Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
File:                     34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer (raw, json)
Hash identifier:          SEkqM78k2f1tfMwelvBqOmu/K3brdubj0gcvyPdgI2Q=
Subject key identifier:   34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority key identifier: 59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7
Certificate issuer:       /CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
Certificate serial:       3AC341A3EEF30417AFCFBC61C37A7AE901416BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 2a12:dd47:802c::/46
                          IP: 2a12:dd47:8230::/44
                          IP: 2a12:dd47:8400::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:41:a3:ee:f3:04:17:af:cf:bc:61:c3:7a:7a:e9:01:41:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:5c:f2:90:04:1c:bf:39:b1:ce:42:09:1a:
                    1b:8e:82:80:69:01:c9:fe:c7:55:73:4a:c2:c6:26:
                    d1:f3:9f:80:cb:ab:f0:36:e6:5c:e6:74:ae:32:60:
                    fb:2f:3e:d7:cb:33:37:d4:bd:0b:df:a2:ec:69:46:
                    d6:a1:43:ee:e4:bb:77:b0:9d:14:41:00:76:11:29:
                    1c:42:bf:d0:c4:4e:6f:03:63:2f:6d:e5:43:a5:8e:
                    74:1c:2a:e4:8e:45:d4:e1:62:9f:3e:fd:ee:7c:a9:
                    cf:7c:7b:64:85:a3:8e:ab:c3:3c:a6:56:a6:5b:eb:
                    38:58:3a:84:c5:92:e0:51:ea:5f:1f:da:7c:ed:09:
                    8e:f6:ce:e4:23:22:6e:93:8e:a8:3b:4b:0a:5e:84:
                    7e:b7:13:fa:f7:00:70:34:5a:c8:39:28:dc:54:73:
                    d7:df:f0:aa:4e:d0:1f:cc:e3:67:a5:e8:8a:df:e2:
                    87:fb:26:65:99:e4:7a:8d:ea:69:df:d2:1b:87:b6:
                    7e:a9:fa:27:f9:6b:4a:48:b2:37:f5:84:fa:27:21:
                    0d:30:88:75:41:95:40:6d:66:f0:b8:87:28:66:47:
                    50:6b:cc:4b:e7:39:a3:8b:bd:ce:b5:cf:15:d5:1c:
                    70:52:7b:ef:92:fa:a0:99:10:f1:a4:0c:19:51:74:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
            X509v3 Authority Key Identifier:
                keyid:59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/597EB599C1F994417EB5CDEBA00DF77B595EF6B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46
                  2a12:dd47:8230::/44
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:f7:d9:c0:d0:d0:45:b8:25:28:82:1e:ce:1e:2d:eb:10:
         66:8c:18:a8:8a:3e:df:de:a5:35:0f:d3:59:e2:1c:04:15:b7:
         1a:77:7e:fa:ea:f1:e2:7b:24:8b:35:4d:42:08:cf:97:3a:3d:
         71:bd:70:7c:e3:0b:e3:a3:ba:4e:9b:14:e3:e0:45:f5:72:34:
         8c:c7:56:33:d1:47:f5:80:cf:f8:5f:8b:0b:f2:26:77:48:99:
         7a:1f:d2:3b:99:00:f4:c0:25:33:86:df:07:7f:27:24:55:51:
         1c:ec:40:dc:3e:b4:94:7c:bd:63:7f:af:13:23:6f:c0:ac:91:
         f3:e8:86:95:fb:d9:e6:78:b0:a7:c3:d2:0c:cf:c1:26:b9:8c:
         51:ba:9d:ae:a2:16:95:45:84:21:dd:9e:c5:6f:4b:17:4a:05:
         16:5b:ed:b1:43:40:5b:44:0a:29:b8:e1:0f:20:b5:aa:ac:20:
         2d:71:97:15:e4:21:db:f4:30:21:67:7e:b8:36:3d:e2:e9:f5:
         36:cf:7a:cb:f8:94:7d:8b:e6:41:a3:f9:5c:5c:c6:2d:cb:65:
         1f:b8:cf:31:f3:c6:dd:73:54:e6:82:ec:5f:d7:db:e4:79:51:
         39:4e:e9:c5:44:2f:4f:86:27:b7:9a:36:63:d0:97:92:da:df:
         e9:d4:ea:6e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUOsNBo+7zBBevz7xhw3p66QFBa/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3ZWI1OTljMWY5OTQ0MTdlYjVjZGViYTAwZGY3N2I1
OTVlZjZiNzAeFw0yMzA0MDgxMTI4NDhaFw0yNDA0MDYxMTMzNDhaMDMxMTAvBgNV
BAMTKDM0QTkzQzI5MzY2OThDQTJCQTFDRDVDRTMwNDE0RTU2MkE2M0Y3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLFzykAQcvzmxzkIJGhuOgoBp
Acn+x1VzSsLGJtHzn4DLq/A25lzmdK4yYPsvPtfLMzfUvQvfouxpRtahQ+7ku3ew
nRRBAHYRKRxCv9DETm8DYy9t5UOljnQcKuSORdThYp8+/e58qc98e2SFo46rwzym
VqZb6zhYOoTFkuBR6l8f2nztCY72zuQjIm6Tjqg7SwpehH63E/r3AHA0Wsg5KNxU
c9ff8KpO0B/M42el6Irf4of7JmWZ5HqN6mnf0huHtn6p+if5a0pIsjf1hPonIQ0w
iHVBlUBtZvC4hyhmR1BrzEvnOaOLvc61zxXVHHBSe++S+qCZEPGkDBlRdK91AgMB
AAGjggK3MIICszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0qTwpNmmMoroc
1c4wQU5WKmP3bjAfBgNVHSMEGDAWgBRZfrWZwfmUQX61zeugDfd7WV72tzAOBgNV
HQ8BAf8EBAMCAQYwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vSFlTUC82LzU5N0VCNTk5QzFGOTk0NDE3RUI1Q0RFQkEwMERGNzdCNTk1RUY2
QjcuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtp
LnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9XWDYxbWNINWxFRi10YzNyb0Ez
M2UxbGU5cmMuY2VyMIIBPgYIKwYBBQUHAQsEggEwMIIBLDBeBggrBgEFBQcwBYZS
cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4
ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMDCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJm
OGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzAvMzRBOTNDMjkzNjY5
OENBMkJBMUNENUNFMzA0MTRFNTYyQTYzRjc2RS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIA
AjAaAwcCKhLdR4AsAwcEKhLdR4IwAwYAKhLdR4QwDQYJKoZIhvcNAQELBQADggEB
ALus99nA0NBFuCUogh7OHi3rEGaMGKiKPt/epTUP01niHAQVtxp3fvrq8eJ7JIs1
TUIIz5c6PXG9cHzjC+Ojuk6bFOPgRfVyNIzHVjPRR/WAz/hfiwvyJndImXof0juZ
APTAJTOG3wd/JyRVURzsQNw+tJR8vWN/rxMjb8CskfPohpX72eZ4sKfD0gzPwSa5
jFG6na6iFpVFhCHdnsVvSxdKBRZb7bFDQFtECim44Q8gtaqsIC1xlxXkIdv0MCFn
frg2PeLp9TbPesv4lH2L5kGj+Vxcxi3LZR+4zzHzxt1zVOaC7F/X2+R5UTlO6cVE
L0+GJ7eaNmPQl5La3+nU6m4=
-----END CERTIFICATE-----