Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer
File:                     275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer (raw, json)
Hash identifier:          AsjPVsQavFLE2wpzGVnPmLic5jm2OHfqsq4D4SAI7l0=
Subject key identifier:   27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
Authority key identifier: C7:4C:5B:6B:2B:BD:D1:36:E7:AD:78:8E:94:58:CD:FA:B0:66:03:0A
Certificate issuer:       /CN=62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b
Certificate serial:       536BEA2DFC7D0C07BA79CC1FD1C84A419F9DED61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b.cer
Manifest:                 rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.mft
caRepository:             rsync://rpki.co/repo/August/1
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6b:ea:2d:fc:7d:0c:07:ba:79:cc:1f:d1:c8:4a:41:9f:9d:ed:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:81:f2:7f:81:99:96:e8:93:16:de:e8:9f:
                    c8:59:4a:28:3b:84:90:4c:72:ba:0b:73:22:cc:4d:
                    5c:1f:be:db:8e:fa:22:a7:a2:b2:aa:e1:95:18:d4:
                    87:bb:e2:c5:3d:88:6b:97:70:88:e4:c6:9c:ec:d6:
                    f3:a3:9f:a8:c9:74:6f:06:92:59:47:63:58:8d:05:
                    6d:21:4f:14:66:9b:c2:d0:10:e9:42:da:46:98:76:
                    49:1d:fc:7f:6a:f2:4d:a9:bd:2a:b3:a6:3c:d9:cb:
                    cb:ee:fd:51:ed:06:12:60:86:a3:cb:25:9f:c9:0c:
                    e6:6e:de:cc:6f:7d:f3:dd:4f:1e:45:46:18:e8:c6:
                    9f:a6:eb:fb:3d:3f:35:da:c2:f5:83:37:f0:b9:52:
                    ef:e7:26:43:7a:1c:84:02:be:ea:65:07:9b:43:fe:
                    a3:f2:b8:1e:77:e7:f0:9f:51:b2:b5:a2:87:cc:7b:
                    51:02:b2:95:c9:fc:1d:9b:fe:e6:09:cd:08:2c:1c:
                    23:ea:32:82:a0:9c:04:0a:39:85:2f:17:b9:e3:1c:
                    9f:1e:fa:07:7a:50:b3:43:89:36:7f:a7:8e:38:cc:
                    d5:f9:7c:71:6f:ef:64:2d:09:37:65:ec:92:ca:96:
                    e5:e4:65:28:79:96:e5:d6:cf:04:e2:0d:e1:ea:d1:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
            X509v3 Authority Key Identifier:
                keyid:C7:4C:5B:6B:2B:BD:D1:36:E7:AD:78:8E:94:58:CD:FA:B0:66:03:0A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/13/C74C5B6B2BBDD136E7AD788E9458CDFAB066030A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16b3fc0a5b4e10372b0129ef67728f4d7cf7e1da7b.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/1
                RPKI Manifest - URI:rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:04:45:33:c2:c3:90:23:46:31:ad:24:94:3f:ae:70:d7:4a:
         bd:c1:61:26:49:dc:d6:2b:c8:3e:33:e0:a3:0d:aa:7c:58:37:
         c5:24:c9:f4:9b:30:e3:53:7b:1f:c0:26:93:db:5f:2e:25:43:
         cb:c1:e1:74:9e:42:af:bc:1b:06:cc:ff:8b:8d:80:d9:98:6b:
         38:95:0a:a6:2e:11:56:dd:18:6c:e9:70:a3:cd:02:05:f6:9f:
         91:35:9f:32:7f:53:93:10:3e:e1:3a:55:68:6f:80:ef:67:d3:
         12:92:28:dc:12:77:3b:8a:19:4d:35:55:8b:0d:b5:91:02:f6:
         98:b8:83:42:8a:c5:94:6e:90:c4:a3:c1:ae:46:64:cc:f9:30:
         e1:ee:b7:46:a8:00:e4:aa:45:5f:da:9c:d5:0a:18:cb:c1:a3:
         e9:00:a9:8a:a1:e1:e0:68:86:85:55:b3:3b:0b:e3:d0:85:e4:
         f8:0d:7e:0b:48:bf:c1:15:97:80:a2:c6:31:91:8e:22:c2:3b:
         47:53:04:a1:a8:fe:9e:54:6c:be:87:3d:ac:62:16:47:ec:24:
         04:8c:bb:42:ed:cd:a1:26:8d:e0:a6:94:e7:d9:a5:f8:17:aa:
         04:42:24:f7:ad:9c:23:ad:df:46:9f:c3:26:31:c2:01:f1:27:
         a5:b4:c2:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----