Certificate

$ rpki-client -vvf rpki.co/repo/August/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer
File:                     CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer (raw, json)
Hash identifier:          MOr+wS8JDcNH11dHaj5wAMw1nZhNcoGjGkb5+eloaT4=
Subject key identifier:   CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68
Authority key identifier: CE:B3:22:59:0A:73:B7:47:56:EC:60:70:C8:C1:8D:C1:74:C7:48:23
Certificate issuer:       /CN=dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc
Certificate serial:       4B20D648C209EFF77A758BF1487021EB82024645
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc.cer
Manifest:                 rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft
caRepository:             rsync://rpki.co/repo/AS945/11/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:44:06 +0000
Certificate not after:    Mon 20 May 2024 21:49:06 +0000
Subordinate resources:    AS: 13586

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:20:d6:48:c2:09:ef:f7:7a:75:8b:f1:48:70:21:eb:82:02:46:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc
        Validity
            Not Before: May 22 21:44:06 2023 GMT
            Not After : May 20 21:49:06 2024 GMT
        Subject: CN=CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:0e:02:89:c9:3c:85:33:b2:d5:76:cc:a4:
                    68:79:60:b5:d1:e5:db:b3:cc:d8:b3:09:c3:ef:4c:
                    d0:c4:2d:27:58:70:56:5d:c2:d9:6f:a7:09:f6:2d:
                    d2:63:99:9e:31:1f:be:4d:0d:00:8d:20:83:02:bc:
                    e6:74:ee:d1:a4:83:4b:4f:f2:31:3b:0b:5e:d9:4b:
                    df:b1:c5:aa:ba:aa:f5:e6:d6:59:34:6c:4a:9f:6c:
                    42:48:c4:45:03:f6:13:a5:25:e0:7e:60:29:e7:6f:
                    0e:35:4b:6e:e3:ae:42:d9:af:58:cf:22:4a:05:78:
                    e7:5f:6b:e2:23:6f:c8:f1:a8:63:95:c4:21:aa:89:
                    7b:e0:fc:4b:a2:b1:68:02:d4:70:82:96:eb:6f:ce:
                    ab:05:e5:b8:b0:a3:62:f2:8a:31:4d:89:3b:46:ae:
                    22:df:1b:5c:88:8a:19:e9:b9:e9:52:3c:5b:fe:44:
                    4a:3b:da:41:65:c0:c4:d4:d6:58:b3:dc:e5:17:d1:
                    f7:54:22:29:c4:ba:6f:28:95:f6:48:e1:af:5a:24:
                    59:a0:c4:b5:2d:74:3e:d2:7e:37:7b:0a:75:2d:bb:
                    13:fc:c1:67:d1:4e:1b:59:3a:cc:e1:e8:f4:47:d2:
                    32:26:58:eb:0c:74:5e:3f:55:06:8a:fa:4f:2f:46:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68
            X509v3 Authority Key Identifier:
                keyid:CE:B3:22:59:0A:73:B7:47:56:EC:60:70:C8:C1:8D:C1:74:C7:48:23

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/11/CEB322590A73B74756EC6070C8C18DC174C74823.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a520437d18a5ffa755fb909679c172acfe3584fc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/11/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13586

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:ff:9f:8b:93:9d:32:e4:36:f9:df:13:98:35:d9:04:ae:
         0a:c6:19:ee:be:0a:c2:cf:59:1d:91:f6:83:38:d0:87:05:03:
         89:9d:3f:5f:73:ab:cd:1b:12:37:24:bc:04:96:b6:21:59:c9:
         08:de:9d:ce:38:7f:b3:b4:f8:e0:cb:4d:56:45:9a:8f:30:6c:
         cb:64:d7:a8:0d:c1:1c:cc:09:af:23:38:ab:a3:a5:81:5f:93:
         7d:ea:ab:31:57:13:0a:a0:3f:3a:30:ca:64:e7:60:36:1c:c6:
         24:22:fd:b0:bf:d0:62:c9:4a:c7:bd:1e:b2:c5:66:f1:7e:53:
         7f:23:37:f7:2b:d4:63:99:9a:40:ec:4e:0c:8c:c8:5d:27:0a:
         f0:64:c4:95:fe:d7:5b:f9:ab:26:d1:4a:a9:9d:ed:03:59:2a:
         3a:df:70:30:13:5a:95:27:dd:46:4c:9d:ac:1e:64:b9:85:a5:
         db:86:26:47:48:db:05:77:5e:d4:e4:51:fa:6f:42:e1:2d:3a:
         61:d6:bd:0c:47:00:0d:fd:7e:49:93:7b:ac:14:ce:58:23:8f:
         e0:8a:b9:e6:ba:8d:a8:03:23:b4:ea:87:bb:f2:42:a2:1d:b4:
         07:af:54:03:c9:4d:5e:10:82:68:65:97:fb:b9:65:e7:c6:85:
         d9:b6:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----