Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer
File:                     0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer (raw, json)
Hash identifier:          46DkOYM2ouLPJ2YnS+W889dNG36elsRB0jOZ+aU+tf4=
Subject key identifier:   0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0
Authority key identifier: B1:AA:88:7D:CA:8F:F5:60:47:8D:55:00:38:99:02:96:1D:2A:EF:CE
Certificate issuer:       /CN=a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7
Certificate serial:       79110D01089502409C57DFE83E625B112D3DFDF6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7.cer
Manifest:                 rsync://rpki.co/repo/August/11/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.mft
caRepository:             rsync://rpki.co/repo/August/11
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 23.150.8.0/22
                          IP: 2602:fa94::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:11:0d:01:08:95:02:40:9c:57:df:e8:3e:62:5b:11:2d:3d:fd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:14:a6:70:16:69:1d:f7:49:82:8f:75:ea:
                    92:7c:10:3a:fb:73:ad:6b:8a:a4:8c:88:dc:48:24:
                    e6:ae:58:14:80:f1:32:c6:b6:d6:13:bb:98:da:26:
                    2d:59:cc:43:ec:9c:0d:38:42:91:be:00:fe:d4:96:
                    02:e7:df:97:32:c0:1a:47:a4:3d:cb:95:41:55:11:
                    ba:5d:23:4d:39:76:c7:b9:49:f2:74:30:c6:1a:7a:
                    47:10:f7:5d:4b:ea:fb:0e:a5:97:69:ac:69:c7:e0:
                    b6:3b:74:c0:73:52:5c:bb:cb:d3:8e:36:05:60:31:
                    25:b5:4a:83:15:eb:98:cd:37:c4:ee:eb:f0:51:64:
                    b2:33:1f:3a:42:d4:8a:71:c3:51:a9:37:46:98:2c:
                    c9:17:a8:6b:e9:a4:96:6d:28:01:3f:db:1b:17:95:
                    41:ab:6f:e7:fa:59:e3:2c:c5:85:25:0b:be:a3:da:
                    f2:f4:24:e4:4a:8d:10:76:b2:25:7b:83:de:ca:cf:
                    d3:e7:02:80:dd:0a:8b:de:0f:4b:54:ff:80:1b:fc:
                    60:68:df:b7:8b:7a:84:15:05:a5:6e:77:94:3c:22:
                    a2:10:5f:63:63:fe:bd:3a:36:3c:e1:81:ec:f6:d1:
                    e5:c4:5c:ec:16:db:8f:e3:4b:db:ca:be:f2:2c:8c:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0
            X509v3 Authority Key Identifier:
                keyid:B1:AA:88:7D:CA:8F:F5:60:47:8D:55:00:38:99:02:96:1D:2A:EF:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/16/B1AA887DCA8FF560478D5500389902961D2AEFCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c463130f01175bd9ed8a6839bf00c5dbf6a8794a7.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/11
                RPKI Manifest - URI:rsync://rpki.co/repo/August/11/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:2a:cf:05:14:9c:2d:7a:52:1b:35:1e:7a:60:cb:67:50:
         91:f5:7e:df:f9:e4:8c:7e:d5:a0:63:28:03:b1:c1:fb:67:e7:
         e1:9f:cf:b7:b3:25:51:0f:45:da:18:16:1f:19:97:0c:27:69:
         02:2c:08:ed:b4:a1:1b:e7:2a:0d:19:58:95:70:28:88:84:35:
         43:9d:64:58:19:6f:b4:ce:d8:d2:24:02:ee:84:3f:c2:89:82:
         e2:c0:35:0b:29:7a:33:53:ed:fe:11:41:92:59:14:50:4f:64:
         c2:24:b6:d6:08:0a:67:ca:27:fb:4c:66:8c:61:d8:37:b2:eb:
         06:d8:ff:8a:e3:84:cc:0c:9f:07:4e:9e:21:0f:f0:36:55:d1:
         9c:1f:79:e7:a2:2f:d3:0a:51:65:fa:4a:4d:42:c9:98:2e:96:
         28:27:11:96:65:10:cc:97:be:0e:36:fa:5d:7b:18:fd:e4:c8:
         73:45:83:a7:6a:9d:a7:b7:58:9f:93:4a:b7:ac:94:9d:97:a7:
         4d:9b:ac:6f:8d:16:12:0b:0b:44:81:10:fe:e5:c6:b1:d4:02:
         50:72:b3:a0:b4:be:b8:98:3f:fb:2e:af:86:1d:56:12:d6:7e:
         7c:d9:df:47:3d:4b:15:b9:32:7f:80:c8:64:2a:bf:9a:48:fa:
         9e:05:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----