Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/6/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer
File:                     5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer (raw, json)
Hash identifier:          D3B75ilAZ9I+dbuzNJ5DOkBpF7MM4sZx7ef6wBeGmHo=
Subject key identifier:   5A:4A:16:78:B2:ED:2E:7C:17:3C:4E:E8:FF:16:B3:D9:A7:09:44:5E
Authority key identifier: 59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7
Certificate issuer:       /CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
Certificate serial:       246A764DD4E76F3467F9AE831A496A6F19436607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer
Manifest:                 rsync://rpki.kitten.network/repo/MythicalKitten/3/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.mft
caRepository:             rsync://rpki.kitten.network/repo/MythicalKitten/3
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:28:48 +0000
Certificate not after:    Sat 06 Apr 2024 11:33:48 +0000
Subordinate resources:    IP: 2a12:dd47:5300::/40
                          IP: 2a12:dd47:8079::/48
                          IP: 2a12:dd47:80a0::/44
                          IP: 2a12:dd47:81f0::/44
                          IP: 2a12:dd47:8280::/44
                          IP: 2a12:dd47:8e00::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:76:4d:d4:e7:6f:34:67:f9:ae:83:1a:49:6a:6f:19:43:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
        Validity
            Not Before: Apr  8 11:28:48 2023 GMT
            Not After : Apr  6 11:33:48 2024 GMT
        Subject: CN=5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:14:0e:00:8f:a3:27:8e:fa:85:55:e9:98:
                    b2:69:99:a6:ad:f0:4a:9c:33:f5:0d:8b:e6:b7:af:
                    6a:1d:d4:91:df:01:b0:87:1a:24:b0:84:dd:94:df:
                    f0:d3:a0:a4:7b:9a:b1:e2:0d:50:fa:3c:d8:b1:80:
                    85:b1:61:c0:f9:e7:a5:0b:72:ef:1a:15:2a:6d:e1:
                    f8:67:e3:27:ee:18:0c:d2:4f:73:4d:5a:fe:b4:d0:
                    04:78:14:25:42:a5:61:88:bb:c3:f6:a5:a1:0f:90:
                    7e:20:34:14:56:f6:75:5a:d6:cf:6c:ee:f4:72:5f:
                    93:dd:d1:7d:06:8d:de:fa:75:8b:8a:9a:38:3e:86:
                    fa:a2:d1:8b:fc:c8:bb:0d:90:eb:2e:91:36:6d:26:
                    5a:2f:c7:32:82:fe:16:9f:f0:32:c9:4c:a0:9f:d6:
                    d2:38:9f:19:45:cc:1a:b7:ba:22:c0:1f:d8:6e:50:
                    4a:4b:82:df:c6:6e:14:86:c5:ce:0b:54:6f:fb:b5:
                    cb:47:1a:0d:e5:7a:31:06:d9:34:42:5b:4a:d4:a4:
                    6c:77:1e:b4:07:e5:a8:07:b4:8e:bb:b5:fc:86:62:
                    43:65:3c:17:58:56:fc:47:93:df:cd:dd:17:af:3e:
                    66:ce:2b:07:02:5d:67:a8:67:d4:95:e8:17:da:1f:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:4A:16:78:B2:ED:2E:7C:17:3C:4E:E8:FF:16:B3:D9:A7:09:44:5E
            X509v3 Authority Key Identifier:
                keyid:59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/597EB599C1F994417EB5CDEBA00DF77B595EF6B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/3
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/3/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40
                  2a12:dd47:8079::/48
                  2a12:dd47:80a0::/44
                  2a12:dd47:81f0::/44
                  2a12:dd47:8280::/44
                  2a12:dd47:8e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:a1:df:27:ac:01:7e:7f:c8:b7:1a:d7:30:59:e5:b7:74:
         aa:d0:8d:2a:95:5c:fe:49:cf:2f:38:55:1e:5a:47:4d:6a:2b:
         9e:e7:fb:18:f7:a6:84:ab:a2:f0:1b:11:e5:ce:57:c2:59:15:
         dc:01:d7:c7:4b:33:e9:5d:04:96:b1:3c:2b:84:56:a3:ea:dc:
         c1:b5:96:e6:22:71:83:85:ee:ec:e5:04:ac:2c:71:7d:ac:a6:
         7c:df:19:4b:8b:50:d9:37:e6:15:ce:ca:0d:89:87:b2:bc:59:
         1c:7b:dc:a9:25:0c:f0:20:d7:89:58:b3:62:1d:41:c3:e1:ce:
         88:8f:71:3f:ad:be:1a:99:b5:b7:4e:a0:e0:61:3d:73:18:48:
         cf:df:41:ab:85:52:48:57:55:82:c8:55:e7:20:3c:99:12:8e:
         52:67:eb:9d:79:52:94:31:0e:c5:c8:1c:b1:44:be:fe:29:b3:
         b3:eb:fb:df:b7:66:2e:ae:61:c3:52:46:64:38:06:13:b7:7f:
         f5:de:11:ae:1f:5d:a1:f8:7c:1b:8f:7f:87:1c:d3:d2:38:18:
         2d:51:4f:26:18:96:b0:6b:9c:57:92:5b:4f:bc:3a:c8:22:60:
         24:ca:af:9d:bc:49:38:71:26:24:79:bd:56:0a:5c:80:26:6e:
         3f:1b:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----