Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/6/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.cer
File:                     66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.cer (raw, json)
Hash identifier:          BNPEWc51VQp7n4jL0M4mCOL62yTL83VYHW9R5VbKeW0=
Subject key identifier:   66:F5:7E:D7:FE:89:EB:B7:A2:65:9F:73:62:D0:DB:08:56:B0:B3:DA
Authority key identifier: B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0
Certificate issuer:       /CN=b89704c2001cd96972786224d0db20e501e08ab0
Certificate serial:       3CAF0A1A908BF6913E75E6A2F8F123299084F981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    IP: 2a12:dd47:8270::/44
                          IP: 2a12:dd47:82f0::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:0a:1a:90:8b:f6:91:3e:75:e6:a2:f8:f1:23:29:90:84:f9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89704c2001cd96972786224d0db20e501e08ab0
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:5f:1d:80:99:1e:d9:d6:45:9b:5a:b3:26:
                    08:9d:05:6c:5a:41:ad:ed:78:69:28:d9:65:ed:93:
                    39:e1:4c:4e:9a:20:1e:a5:58:f0:d4:d5:17:3f:fd:
                    12:df:cd:8a:17:36:9c:be:4e:37:45:81:90:2a:0d:
                    0d:80:d5:db:42:67:78:6f:8e:0c:42:e0:1f:4c:eb:
                    b0:75:fb:9e:61:1e:b7:10:14:ef:a4:75:13:cc:45:
                    4d:c1:fa:f5:3e:c8:1a:5c:fa:87:25:22:1a:00:5d:
                    41:6e:83:2e:50:b9:89:b9:6f:b3:7b:af:c5:ea:bf:
                    8b:1a:b2:34:c8:d6:29:c4:22:d3:d3:75:e3:cb:77:
                    92:0e:84:f6:1a:f4:df:b1:2c:ec:ad:90:28:39:ae:
                    4a:62:38:eb:49:69:1f:96:4b:a9:49:b7:71:f3:7f:
                    d2:ca:29:b3:33:7d:ea:61:c5:27:55:c3:5c:fb:8e:
                    8e:46:ae:c3:80:df:3c:a4:f5:b1:f8:da:f1:ac:9f:
                    00:2c:28:b2:76:98:ef:a2:e2:4a:a0:29:08:cd:86:
                    78:f7:2d:a3:c5:a6:04:13:bf:06:f6:5a:2b:b9:30:
                    42:f9:ca:fc:b6:3a:e8:26:de:71:59:18:e1:88:0b:
                    03:c8:18:f2:1f:2a:f8:9f:21:a6:4c:57:3f:03:c0:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:F5:7E:D7:FE:89:EB:B7:A2:65:9F:73:62:D0:DB:08:56:B0:B3:DA
            X509v3 Authority Key Identifier:
                keyid:B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8270::/44
                  2a12:dd47:82f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:c4:9e:90:6d:93:a5:bb:1b:5b:5e:57:e4:07:26:48:5c:
         e3:77:35:c8:bf:0b:a4:49:26:21:10:5d:8d:29:ba:ee:6d:c7:
         22:37:bb:7c:29:65:a4:c3:f0:b9:07:dc:aa:f2:71:1b:43:5f:
         20:41:7c:5a:34:c2:7d:2d:54:ab:4b:6b:4d:6e:b4:59:e5:48:
         cc:68:d8:59:3d:e1:46:0f:a7:08:97:8b:9f:42:bc:c3:74:ed:
         ad:fc:17:97:9f:8c:cd:28:b8:40:13:2a:d2:37:70:f0:ab:31:
         24:55:7c:09:cf:2d:a9:d0:c7:b1:91:de:a4:56:f1:b2:fd:cc:
         3a:e5:b3:a0:ae:2d:21:a6:05:32:6f:70:00:0a:dd:37:26:4a:
         f5:31:a1:d8:1c:e3:8f:77:ab:bf:a9:87:c0:51:99:ac:46:7b:
         ba:a2:c5:ad:6f:4c:7e:5f:86:6d:64:00:92:3b:8d:4d:55:12:
         88:56:70:8f:7c:d8:ff:fe:a1:71:58:55:ef:5e:9c:22:7f:8d:
         52:25:b1:69:41:59:a1:d0:2e:98:59:bb:4f:b7:b0:fb:74:3f:
         ec:3c:73:18:e7:6d:fa:b6:3c:32:b5:c3:f7:47:f4:f3:f5:87:
         08:6d:b0:a2:49:f5:43:fd:20:01:54:04:7f:0c:e6:22:62:88:
         b6:29:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----