Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer
File:                     B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer (raw, json)
Hash identifier:          Vjfor5Urtj6qllEnZ5flzbIlE5N3UDpYU5N2mI1tlO0=
Subject key identifier:   B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3C5C024BB9B21275DAF96497CD6D2E3D4C76496A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft
caRepository:             rsync://rpki.co/repo/AS200447/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:45:56 +0000
Certificate not after:    Mon 20 May 2024 21:50:56 +0000
Subordinate resources:    IP: 2a05:dfc7:3600::/39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5c:02:4b:b9:b2:12:75:da:f9:64:97:cd:6d:2e:3d:4c:76:49:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: May 22 21:45:56 2023 GMT
            Not After : May 20 21:50:56 2024 GMT
        Subject: CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:18:f1:9d:d2:9a:65:38:4a:10:a4:69:c3:
                    6c:c5:3e:69:5c:0a:da:b0:a2:21:46:61:a0:93:96:
                    d3:54:40:a7:ef:6a:3e:08:b6:1b:31:73:58:4a:ed:
                    c3:19:6d:83:86:bf:fb:4f:53:01:20:dd:12:ca:f3:
                    1d:31:85:4d:e4:f0:20:a5:fa:0d:f0:c3:9a:95:16:
                    cb:6a:dc:d3:14:70:2d:74:f2:ff:73:8c:cc:93:b8:
                    26:9c:e0:0e:36:f5:1d:5b:0b:87:19:82:0c:90:67:
                    8a:2d:02:4f:9e:b0:69:f1:72:3a:83:6a:18:0e:5c:
                    b7:ed:ca:38:0c:4e:19:c4:35:09:30:2d:28:93:64:
                    5c:38:62:de:fe:b5:e1:a4:5e:a9:ea:9e:3a:a7:83:
                    52:78:02:ec:fb:32:bb:62:09:40:0a:3f:4d:e3:fc:
                    8b:72:95:fc:89:ab:df:a6:69:2d:af:1f:00:cb:3c:
                    55:0f:79:fb:9a:8f:98:5d:d9:d7:0f:50:13:f8:25:
                    dc:91:cb:6d:22:fb:ed:ec:14:1d:d9:36:31:9a:8e:
                    2f:67:07:0d:bc:ec:ec:d4:6a:02:16:fb:16:cc:b3:
                    6b:e3:23:dc:72:69:a4:ff:95:2e:30:5a:06:e8:44:
                    b8:d1:02:25:70:fc:97:1c:e0:6d:09:14:f1:42:d4:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS200447/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:3600::/39

    Signature Algorithm: sha256WithRSAEncryption
         14:31:97:cb:9f:c7:f8:02:bf:2e:73:00:80:17:e6:d1:31:a8:
         a1:18:8c:0b:78:0a:79:e6:9c:12:3d:68:6b:ac:31:6e:b6:9b:
         59:f8:d1:98:8b:f7:c4:48:52:0a:60:35:d8:be:18:57:6f:47:
         8d:5b:9a:d3:7e:ab:02:19:3f:34:83:95:b6:13:a3:79:c9:75:
         87:5d:c3:5c:59:0b:8a:85:f4:59:be:69:a0:7c:6c:93:1d:3c:
         5a:b9:1b:6a:72:58:59:7e:b4:e1:a8:8f:7f:40:7e:3b:b2:09:
         b1:59:53:f6:75:5d:89:9d:77:a5:66:67:60:e7:0f:26:e4:bf:
         12:b0:ca:d5:63:c3:13:7f:53:55:1b:d7:6e:7b:ed:3d:1c:30:
         f8:ab:9c:e7:7e:35:8c:2f:5f:c4:3f:6a:67:10:1d:5a:0f:bf:
         d4:72:2b:1b:4c:f9:c9:05:6d:61:d9:d5:ac:4c:92:95:f5:78:
         92:61:ab:92:82:12:39:da:c3:20:16:8d:29:25:0b:a5:f1:13:
         84:c9:6c:4e:54:90:7d:39:2b:3b:5d:02:72:83:b7:32:1e:08:
         7b:de:fe:41:35:fc:3c:69:f6:08:82:57:5f:c3:73:2a:c1:f4:
         08:2a:3b:ce:9c:62:ee:a1:a9:28:5f:04:5d:2a:33:9e:a1:07:
         78:e0:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----