e1:25:86:bd:2f:88:36:
         14:2e:31:6f:7b:f8:12:20:3b:9f:09:11:c4:b5:0c:5c:f4:09:
         7b:9b:e8:fe:80:cb:8f:5f:b9:e3:fa:b3:4f:ca:d6:ed:dd:84:
         aa:6a:49:89:83:a6:90:8b:c3:23:43:05:19:91:e8:80:bf:c4:
         b5:fd:d1:7f:ae:62:1e:8a:60:a5:f1:86:8a:9a:3f:b2:fb:df:
         8a:cd:0c:b4:78:58:c4:ff:58:88:32:4c:05:6f:32:74:15:f1:
         d0:4f:c5:84:05:3b:30:91:d8:ad:2b:21:46:88:f7:aa:e0:6f:
         3c:b4:4b:f4:bc:1a:d0:e2:17:3d:28:18:88:0b:df:f6:7e:d6:
         4b:bf:66:d7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWZZuq/BoiqVwzzI/+Omi9pve6EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA1MjIyMTQzNDNaFw0yNDA1MjAyMTQ4NDNaMDMxMTAvBgNV
BAMTKDU3NTFERkVGREI3MzhCMjcyMUM1MjEwRjA5MzY4QjdENkJCRUQ2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3vL9iTqtfwjfy8T/UGsKATo5
KuGEZv2SJbbBJqQHzmYWplHNzS7fu/ctzrqS6gUC99kd1F9uKhtSIQWJBdw7672g
BX1qZA1G4j9w7xS4nCNkGf/RjoJprVSYsfIevz0JVFiKHaorC0NSPA6wwM0zvFXm
JLPiIWNSeoaZ9nlalOqxg9xmZ1Dg/bU4WIxRzKPQQxpDFwu/P5ezLsoCYSU0jLka
mzDSOUMFeTtSX17Z5MEg6w2p8WhlQD2B6MGRKGH0bmWKvqa3v4W/E4gUe1NbleeQ
k3+VvT5coZ0u4hgnV3Pcg5WZuCsYcpg980dr2urIIIk7oi2x4Nti+uRg5KxXAgMB
AAGjggJqMIICZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXUd/v23OLJyHF
IQ8JNot9a77WETAfBgNVHSMEGDAWgBTEeL3mDhuS+XVQQNbGfJz7ZMfTVTAOBgNV
HQ8BAf8EBAMCAQYwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC9DNDc4QkRFNjBFMUI5MkY5NzU1MDQwRDZDNjdDOUNGQjY0
QzdEMzU1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi9DNDc4QkRFNjBFMUI5MkY5NzU1MDQwRDZDNjdD
OUNGQjY0QzdEMzU1LmNlcjCB0AYIKwYBBQUHAQsEgcMwgcAwLAYIKwYBBQUHMAWG
IHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjAyOTM5LzEvMFgGCCsGAQUFBzAKhkxy
c3luYzovL3Jwa2kuY28vcmVwby9BUzIwMjkzOS8xLzU3NTFERkVGREI3MzhCMjcy
MUM1MjEwRjA5MzY4QjdENkJCRUQ2MTEubWZ0MDYGCCsGAQUFBzANhipodHRwczov
L3JyZHAucnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoGEoes
MA0GCSqGSIb3DQEBCwUAA4IBAQDNfxALNzpwn9UZkQjAl211pns5J7c8QjHqGCWx
/99HzUoe8XcpJnZ+IvsF39qIxXe5oK+yU3AixFkb9zpyxG688a0NJfVVlNoGDwQ+
fGvzjfQN9TPzUNrlq303isr+McbJDLWTFW5PwxNxzm0BNVnkVWPcpArUfeElhr0v
iDYULjFve/gSIDufCRHEtQxc9Al7m+j+gMuPX7nj+rNPytbt3YSqakmJg6aQi8Mj
QwUZkeiAv8S1/dF/rmIeimCl8YaKmj+y+9+KzQy0eFjE/1iIMkwFbzJ0FfHQT8WE
BTswkditKyFGiPeq4G88tEv0vBrQ4hc9KBiIC9/2ftZLv2bX
-----END CERTIFICATE-----