Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/15/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.cer
File:                     7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.cer (raw, json)
Hash identifier:          Ztz3FIrn+L+yQO9+g2t1FE3Gknz5oBTwCcdFf48xIvU=
Subject key identifier:   7F:F0:B2:56:E5:65:F1:52:3D:0B:4F:6F:A4:B6:1B:58:6B:7B:35:DD
Authority key identifier: AC:F8:2E:97:C0:94:DB:30:59:99:5C:C3:C9:4B:97:62:04:82:DE:CD
Certificate issuer:       /CN=acf82e97c094db3059995cc3c94b97620482decd
Certificate serial:       0CF5AB1998C2BB0A98D9EC408B4BDC06C70314B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPgul8CU2zBZmVzDyUuXYgSC3s0.cer
Manifest:                 rsync://rpki.co/repo/August/4/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.mft
caRepository:             rsync://rpki.co/repo/August/4
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:ab:19:98:c2:bb:0a:98:d9:ec:40:8b:4b:dc:06:c7:03:14:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf82e97c094db3059995cc3c94b97620482decd
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:a3:11:78:d7:ef:d9:9f:ca:51:0d:25:c9:
                    f6:b9:5c:ae:7a:9f:1d:be:6c:d8:f9:a5:ad:dc:0c:
                    c0:87:11:69:96:71:87:c6:7d:4a:14:4e:cb:30:62:
                    89:83:7d:e8:13:9b:4c:18:a3:81:03:26:77:8f:15:
                    3e:81:59:c8:0a:c9:96:9a:35:86:c2:dc:a2:8f:5e:
                    4a:52:0a:c5:12:8d:d8:38:ec:c0:b8:a1:0a:38:4d:
                    a5:6a:9a:95:5f:16:92:f6:5e:cd:fe:97:30:55:8f:
                    4d:4e:29:85:32:69:c8:c3:11:4c:01:a4:6e:43:88:
                    89:0b:a6:62:eb:be:b3:7a:38:bb:6b:35:95:5a:4e:
                    54:46:7a:72:e2:3a:81:44:68:ce:3d:4b:3b:88:02:
                    0c:d6:df:d7:b3:e8:03:19:12:f3:3d:3c:c2:34:5c:
                    df:0f:d3:a0:3b:e4:f4:c9:b4:15:5a:28:d1:58:fc:
                    98:2b:c6:9a:da:41:70:77:5c:41:7d:3a:38:27:a9:
                    07:ac:fa:7f:65:9e:8a:9a:bb:1a:1b:b9:84:c7:41:
                    eb:1a:b4:89:5e:5b:75:87:6b:93:f1:d6:b9:da:f5:
                    00:fc:46:37:bf:52:93:eb:92:20:b2:20:ee:4b:e7:
                    36:c3:57:91:5b:38:ba:7f:74:38:f6:ef:ca:36:0b:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:F0:B2:56:E5:65:F1:52:3D:0B:4F:6F:A4:B6:1B:58:6B:7B:35:DD
            X509v3 Authority Key Identifier:
                keyid:AC:F8:2E:97:C0:94:DB:30:59:99:5C:C3:C9:4B:97:62:04:82:DE:CD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/15/ACF82E97C094DB3059995CC3C94B97620482DECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPgul8CU2zBZmVzDyUuXYgSC3s0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/4
                RPKI Manifest - URI:rsync://rpki.co/repo/August/4/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:22:33:69:a3:6c:10:9d:a3:4e:47:89:9f:84:63:2a:b8:
         88:c3:bb:64:d2:57:21:4a:33:ab:62:61:61:b1:a8:7f:b2:3a:
         b1:12:4d:5e:d4:38:ed:58:47:26:37:c2:c8:78:02:06:e6:49:
         cc:d9:76:ef:0f:dd:ff:81:6a:29:35:63:61:84:e6:89:f5:bb:
         be:9c:4c:f8:b7:b0:2c:c3:55:cf:59:3c:4e:8c:d0:5a:28:fa:
         31:a9:84:0d:56:a4:fc:77:b5:3b:dd:55:cc:d2:bf:19:42:a0:
         fc:9a:fa:d9:18:81:cc:9e:b6:c2:b3:0f:41:7a:82:c4:00:ac:
         29:b9:51:b6:ef:6f:a2:4d:79:ce:17:ab:bf:5d:f5:ae:98:a6:
         0e:c8:58:41:56:8e:a5:13:28:ad:e3:5c:b3:e5:d9:c9:98:14:
         51:d3:69:c8:e7:3f:1c:17:95:d9:7e:8c:a5:b6:e8:ef:f7:70:
         ff:ba:56:1f:c1:c1:22:c7:a2:66:76:cd:25:26:a0:b1:d7:8f:
         f5:f8:46:2b:24:00:44:7d:24:4c:81:01:56:ba:ed:10:ba:d2:
         a4:94:97:93:f0:91:5b:b2:ea:33:e8:fb:ba:f2:aa:3a:7c:21:
         21:b6:0f:3a:03:15:b7:d9:91:2e:6c:85:da:0d:2f:1e:bc:39:
         26:b7:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----