Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/18/D7C870EC9467CAADC4C3A6804075EF348D6FF120.cer
File:                     D7C870EC9467CAADC4C3A6804075EF348D6FF120.cer (raw, json)
Hash identifier:          YimMmlWgeA6v4YYwLr42dcElIflckZut3bQOPYgT9bY=
Subject key identifier:   D7:C8:70:EC:94:67:CA:AD:C4:C3:A6:80:40:75:EF:34:8D:6F:F1:20
Authority key identifier: D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE
Certificate issuer:       /CN=D8934575D189EF7F17DA8118042496D41A4517DE
Certificate serial:       06151B2386D392C3210AE27BFA97ED30EDAB1AE0
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D8934575D189EF7F17DA8118042496D41A4517DE.cer
Manifest:                 rsync://rpki.co/repo/August/5/D7C870EC9467CAADC4C3A6804075EF348D6FF120.mft
caRepository:             rsync://rpki.co/repo/August/5
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    AS: 7719

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:1b:23:86:d3:92:c3:21:0a:e2:7b:fa:97:ed:30:ed:ab:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8934575D189EF7F17DA8118042496D41A4517DE
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=D7C870EC9467CAADC4C3A6804075EF348D6FF120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d6:ed:a7:09:f7:e7:e2:24:8a:ca:53:90:8a:
                    67:02:8c:3c:fa:99:87:70:9f:41:09:bc:fb:b6:d7:
                    3d:51:f4:d3:8e:d9:bd:40:93:5e:3b:ea:87:50:9d:
                    83:d6:ab:08:4f:fa:dc:7d:0b:db:7e:79:48:6b:1e:
                    c7:d0:b0:37:96:ca:ba:90:d9:18:19:3c:a4:fe:0d:
                    bd:5f:d4:42:97:ba:75:ce:68:56:93:b7:f8:f6:60:
                    00:9d:94:3a:5d:c9:c2:be:ca:8d:7a:9c:9a:b7:42:
                    13:df:f7:72:79:e1:0d:62:dc:1a:14:82:be:5c:c8:
                    0c:95:c6:19:f0:38:93:0e:13:49:50:7c:89:24:dd:
                    13:4c:11:cd:54:4f:3e:78:77:f7:d0:c5:79:95:59:
                    90:2c:11:25:66:4f:1f:5e:37:cd:3d:6c:b7:d1:81:
                    b6:07:91:e0:80:e0:36:7a:29:4a:5e:5d:aa:3f:1c:
                    2c:54:7d:ca:b1:6d:4a:01:a6:77:1b:09:86:c2:c9:
                    b4:f5:9e:20:62:bc:81:6f:1b:8f:a0:9e:f7:4d:f7:
                    e0:b3:32:ce:67:60:b4:46:29:73:ed:1e:77:37:24:
                    69:8e:b9:12:45:2d:56:70:81:d2:a8:ad:e5:a1:97:
                    45:79:e2:6b:ee:56:25:a5:f9:8c:0f:e5:1d:71:2c:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:C8:70:EC:94:67:CA:AD:C4:C3:A6:80:40:75:EF:34:8D:6F:F1:20
            X509v3 Authority Key Identifier:
                keyid:D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D8934575D189EF7F17DA8118042496D41A4517DE.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/5
                RPKI Manifest - URI:rsync://rpki.co/repo/August/5/D7C870EC9467CAADC4C3A6804075EF348D6FF120.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719

    Signature Algorithm: sha256WithRSAEncryption
         18:45:1f:f1:ff:bf:f6:20:a2:6c:58:1d:a7:4b:b8:48:dc:af:
         ad:10:b1:2d:ff:21:53:42:3d:a2:9d:9d:df:c0:b5:e7:98:ad:
         93:14:03:74:e3:b1:4e:26:ac:b6:0d:9c:42:db:6c:7f:99:53:
         96:8b:e1:c1:e3:b4:62:d1:0d:b5:75:ce:7d:a7:e1:a6:e4:c1:
         8a:ff:9e:cb:93:27:35:92:02:cf:13:a1:ef:eb:99:16:a1:93:
         88:80:d6:82:b0:9b:8d:d2:e4:8f:27:57:98:db:ee:c4:0d:5f:
         0d:1f:22:0a:2f:e8:5e:d3:8e:00:55:8b:5c:4b:89:8d:f4:06:
         cd:b6:a0:0b:b6:95:e5:60:e7:7e:52:e9:30:73:6f:b0:aa:88:
         15:bd:89:dd:f2:83:b8:f9:c6:cf:58:7e:d9:a7:8b:45:47:f7:
         09:14:0d:68:d9:3f:d8:a3:57:63:64:f6:2d:d8:d3:1a:1a:96:
         07:96:77:b1:20:5a:df:78:dd:f3:81:78:75:a3:f5:19:95:d5:
         e4:11:e3:e2:8d:64:c2:34:ac:a6:98:e4:e6:e2:8e:c7:ee:9d:
         0f:9a:65:51:1a:b6:60:a7:d2:99:74:ed:a0:4a:5e:4f:9c:ee:
         79:4c:9d:5f:54:8d:3e:e3:62:46:27:7e:e1:ff:5c:7c:0e:6c:
         39:3e:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----