Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/16/4F6B046017BE3C7640B68A72798CD5E389940941.cer
File:                     4F6B046017BE3C7640B68A72798CD5E389940941.cer (raw, json)
Hash identifier:          RLP04mj6zx7kLBWbAaywY+2Zljq8uwkkZ9Fst5xdEDY=
Subject key identifier:   4F:6B:04:60:17:BE:3C:76:40:B6:8A:72:79:8C:D5:E3:89:94:09:41
Authority key identifier: ED:C6:40:51:17:FD:55:6B:A1:DF:9C:44:72:42:10:80:9D:AF:2D:2A
Certificate issuer:       /CN=a6201efd4c15e3223bbfa05657c6505a2d87a2f2bf9f611a4b
Certificate serial:       1673162A2D60A9B10909A4CA2C89D4DC7778598A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c15e3223bbfa05657c6505a2d87a2f2bf9f611a4b.cer
Manifest:                 rsync://rpki.co/repo/August/11/4F6B046017BE3C7640B68A72798CD5E389940941.mft
caRepository:             rsync://rpki.co/repo/August/11
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    IP: 23.150.8.0/22
                          IP: 2602:fa94::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:73:16:2a:2d:60:a9:b1:09:09:a4:ca:2c:89:d4:dc:77:78:59:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c15e3223bbfa05657c6505a2d87a2f2bf9f611a4b
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=4F6B046017BE3C7640B68A72798CD5E389940941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:3f:8a:3d:ed:23:3d:ed:bf:dd:75:26:d3:
                    4e:18:db:86:e2:a7:0d:2f:a6:63:e0:85:0f:67:08:
                    03:3e:e2:26:10:be:8f:93:0d:e3:e0:6f:49:ba:b5:
                    0d:68:7a:9e:58:de:c4:56:09:66:52:44:05:11:6f:
                    33:f1:48:48:84:7b:cd:4f:1e:d9:87:d9:eb:36:d3:
                    24:01:44:d4:11:f3:1d:a0:e2:fb:45:24:ff:97:61:
                    76:63:3e:2c:15:4c:d7:ca:5e:33:8e:52:ed:25:62:
                    e5:0c:6c:c6:a5:18:b7:a3:e4:03:28:2e:00:dd:e3:
                    67:d5:af:4f:75:98:40:c2:e0:43:ed:a8:c9:cc:b6:
                    3b:a7:76:01:40:3e:2a:b9:ce:cb:ca:06:c1:60:38:
                    9e:7d:fc:65:60:40:b0:40:cd:8a:98:2c:7a:df:8d:
                    79:d5:26:3a:3a:4a:b2:20:9a:3d:c1:9f:5c:dd:9e:
                    24:ee:70:eb:5b:f2:54:32:07:a3:7c:3e:a5:41:bf:
                    be:6c:f8:0e:66:79:3f:11:69:8f:a0:a3:43:d3:e8:
                    5d:06:fc:82:35:97:c2:c2:75:d3:48:c3:5f:ed:36:
                    61:09:03:e1:62:94:0f:8b:70:d1:8a:67:51:46:ce:
                    36:0b:75:43:ad:37:19:f9:e4:36:ec:31:e8:d6:b5:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:6B:04:60:17:BE:3C:76:40:B6:8A:72:79:8C:D5:E3:89:94:09:41
            X509v3 Authority Key Identifier:
                keyid:ED:C6:40:51:17:FD:55:6B:A1:DF:9C:44:72:42:10:80:9D:AF:2D:2A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/16/EDC6405117FD556BA1DF9C44724210809DAF2D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c15e3223bbfa05657c6505a2d87a2f2bf9f611a4b.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/11
