Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer
File:                     2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer (raw, json)
Hash identifier:          BJnwWNeLGy+M3AvNrJyTp2yzJ7bJoKDi02KjqHH/m+k=
Subject key identifier:   2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
Authority key identifier: 79:7B:AE:24:74:52:21:A8:53:AB:73:74:0C:EA:75:85:3E:5E:58:4A
Certificate issuer:       /CN=797BAE24745221A853AB73740CEA75853E5E584A
Certificate serial:       7556A1B3D8B2DEB54FEB9A7A193BDB810FB35838
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/797BAE24745221A853AB73740CEA75853E5E584A.cer
Manifest:                 rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft
caRepository:             rsync://rpki.co/repo/August/13
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:49 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:49 +0000
Subordinate resources:    IP: 104.37.42.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:56:a1:b3:d8:b2:de:b5:4f:eb:9a:7a:19:3b:db:81:0f:b3:58:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797BAE24745221A853AB73740CEA75853E5E584A
        Validity
            Not Before: Apr  8 11:28:49 2023 GMT
            Not After : Apr  6 11:33:49 2024 GMT
        Subject: CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:e9:e0:97:e7:22:72:22:37:91:76:91:ab:
                    fb:70:44:7b:e1:60:c2:e4:ab:11:21:d5:7e:d0:47:
                    3c:7c:37:0c:a8:dd:54:34:7f:92:d2:c0:00:7b:ab:
                    04:2c:66:64:eb:63:0d:78:ea:da:61:d5:fe:2a:4f:
                    1e:e7:81:10:c1:ed:1c:39:3d:b0:95:6d:5d:6f:be:
                    a4:ad:26:77:04:0e:fc:2a:bc:77:a0:bd:e4:68:f1:
                    88:06:89:f7:92:dc:9d:d1:15:cc:2c:7c:b8:41:37:
                    ad:07:34:58:15:1d:81:74:77:84:69:46:fc:df:5b:
                    cf:aa:2e:03:0d:ab:f5:18:a3:00:64:43:f7:f0:7b:
                    56:23:5f:d9:12:06:e6:24:fa:d9:f2:24:e4:b1:07:
                    5f:25:da:f3:d5:7e:e5:d2:d0:26:08:87:39:b3:15:
                    e6:c9:58:e7:a5:b3:bf:21:bd:4c:ce:62:18:1c:35:
                    a9:cd:7a:e3:47:6b:3b:51:05:7f:d3:14:29:2f:7b:
                    8b:7b:4d:3c:e4:32:c3:b2:f1:9c:12:04:9d:3c:31:
                    b4:ef:b2:e7:af:c6:97:e5:13:58:8c:e8:ac:1b:00:
                    40:e2:f8:6b:0f:e3:33:ee:74:29:ed:30:cc:a2:43:
                    1a:81:7c:82:5c:30:89:d1:79:5a:6a:25:93:b0:04:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
            X509v3 Authority Key Identifier:
                keyid:79:7B:AE:24:74:52:21:A8:53:AB:73:74:0C:EA:75:85:3E:5E:58:4A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/11/797BAE24745221A853AB73740CEA75853E5E584A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/797BAE24745221A853AB73740CEA75853E5E584A.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/13
                RPKI Manifest - URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:d4:34:90:b8:05:ea:c3:35:84:c5:0a:79:6c:34:2c:76:
         f7:c0:77:c9:b0:23:99:10:85:c4:c4:5b:2b:e2:e7:2a:30:2e:
         9a:1a:54:80:db:18:ba:e6:44:f4:a9:1b:a1:cd:48:ad:cf:74:
         03:b0:71:0e:32:15:b7:05:7e:7e:96:f3:09:57:46:ec:45:82:
         76:0c:6e:b1:f4:66:65:dc:6a:93:a9:83:ab:99:99:fc:48:a8:
         04:d0:72:8b:b9:02:d9:38:60:f1:1e:64:64:54:fc:7d:19:fb:
         64:16:e6:75:cb:fb:5d:21:9d:bc:a4:30:9d:04:8e:39:f1:87:
         2a:28:88:fb:e4:83:36:8e:14:45:8d:97:8a:4e:4c:05:14:d1:
         aa:6f:66:6f:1d:89:54:b9:0f:2c:a6:31:c4:d6:35:8b:e8:b2:
         ce:90:cc:f7:ed:9a:85:1f:df:2c:2d:76:8b:04:aa:f3:de:d7:
         65:3d:3f:5e:0e:a6:4c:24:4c:94:7f:ae:87:59:d9:d1:2d:2a:
         4e:43:ea:22:ce:77:37:84:77:19:22:ff:65:29:c8:4e:09:78:
         81:f2:3d:22:2a:d1:7a:2f:0d:f9:2f:d2:54:06:59:7a:18:57:
         27:65:5a:39:0a:88:65:f5:18:f9:05:f0:f1:9f:61:24:f5:86:
         fe:02:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org