Certificate

$ rpki-client -vvf rpki.co/repo/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer
File:                     4A208C7877CBF7D9680C15023B778994D27CBFBB.cer (raw, json)
Hash identifier:          ZqYQkKnQRocVV7vXb2p9NYyZgFkWB5llmfPTfLrWBmE=
Subject key identifier:   4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB
Authority key identifier: B6:08:5F:40:26:64:C2:DA:1F:05:A4:78:EB:23:82:CD:A6:BF:FA:5E
Certificate issuer:       /CN=b6085f402664c2da1f05a478eb2382cda6bffa5e
Certificate serial:       548F9FB7C30A9C2938F7BEB2753BEBC46081B7BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tghfQCZkwtofBaR46yOCzaa_-l4.cer
Manifest:                 rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
caRepository:             rsync://rpki.co/repo/AS945/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:44:47 +0000
Certificate not after:    Mon 20 May 2024 21:49:47 +0000
Subordinate resources:    AS: 51930

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8f:9f:b7:c3:0a:9c:29:38:f7:be:b2:75:3b:eb:c4:60:81:b7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6085f402664c2da1f05a478eb2382cda6bffa5e
        Validity
            Not Before: May 22 21:44:47 2023 GMT
            Not After : May 20 21:49:47 2024 GMT
        Subject: CN=4A208C7877CBF7D9680C15023B778994D27CBFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:df:29:0a:00:9c:62:dd:84:a3:19:12:24:
                    dc:d5:67:77:bf:ad:ad:1c:90:b9:93:96:75:78:ab:
                    3c:bc:7e:09:5f:75:7b:18:8a:fd:44:01:a5:c5:a3:
                    f0:2e:6c:81:59:e7:88:16:59:09:ad:84:de:1f:08:
                    70:6d:07:bf:ec:87:71:72:bd:25:e7:bc:a6:5b:9b:
                    f3:72:49:c6:3d:c1:cc:5c:68:4d:69:57:30:4b:73:
                    95:89:7e:3d:5c:ac:3d:93:2d:c7:d7:fd:14:ed:9e:
                    dd:96:d1:21:68:41:33:47:b5:e3:74:ae:cc:86:a6:
                    bf:45:ec:78:da:2c:c0:61:ca:1f:10:1f:bd:cf:f7:
                    07:8e:a2:f3:fd:2b:b5:39:67:70:dc:85:16:aa:d4:
                    2b:c5:3d:52:14:8a:45:a9:20:6e:79:d2:72:8f:23:
                    d1:10:f3:70:94:0b:77:10:d6:04:25:21:f5:18:5f:
                    6a:c3:d4:07:1a:d8:7f:97:6b:f5:57:da:03:cb:bc:
                    22:3d:d4:ae:e5:d0:25:21:19:52:7d:2f:1d:80:4a:
                    2a:f0:3f:27:2e:03:d3:67:9a:4f:a4:5b:58:7c:5a:
                    fc:a2:18:9b:d5:ca:9a:05:90:e2:b0:cf:7c:7a:eb:
                    6d:8f:98:ca:dd:1a:de:cd:3b:00:55:db:2a:9a:99:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB
            X509v3 Authority Key Identifier:
                keyid:B6:08:5F:40:26:64:C2:DA:1F:05:A4:78:EB:23:82:CD:A6:BF:FA:5E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/B6085F402664C2DA1F05A478EB2382CDA6BFFA5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tghfQCZkwtofBaR46yOCzaa_-l4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         ab:fe:9b:45:05:d9:62:4b:eb:73:6a:f1:42:81:5a:1b:7c:76:
         63:08:56:a8:d5:96:bd:49:85:25:07:12:7c:5f:7d:11:85:35:
         8a:1f:91:ad:15:78:04:e7:f3:f0:59:a6:01:0c:48:16:9b:45:
         66:5c:f6:ea:19:5f:54:2e:7a:2c:69:92:bd:33:d9:5d:55:60:
         06:c8:1a:ea:7a:84:ba:9b:cc:9c:d2:b5:63:c7:d6:45:38:89:
         b5:29:35:96:a9:5f:07:41:94:77:69:97:8d:01:41:24:04:0d:
         a0:a5:62:e1:d2:3d:2b:96:dd:aa:89:16:49:4e:44:9b:86:0f:
         e7:92:b1:ca:eb:46:a8:19:72:17:91:77:0a:6c:21:b3:c5:8a:
         64:e2:27:10:b2:3a:52:51:eb:9e:5e:f8:0a:af:34:42:83:c6:
         90:70:15:24:cc:67:b3:f2:7c:1f:28:68:8b:bc:36:ac:3f:f6:
         47:f1:c8:61:3f:b6:8a:e3:0a:57:16:0b:01:c3:10:c7:76:cc:
         be:5e:30:0e:60:f2:4b:1b:33:a6:6f:3c:a2:dd:7d:02:ef:2e:
         d7:7b:2b:0c:c6:da:61:74:06:86:21:38:88:19:1c:83:aa:94:
         78:89:ee:ae:58:bf:c1:ee:07:e3:1d:0c:fb:b7:2d:6e:d9:5c:
         cb:d5:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org