Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/14/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.cer
File:                     B2E23857943C24C5F8423ACCDC7BE84E01E328DB.cer (raw, json)
Hash identifier:          uZfTCUHMNE2zee+cOjuEV8TPyTBC73UbT9Ah7mtOsjo=
Subject key identifier:   B2:E2:38:57:94:3C:24:C5:F8:42:3A:CC:DC:7B:E8:4E:01:E3:28:DB
Authority key identifier: E2:FE:67:A6:F2:39:A9:8A:25:82:30:D1:4E:20:A2:78:46:7E:B3:BE
Certificate issuer:       /CN=e2fe67a6f239a98a258230d14e20a278467eb3be
Certificate serial:       36855DEBD80B64905DEC83D7D260B5BC5F9559BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4v5npvI5qYolgjDRTiCieEZ-s74.cer
Manifest:                 rsync://rpki.co/repo/August/9/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.mft
caRepository:             rsync://rpki.co/repo/August/9
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:85:5d:eb:d8:0b:64:90:5d:ec:83:d7:d2:60:b5:bc:5f:95:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2fe67a6f239a98a258230d14e20a278467eb3be
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=B2E23857943C24C5F8423ACCDC7BE84E01E328DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:6f:88:a1:73:e2:0b:d9:bb:e4:68:e6:f3:
                    28:29:68:75:ea:b7:3e:b5:f3:70:1f:39:ad:0d:5d:
                    7f:17:d4:b4:23:f2:c0:b7:52:db:7c:53:07:37:a2:
                    29:1d:54:60:ee:1b:38:bc:46:af:e4:e7:df:05:9f:
                    1d:89:7f:eb:de:b9:06:7c:a2:42:45:de:91:e0:a3:
                    3a:b4:a5:9e:1b:60:f9:d5:43:22:a3:d1:f9:36:11:
                    e3:39:bb:fc:63:94:a6:fc:27:47:55:63:8d:bf:85:
                    7a:98:08:58:e1:c8:3b:69:e5:d2:5a:95:e9:76:c4:
                    1d:51:d9:b4:56:3d:6d:f2:d8:2b:b6:49:23:77:c0:
                    a5:37:00:41:74:ea:58:55:70:4a:9a:1d:70:e1:96:
                    17:65:8c:9b:a4:87:5c:89:d3:58:07:66:b5:fe:58:
                    14:78:d7:ad:dc:e0:8f:1f:f3:8b:1f:5a:bb:7f:2c:
                    a2:06:a0:b4:89:22:3d:67:a6:5b:e3:38:24:21:29:
                    03:15:ce:08:57:08:b2:d1:e3:f6:51:91:47:22:88:
                    0d:8b:46:b6:95:b3:5e:ca:97:7e:d1:89:a2:f6:89:
                    2d:34:cd:ea:be:90:b0:4b:16:61:e6:3a:08:49:d0:
                    28:d9:2c:d3:7e:22:08:23:f2:7b:ee:dd:51:d4:e5:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:E2:38:57:94:3C:24:C5:F8:42:3A:CC:DC:7B:E8:4E:01:E3:28:DB
            X509v3 Authority Key Identifier:
                keyid:E2:FE:67:A6:F2:39:A9:8A:25:82:30:D1:4E:20:A2:78:46:7E:B3:BE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/E2FE67A6F239A98A258230D14E20A278467EB3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v5npvI5qYolgjDRTiCieEZ-s74.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/9
                RPKI Manifest - URI:rsync://rpki.co/repo/August/9/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         2c:16:a5:82:54:7e:0b:16:39:35:5e:1b:83:db:a8:01:7b:e6:
