Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/15/9CEC4948552456B5279642E132DBEF9ED069D3FA.cer
File:                     9CEC4948552456B5279642E132DBEF9ED069D3FA.cer (raw, json)
Hash identifier:          1QthzyWGnb8x+p7fA8qf/CH0FDyx98it0lcntDC8d+o=
Subject key identifier:   9C:EC:49:48:55:24:56:B5:27:96:42:E1:32:DB:EF:9E:D0:69:D3:FA
Authority key identifier: 9B:38:11:3B:8B:70:26:87:32:71:92:D3:44:87:3F:B3:A0:74:A2:1E
Certificate issuer:       /CN=9b38113b8b702687327192d344873fb3a074a21e
Certificate serial:       0FE5C243FA9377CBE3CC5AED88E80791D79806B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzgRO4twJocycZLTRIc_s6B0oh4.cer
Manifest:                 rsync://rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.mft
caRepository:             rsync://rpki.co/repo/August/4
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e5:c2:43:fa:93:77:cb:e3:cc:5a:ed:88:e8:07:91:d7:98:06:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b38113b8b702687327192d344873fb3a074a21e
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=9CEC4948552456B5279642E132DBEF9ED069D3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:e0:e4:14:a3:0d:20:d8:3a:f9:7f:46:1a:
                    c8:38:c0:15:08:5d:08:39:b4:f0:7e:7a:4f:ca:da:
                    20:b0:4a:c4:14:eb:23:2a:44:e4:1c:80:75:9b:c4:
                    a3:f0:37:da:24:c0:26:41:b7:91:07:bb:b4:ba:ad:
                    d4:4d:38:6b:64:d0:81:db:9c:03:45:1e:ce:e4:2c:
                    b6:50:1e:a1:ab:9b:21:14:06:ef:17:7f:20:96:64:
                    a7:57:18:4e:13:87:5a:1d:a6:8f:f9:0f:0a:88:2d:
                    90:05:02:0b:6d:2f:86:cb:64:d1:42:09:50:78:81:
                    fa:14:c5:43:48:b6:98:f9:01:58:06:b1:4c:c4:99:
                    9f:d3:38:f0:21:ea:1b:01:5a:39:f4:77:46:cc:93:
                    c4:b2:4e:54:02:dd:bf:07:e7:95:3c:2d:22:60:68:
                    93:86:b7:bb:84:5e:9c:3d:d9:b3:82:71:4d:54:e4:
                    6c:9e:a9:9f:13:1d:cf:c7:35:46:40:44:1f:88:e5:
                    e8:90:76:85:91:86:12:21:bd:78:1c:db:c7:27:27:
                    50:d9:d5:d0:c5:9d:dc:b1:1f:c9:44:9f:0d:37:e4:
                    ef:72:b4:c8:80:92:87:ae:0a:3f:3c:2e:21:6d:da:
                    bb:87:ed:ea:60:09:0f:21:52:f2:e8:eb:51:d1:25:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:EC:49:48:55:24:56:B5:27:96:42:E1:32:DB:EF:9E:D0:69:D3:FA
            X509v3 Authority Key Identifier:
                keyid:9B:38:11:3B:8B:70:26:87:32:71:92:D3:44:87:3F:B3:A0:74:A2:1E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/15/9B38113B8B702687327192D344873FB3A074A21E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzgRO4twJocycZLTRIc_s6B0oh4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/4
                RPKI Manifest - URI:rsync://rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:e3:68:d8:67:e9:2f:cc:6d:ff:78:a0:91:b4:45:db:bc:
         ff:44:26:cd:0a:09:1f:bf:32:1a:6a:33:63:57:95:30:f7:9b:
         4b:a7:27:c5:b2:60:bc:aa:8c:b7:f1:82:2f:36:25:ee:69:f6:
         da:15:a7:ca:01:84:bd:32:d4:d1:ac:2f:7a:17:31:56:d2:33:
         85:35:96:ee:60:50:ac:45:19:94:14:e5:0e:09:2c:5c:c6:27:
         f5:ae:41:56:c1:a2:1e:3f:c6:e2:c6:8a:dd:ca:db:8b:5f:88:
         c5:c4:9b:84:09:f5:b3:57:12:f1:3b:5a:2b:86:99:ec:1f:20:
         c1:4c:87:90:7a:85:8f:e8:0e:39:b3:10:fc:57:02:3f:72:e0:
         69:de:fc:e0:08:31:2b:12:de:06:52:a0:a7:da:2c:71:c3:f9:
         8c:9d:4a:53:12:4f:93:24:b9:5f:a3:40:ea:da:8d:7d:4d:a4:
         1f:5e:e3:21:cf:a7:c9:11:dc:62:1f:8e:5f:a8:33:b5:a6:fc:
         91:04:5c:9a:e5:63:78:93:df:76:f2:66:54:b6:00:86:d4:db:
         90:ff:d2:40:75:a6:26:c2:2b:38:68:01:43:f2:cf:f2:96:b1:
         10:97:77:37:2d:01:b6:39:b7:f8:ce:bb:25:15:87:2a:e5:fe:
         c7:a7:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----