Certificate

$ rpki-client -vvf rpki.co/repo/AS205432/0/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.cer
File:                     C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.cer (raw, json)
Hash identifier:          zvPTReCHZZ6udQl3NP+O38yJNO31XwxwfNNGap5Rpwo=
Subject key identifier:   C0:04:3F:61:C7:66:EF:C2:F6:A5:D0:CA:3C:DA:71:14:B7:95:2E:41
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       450CABA5CAB73618E663D4E8F791E7CB07BFF264
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Manifest:                 rsync://rpki.co/repo/AS212252/1/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.mft
caRepository:             rsync://rpki.co/repo/AS212252/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:42:37 +0000
Certificate not after:    Mon 20 May 2024 21:47:37 +0000
Subordinate resources:    IP: 2a05:dfc7:2200::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0c:ab:a5:ca:b7:36:18:e6:63:d4:e8:f7:91:e7:cb:07:bf:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: May 22 21:42:37 2023 GMT
            Not After : May 20 21:47:37 2024 GMT
        Subject: CN=C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:10:ce:76:51:39:ed:1d:70:be:09:64:20:
                    65:8d:70:1f:70:97:25:45:8b:59:fa:27:c9:dc:63:
                    5a:26:cf:2c:89:11:80:06:b4:24:a7:95:e0:ff:10:
                    66:f9:ff:40:75:27:c7:52:8f:32:3b:fe:e2:c7:f4:
                    2c:f1:05:15:15:15:6d:d1:3a:77:2f:fd:72:a4:31:
                    bc:44:75:b2:52:b4:31:c2:58:28:64:fd:e5:a2:27:
                    31:09:a6:c0:c4:4d:a4:24:b1:90:00:94:5e:7b:a2:
                    47:0f:35:9e:64:a7:29:d9:38:e6:a1:6c:1b:f3:6b:
                    2d:95:61:18:d9:ed:03:10:16:fc:c7:d1:9b:6c:16:
                    6b:56:2b:35:27:28:f9:d3:c8:6b:4f:e5:b7:4d:80:
                    46:da:e3:48:83:9c:59:47:ad:f2:a0:1e:5c:a7:91:
                    64:99:32:af:1e:67:f2:2b:aa:13:95:e4:d7:6c:ad:
                    3f:59:05:e5:54:9e:51:3f:94:12:84:d4:b7:f1:5d:
                    db:06:ac:81:7f:d7:54:c3:dd:77:69:05:d3:35:87:
                    09:48:be:62:ec:f4:f7:8c:4c:a8:89:de:3a:db:4b:
                    94:7f:15:d3:f4:09:4b:fd:b2:cb:24:54:f4:78:c7:
                    e2:b3:c4:36:56:fc:19:0d:3a:c3:ba:19:43:d1:c1:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:04:3F:61:C7:66:EF:C2:F6:A5:D0:CA:3C:DA:71:14:B7:95:2E:41
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS212252/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS212252/1/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:71:b7:90:be:a9:51:7d:88:95:b9:cf:bf:8e:79:43:0b:32:
         04:17:72:10:f4:30:6f:fe:8c:12:36:88:04:00:35:a7:05:82:
         de:db:44:f8:d5:14:ff:ee:24:af:43:b3:b5:60:dc:09:39:d4:
         ec:54:03:48:38:50:16:17:89:7a:c5:a3:de:ce:0a:f3:61:e3:
         eb:86:1b:04:a7:8c:8c:9f:ef:66:c2:e1:0c:fa:95:e5:7b:49:
         6b:86:a1:a3:a1:ea:83:70:e9:fb:68:17:80:13:29:99:cf:61:
         db:e4:82:55:77:17:0c:b8:97:f8:c7:e9:97:8a:dc:6f:12:43:
         66:0b:2a:60:f0:dd:82:de:0c:d7:dc:ff:90:c3:5a:d9:ea:a8:
         27:d6:ba:fb:85:55:62:47:5a:25:39:98:b2:05:24:e0:e8:31:
         bc:dc:d4:a0:99:2b:1a:d1:06:e6:46:ab:f1:0a:89:4d:ab:bd:
         f3:2c:2c:61:70:08:e2:43:e7:e1:55:8c:b8:54:5a:da:95:a3:
         ea:e4:7c:c7:e0:77:20:af:92:c8:94:e5:80:cc:fd:d2:05:f6:
         44:36:ea:78:84:38:b1:4c:77:8a:1f:51:24:5c:8a:4b:1f:18:
         2d:36:a2:fb:a4:2a:08:68:0f:db:d8:2a:a3:3e:c9:56:7b:00:
         1a:44:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----