Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
File:                     4B996F64C4B1DCD27FD243860C839004F56C2B11.cer (raw, json)
Hash identifier:          eYbBHKNkfKAKXYELC+qjSYMXsTDfnPQzDinIaepec58=
Subject key identifier:   4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority key identifier: B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0
Certificate issuer:       /CN=b89704c2001cd96972786224d0db20e501e08ab0
Certificate serial:       3D9E9CAED3649F1CFE74E21FEF4A50F1A8543C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer
Manifest:                 rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.mft
caRepository:             rsync://rpki.co/repo/August/2
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    AS: 47449
                          AS: 50058
                          AS: 202736
                          IP: 2001:67c:a80::/48
                          IP: 2001:67c:a84::/48
                          IP: 2001:67c:a88::/48
                          IP: 2001:67c:a8c::/48
                          IP: 2001:67c:a90::/48
                          IP: 2001:67c:a94::/48
                          IP: 2001:67c:a98::/48
                          IP: 2001:67c:a9c::/48
                          IP: 2001:67c:aa0::/48
                          IP: 2a12:dd40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9e:9c:ae:d3:64:9f:1c:fe:74:e2:1f:ef:4a:50:f1:a8:54:3c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89704c2001cd96972786224d0db20e501e08ab0
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:16:df:9b:ff:9b:0d:de:55:f6:12:40:74:
                    5e:ce:8d:be:f7:5b:6f:dc:2a:af:1a:f5:f3:52:83:
                    6a:4f:ac:7a:ca:0b:a9:1b:ab:1d:1d:14:04:d8:90:
                    44:07:5e:be:f7:9c:74:55:df:d7:7f:25:80:19:fd:
                    da:13:63:0f:19:e2:a2:95:8a:3c:a4:12:cc:22:75:
                    9a:e0:ce:60:7d:72:9e:ac:46:db:4d:a0:f4:41:4d:
                    ea:72:51:25:f1:de:ac:1c:71:f6:1a:78:1c:c6:df:
                    f0:fa:ec:da:ef:d1:d7:c7:c1:77:6a:ec:88:37:f7:
                    fd:6a:5d:b9:ea:db:5a:e1:93:8a:b9:6b:29:4b:96:
                    7a:dc:a2:2c:87:97:d5:59:21:ef:b9:f3:a3:96:f8:
                    61:5a:d2:67:d7:c7:b3:52:20:91:e4:af:83:8e:65:
                    3d:e4:d5:ea:2a:a4:ff:a4:7a:e4:3f:99:e2:5e:36:
                    25:cf:80:51:35:67:ae:d6:05:20:63:0c:f2:b2:fe:
                    14:97:10:93:cb:6a:76:8a:e8:d2:f7:e2:ff:9b:96:
                    a8:db:68:22:d6:36:43:b0:be:61:bb:eb:b3:fc:b7:
                    af:2a:95:3d:ef:50:30:88:27:91:2d:b8:9f:73:66:
                    a1:37:3c:59:a5:5e:67:f6:3b:12:2c:61:d0:10:7d:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
            X509v3 Authority Key Identifier:
                keyid:B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/2
                RPKI Manifest - URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47449
                  50058
                  202736

