Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/0/EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE.cer
File:                     EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE.cer (raw, json)
Hash identifier:          KuLx5QYgsVNn6hjHHYsgltb+v0lwygW2QJSA+WzHGtc=
Subject key identifier:   ED:C1:C6:80:F0:FB:11:3C:FC:3B:D4:82:4D:D6:5C:F3:6F:55:F1:DE
Authority key identifier: 21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86
Certificate issuer:       /CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
Certificate serial:       2A93D7081EF3740EE2E43DC4726E9BE2970F1B58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 2602:fc23:120::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:93:d7:08:1e:f3:74:0e:e2:e4:3d:c4:72:6e:9b:e2:97:0f:1b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:49:0e:be:41:9c:f6:f5:c0:d7:bb:35:91:
                    78:0a:b4:4c:76:d1:83:5b:64:70:8e:46:06:f2:c3:
                    e6:8a:b6:64:ba:5d:3d:9d:b1:f9:93:07:0d:3a:f3:
                    c6:1b:9f:ad:2b:ad:d4:d3:98:5c:a4:e0:c5:44:fc:
                    9f:0e:8a:61:6b:9c:e7:dc:3f:46:fe:94:48:32:6f:
                    1c:b2:44:7e:6f:85:e4:f6:56:d7:bf:63:e0:7d:94:
                    84:72:92:e6:90:69:bb:ef:36:04:85:33:5c:5f:91:
                    19:18:2f:a5:6b:6d:8e:59:a4:50:2c:4c:bb:e6:05:
                    d2:6e:f1:f4:b0:73:f8:88:53:49:10:7b:37:b8:de:
                    74:c8:52:3b:9d:7e:66:d7:81:fc:82:15:d6:92:8b:
                    b3:f3:72:1e:f6:55:4c:23:a1:2c:38:51:18:8e:15:
                    a9:59:e1:cc:05:a0:6f:f7:e0:09:b5:4d:93:b2:60:
                    5b:ca:66:a3:ff:9e:78:a6:74:01:e4:4f:c0:81:f4:
                    61:23:02:4e:c7:32:0e:e7:e7:b7:44:18:ea:c7:99:
                    e3:62:07:6a:df:39:80:9a:79:3b:c3:b2:ee:fd:0b:
                    2b:a3:02:a7:25:f0:f5:85:a4:64:17:07:af:33:bc:
                    ec:0c:cd:8f:c3:d0:79:9a:07:e6:ef:c5:67:e1:ed:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:C1:C6:80:F0:FB:11:3C:FC:3B:D4:82:4D:D6:5C:F3:6F:55:F1:DE
            X509v3 Authority Key Identifier:
                keyid:21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/2/EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:1c:a0:f8:00:84:52:54:b9:d3:98:83:0f:3d:a9:42:2f:
         75:6b:a3:20:46:03:b4:8f:67:b6:be:a4:15:24:6a:69:dc:e8:
         17:1b:91:1e:39:f9:a2:74:9f:a0:0c:db:a0:f7:9d:f2:39:0c:
         f1:9f:07:82:a1:f8:42:9a:d6:d0:91:be:67:4f:06:e1:0d:5e:
         0c:1c:cc:38:84:ea:cf:90:77:0f:6b:a5:f2:97:e7:da:c4:da:
         61:d8:22:66:23:f5:c6:5e:0d:41:6b:e2:5f:bc:97:7b:15:2d:
         e7:8c:9b:e9:d2:83:69:13:3e:ff:9c:6c:d4:79:7f:bb:f3:d4:
         2f:fb:4d:c4:9f:74:9b:c1:0a:bf:05:df:bf:df:e9:b6:e0:a1:
         04:06:37:ad:f0:a1:91:0d:bd:79:f2:52:f5:62:b1:b2:9b:5d:
         8c:d2:e1:03:ad:a7:3d:51:69:f9:de:8d:dc:e5:d2:a3:35:4d:
         a2:67:16:d9:c4:60:0a:1c:08:4c:6c:ac:2b:ae:2e:03:58:7d:
         9e:ef:bb:b5:92:4f:46:37:d0:92:ce:a3:37:f1:29:0a:37:a4:
         d4:10:85:b0:40:52:8d:f9:07:85:e4:42:56:4a:15:b2:78:9b:
         c6:44:47:b3:93:00:f4:fb:a5:5b:c0:be:24:89:41:fa:32:e6:
         86:78:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----