Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
File:                     0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer (raw, json)
Hash identifier:          HRSfgAS7OneSVqYHISofNgZWbKlqJNpAk4NYeGsVFRc=
Subject key identifier:   0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority key identifier: C1:24:45:90:F6:D0:2A:C5:8D:FE:BF:91:1D:A1:94:61:A3:07:BB:1A
Certificate issuer:       /CN=c1244590f6d02ac58dfebf911da19461a307bb1a
Certificate serial:       60B3B58C370AA10350B30345B954EB4FACB96C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSRFkPbQKsWN_r-RHaGUYaMHuxo.cer
Manifest:                 rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.mft
caRepository:             rsync://rpki.co/repo/August/9
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b3:b5:8c:37:0a:a1:03:50:b3:03:45:b9:54:eb:4f:ac:b9:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1244590f6d02ac58dfebf911da19461a307bb1a
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:2f:bc:b2:98:2b:53:5c:f2:b9:80:3e:88:
                    af:1c:a1:39:29:84:71:77:86:1f:66:e1:be:a8:e9:
                    71:eb:4d:8a:68:3d:0e:46:6c:43:8b:16:b8:6c:1d:
                    8f:43:a5:47:56:e9:72:25:80:42:9a:ed:23:de:b8:
                    e8:a2:48:b7:0f:ee:cd:ac:7f:cb:5e:9a:5d:c7:64:
                    e6:41:83:b0:9c:e0:e7:e0:1a:3f:ed:d2:af:13:c7:
                    72:95:65:8b:47:4e:59:54:29:61:4b:b5:28:71:22:
                    40:c4:df:d9:26:93:c6:39:a5:c6:cd:a0:46:31:4f:
                    dc:e2:28:34:79:a0:d9:89:4e:e3:44:0b:c4:00:ef:
                    89:89:c0:98:0b:af:36:3b:17:ec:32:c0:8b:06:9e:
                    82:09:b6:e9:13:89:1b:c7:0b:40:cf:94:1d:74:9a:
                    de:5a:a5:f0:1e:b5:db:bd:80:61:65:25:a8:fc:fb:
                    cd:8d:b5:54:44:35:af:2f:43:87:bc:26:7f:96:a2:
                    21:78:66:d3:90:2b:5d:39:5c:dc:56:08:e3:6e:5d:
                    8c:39:ca:33:23:b3:3c:eb:8e:8a:62:2b:34:be:36:
                    d5:47:6a:00:8c:d8:09:9d:be:cf:12:be:d2:75:86:
                    f3:58:24:c3:d5:3d:51:8a:53:cc:06:1c:b9:ea:10:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
            X509v3 Authority Key Identifier:
                keyid:C1:24:45:90:F6:D0:2A:C5:8D:FE:BF:91:1D:A1:94:61:A3:07:BB:1A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/C1244590F6D02AC58DFEBF911DA19461A307BB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSRFkPbQKsWN_r-RHaGUYaMHuxo.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/9
                RPKI Manifest - URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:32:6d:ad:e5:1a:04:eb:5f:d2:b0:39:48:b8:d3:6f:0b:
         ba:92:89:6b:7e:f5:2c:66:fe:05:62:df:d2:ea:ee:60:08:e4:
         b4:2e:3a:89:c1:b9:bf:6d:83:2d:7f:14:e7:59:c3:2c:54:a1:
         48:e9:85:56:d3:7a:6d:db:8b:72:ea:a0:fe:4b:f3:1c:ff:38:
         70:b1:f8:fa:65:b2:5f:0c:63:c9:1a:c4:1e:83:d8:9e:fc:97:
         47:91:e1:9a:97:9c:39:80:9c:91:7d:0a:1b:6d:81:93:f6:b1:
         0f:48:4d:9f:38:56:c9:cc:86:d5:21:b4:78:2f:99:25:2a:4e:
         75:67:0c:39:3f:35:84:20:2f:0c:41:2d:41:db:10:ac:d5:08:
         3a:c0:2d:fa:24:e5:9e:31:66:60:27:a7:71:22:58:c3:a0:28:
         46:52:7d:24:43:89:86:1c:ed:f3:ae:23:e3:d1:12:af:1d:21:
         95:f8:88:2f:b3:8a:c1:bc:51:fd:eb:de:e0:a0:d6:e2:db:9a:
         21:4b:0d:33:8c:cd:69:cd:d8:31:2c:04:ea:9f:4d:41:22:a7:
         dd:03:a9:44:7e:c2:70:30:12:0e:6a:79:e7:6c:97:2f:d1:71:
         d0:4a:34:a1:bc:a8:47:d5:46:ff:d1:53:24:5f:01:a7:4b:57:
         66:e4:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org