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:30:84:fa:09:8a:ca:43:8c:80:74:a1:1c:13:3e:80:e8:
         4e:c7:72:f5:ae:10:e3:fb:01:ad:4d:d3:ab:d3:50:8a:c4:8c:
         85:53:82:d1:63:72:56:23:9a:71:e3:09:83:90:80:6f:d6:66:
         3f:9f:9d:05:f3:1d:44:ed:1a:5f:e9:e3:f2:e3:65:d9:5d:07:
         f0:09:f1:89:03:27:f9:5d:63:89:21:30:d4:91:de:62:c0:43:
         14:52:90:51:d8:1c:43:e1:9b:81:70:df:d6:ff:6c:90:8a:77:
         80:d1:e7:c5:4d:34:70:83:9e:e3:29:f3:55:38:b8:bc:4f:35:
         41:73:8f:70:34:41:d4:2b:7b:b5:00:ea:e0:14:15:4a:57:fb:
         64:07:c6:e0:de:30:79:19:27:c2:02:24:75:07:7c:4f:cb:d5:
         1e:8b:19:50:eb:2a:4e:d9:38:d6:db:b9:ef:74:ad:52:66:af:
         c0:1d:8e:d3:15:0f:20:27:36:96:69:53:2d:be:fc:5b:1e:49:
         48:b1:fe:1a:95:79:92:b4:a2:90:6e:01:3c:0a:28:71:8d:3f:
         14:f4:d7:c3:1c:98:08:fd:d0:a3:8b:8b:fe:88:69:56:0d:2c:
         29:a9:a0:d4:1b:bb:ae:81:3b:83:87:f2:34:f0:88:1a:c1:19:
         c5:ea:a9:b6
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIUPZ6crtNknxz+dOIf70pQ8ahUPJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjg5NzA0YzIwMDFjZDk2OTcyNzg2MjI0ZDBkYjIwZTUw
MWUwOGFiMDAeFw0yMzA0MDgwOTA0MDlaFw0yNDA0MDYwOTA5MDlaMDMxMTAvBgNV
BAMTKDRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUxbfm/+bDd5V9hJAdF7Ojb73
W2/cKq8a9fNSg2pPrHrKC6kbqx0dFATYkEQHXr73nHRV39d/JYAZ/doTYw8Z4qKV
ijykEswidZrgzmB9cp6sRttNoPRBTepyUSXx3qwccfYaeBzG3/D67Nrv0dfHwXdq
7Ig39/1qXbnq21rhk4q5aylLlnrcoiyHl9VZIe+586OW+GFa0mfXx7NSIJHkr4OO
ZT3k1eoqpP+keuQ/meJeNiXPgFE1Z67WBSBjDPKy/hSXEJPLanaK6NL34v+blqjb
aCLWNkOwvmG767P8t68qlT3vUDCIJ5EtuJ9zZqE3PFmlXmf2OxIsYdAQfZR/AgMB
AAGjggKiMIICnjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLmW9kxLHc0n/S
Q4YMg5AE9WwrETAfBgNVHSMEGDAWgBS4lwTCABzZaXJ4YiTQ2yDlAeCKsDAOBgNV
HQ8BAf8EBAMCAQYwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vSFlTUC82L0I4OTcwNEMyMDAxQ0Q5Njk3Mjc4NjIyNEQwREIyMEU1MDFFMDhB
QjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtp
LnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC91SmNFd2dBYzJXbHllR0lrME5z
ZzVRSGdpckEuY2VyMIHGBggrBgEFBQcBCwSBuTCBtjApBggrBgEFBQcwBYYdcnN5
bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0LzIwVgYIKwYBBQUHMAqGSnJzeW5jOi8v
cnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBD
ODM5MDA0RjU2QzJCMTEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY28v
cnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
cQYIKwYBBQUHAQcBAf8EYjBgMF4EAgACMFgDBwAgAQZ8CoADBwAgAQZ8CoQDBwAg
AQZ8CogDBwAgAQZ8CowDBwAgAQZ8CpADBwAgAQZ8CpQDBwAgAQZ8CpgDBwAgAQZ8
CpwDBwAgAQZ8CqADBQMqEt1AMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwC5WQID
AMOKAgMDF/AwDQYJKoZIhvcNAQELBQADggEBADCeMIT6CYrKQ4yAdKEcEz6A6E7H
cvWuEOP7Aa1N06vTUIrEjIVTgtFjclYjmnHjCYOQgG/WZj+fnQXzHUTtGl/p4/Lj
ZdldB/AJ8YkDJ/ldY4khMNSR3mLAQxRSkFHYHEPhm4Fw39b/bJCKd4DR58VNNHCD
nuMp81U4uLxPNUFzj3A0QdQre7UA6uAUFUpX+2QHxuDeMHkZJ8ICJHUHfE/L1R6L
GVDrKk7ZONbbue90rVJmr8AdjtMVDyAnNpZpUy2+/FseSUix/hqVeZK0opBuATwK
KHGNPxT018McmAj90KOLi/6IaVYNLCmpoNQbu66BO4OH8jTwiBrBGcXqqbY=
-----END CERTIFICATE-----