         f8:42:cd:28:9a:34:27:5e:dd:63:d1:c3:62:0d:99:fe:ec:c9:
         fc:74:9b:1d:62:55:b6:b3:bf:13:c4:b7:46:bc:a4:36:9e:41:
         95:ef:11:16:d6:ea:f3:cf:b7:ac:89:a0:ef:06:75:5e:e8:17:
         4e:cc:c1:22:08:6d:a9:c3:27:d9:c1:d0:4f:b6:97:f1:67:ed:
         26:9d:bc:9f:a9:77:af:f0:0d:70:9a:cc:f1:78:0d:1f:62:f0:
         e2:09:d5:54:5b:5b:40:b3:bd:a7:72:9b:c6:56:65:ee:be:d4:
         32:b3:4c:70:58:53:68:a9:75:4b:92:9d:71:26:f6:8c:eb:93:
         ec:38:d5:8f:22:21:ff:19:1c:da:24:fe:44:ab:b6:23:49:3c:
         5d:b0:50:5d:60:be:04:ab:7b:16:cf:97:29:0f:52:2b:c2:8f:
         63:97:3d:be:24:4d:a7:e5:0b:fc:bc:b5:b3:73:a7:f6:cf:85:
         6d:5c:9b:7e:4c:bc:82:59:03:28:8b:44:66:07:b2:9c:50:9d:
         67:2d:a2:c0:37:e7:72:ba:ae:83:f4:3a:5a:12:59:eb:46:42:
         cf:41:ef:38:19:72:07:b0:48:64:35:27:b7:15:ab:31:b6:73:
         4c:7a:f1:7e
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUNoVd69gLZJBd7IPX0mC1vF+VWb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTJmZTY3YTZmMjM5YTk4YTI1ODIzMGQxNGUyMGEyNzg0
NjdlYjNiZTAeFw0yMzA0MDgwOTA0MDlaFw0yNDA0MDYwOTA5MDlaMDMxMTAvBgNV
BAMTKEIyRTIzODU3OTQzQzI0QzVGODQyM0FDQ0RDN0JFODRFMDFFMzI4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEm+IoXPiC9m75Gjm8ygpaHXq
tz6183AfOa0NXX8X1LQj8sC3Utt8Uwc3oikdVGDuGzi8Rq/k598Fnx2Jf+veuQZ8
okJF3pHgozq0pZ4bYPnVQyKj0fk2EeM5u/xjlKb8J0dVY42/hXqYCFjhyDtp5dJa
lel2xB1R2bRWPW3y2Cu2SSN3wKU3AEF06lhVcEqaHXDhlhdljJukh1yJ01gHZrX+
WBR4163c4I8f84sfWrt/LKIGoLSJIj1nplvjOCQhKQMVzghXCLLR4/ZRkUciiA2L
RraVs17Kl37RiaL2iS00zeq+kLBLFmHmOghJ0CjZLNN+Iggj8nvu3VHU5Y5zAgMB
AAGjggJkMIICYDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSy4jhXlDwkxfhC
Oszce+hOAeMo2zAfBgNVHSMEGDAWgBTi/mem8jmpiiWCMNFOIKJ4Rn6zvjAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vSFlTUC8xNC9FMkZFNjdBNkYyMzlBOThBMjU4MjMwRDE0RTIwQTI3ODQ2N0VC
M0JFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNHY1bnB2STVxWW9sZ2pEUlRp
Q2llRVotczc0LmNlcjCBxgYIKwYBBQUHAQsEgbkwgbYwKQYIKwYBBQUHMAWGHXJz
eW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85MFYGCCsGAQUFBzAKhkpyc3luYzov
L3Jwa2kuY28vcmVwby9BdWd1c3QvOS9CMkUyMzg1Nzk0M0MyNEM1Rjg0MjNBQ0NE
QzdCRTg0RTAxRTMyOERCLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNv
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuQATMBYEAgACMBADBwAgAQf4
AAIDBQMqE8AAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDKagIDAOheMA0GCSqG
SIb3DQEBCwUAA4IBAQAsFqWCVH4LFjk1XhuD26gBe+b4Qs0omjQnXt1j0cNiDZn+
7Mn8dJsdYlW2s78TxLdGvKQ2nkGV7xEW1urzz7esiaDvBnVe6BdOzMEiCG2pwyfZ
wdBPtpfxZ+0mnbyfqXev8A1wmszxeA0fYvDiCdVUW1tAs72ncpvGVmXuvtQys0xw
WFNoqXVLkp1xJvaM65PsONWPIiH/GRzaJP5Eq7YjSTxdsFBdYL4Eq3sWz5cpD1Ir
wo9jlz2+JE2n5Qv8vLWzc6f2z4VtXJt+TLyCWQMoi0RmB7KcUJ1nLaLAN+dyuq6D
9DpaElnrRkLPQe84GXIHsEhkNSe3FasxtnNMevF+
-----END CERTIFICATE-----