                RPKI Manifest - URI:rsync://rpki.co/repo/August/11/4F6B046017BE3C7640B68A72798CD5E389940941.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:88:c6:2f:0e:8b:8b:72:fe:70:73:5e:22:c7:c2:af:70:
         aa:51:75:aa:01:7b:34:a3:0a:e3:a2:de:ef:84:fc:3f:63:3d:
         40:a7:ad:b0:9a:16:be:a7:58:fd:e2:c3:0b:d5:ba:db:a1:0d:
         68:f4:da:41:cc:14:65:bf:af:6e:7e:76:9f:fa:5d:b3:57:20:
         3e:cd:4c:95:40:a5:4c:eb:d2:88:74:8a:f7:f2:c1:01:f1:69:
         37:0b:33:ca:41:f7:8f:52:de:87:8c:a0:e4:30:d1:d2:e6:7c:
         ed:cc:9a:ca:b4:72:eb:b2:6e:d8:72:d5:54:d1:6b:8e:2c:90:
         81:c9:87:e9:c4:39:13:dd:6e:84:25:06:88:fb:ee:dc:9c:b2:
         a6:be:ea:f9:5f:ee:11:06:12:5f:2b:96:8d:44:85:c2:f5:2e:
         93:aa:9e:9c:79:20:00:de:74:75:2b:c7:bb:fc:52:05:45:cc:
         4d:8d:f7:65:09:8c:0a:33:f0:c8:49:d8:8f:f4:54:f6:2d:2d:
         1f:14:80:d2:64:0c:74:13:6d:d0:e6:fc:84:cb:b9:9e:ee:e9:
         35:c7:07:b8:10:a1:ee:10:b3:2f:9c:ff:9f:d5:79:f6:68:f0:
         0d:f0:33:cb:d9:8e:c1:e0:d9:31:f0:18:64:5d:36:3f:ce:77:
         c1:c9:c5:15
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUFnMWKi1gqbEJCaTKLInU3Hd4WYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0YzE1ZTMyMjNiYmZhMDU2NTdjNjUwNWEy
ZDg3YTJmMmJmOWY2MTFhNGIwHhcNMjMwNDA4MDkwNDA5WhcNMjQwNDA2MDkwOTA5
WjAzMTEwLwYDVQQDEyg0RjZCMDQ2MDE3QkUzQzc2NDBCNjhBNzI3OThDRDVFMzg5
OTQwOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2o/ij3tIz3t
v911JtNOGNuG4qcNL6Zj4IUPZwgDPuImEL6Pkw3j4G9JurUNaHqeWN7EVglmUkQF
EW8z8UhIhHvNTx7Zh9nrNtMkAUTUEfMdoOL7RST/l2F2Yz4sFUzXyl4zjlLtJWLl
DGzGpRi3o+QDKC4A3eNn1a9PdZhAwuBD7ajJzLY7p3YBQD4quc7LygbBYDieffxl
YECwQM2KmCx634151SY6OkqyIJo9wZ9c3Z4k7nDrW/JUMgejfD6lQb++bPgOZnk/
EWmPoKND0+hdBvyCNZfCwnXTSMNf7TZhCQPhYpQPi3DRimdRRs42C3VDrTcZ+eQ2
7DHo1rW/LQIDAQABo4ICzTCCAskwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
T2sEYBe+PHZAtopyeYzV44mUCUEwHwYDVR0jBBgwFoAU7cZAURf9VWuh35xEckIQ
gJ2vLSowDgYDVR0PAQH/BAQDAgEGMFoGA1UdHwRTMFEwT6BNoEuGSXJzeW5jOi8v
cnBraS5jby9yZXBvL0hZU1AvMTYvRURDNjQwNTExN0ZENTU2QkExREY5QzQ0NzI0
MjEwODA5REFGMkQyQS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcw
AoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzA3ZTc2LTY2ZDgtNDhkNy04
MjZhLTg1ZGUyOWM2NmEyMi9hNjIwMWVmZDRjMTVlMzIyM2JiZmEwNTY1N2M2NTA1
YTJkODdhMmYyYmY5ZjYxMWE0Yi5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCoGCCsG
AQUFBzAFhh5yc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3QvMTEwVwYIKwYBBQUH
MAqGS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xMS80RjZCMDQ2MDE3QkUz
Qzc2NDBCNjhBNzI3OThDRDVFMzg5OTQwOTQxLm1mdDAxBggrBgEFBQcwDYYlaHR0
cHM6Ly9ycGtpLmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCF5YIMA4E
AgACMAgDBgQmAvqUADANBgkqhkiG9w0BAQsFAAOCAQEAj0aIxi8Oi4ty/nBzXiLH
wq9wqlF1qgF7NKMK46Le74T8P2M9QKetsJoWvqdY/eLDC9W626ENaPTaQcwUZb+v
bn52n/pds1cgPs1MlUClTOvSiHSK9/LBAfFpNwszykH3j1Leh4yg5DDR0uZ87cya
yrRy67Ju2HLVVNFrjiyQgcmH6cQ5E91uhCUGiPvu3Jyypr7q+V/uEQYSXyuWjUSF
wvUuk6qenHkgAN50dSvHu/xSBUXMTY33ZQmMCjPwyEnYj/RU9i0tHxSA0mQMdBNt
0Ob8hMu5nu7pNccHuBCh7hCzL5z/n9V59mjwDfAzy9mOweDZMfAYZF02P853wcnF
FQ==
-----END CERTIFICATE-----