Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/6/6D198923E0B9960D744113B139EDF2E1DF3F3200.cer
File:                     6D198923E0B9960D744113B139EDF2E1DF3F3200.cer (raw, json)
Hash identifier:          h43ig9NLPGlRaB+UC+GFxG0zNMp3gRYpr12tfS/WqyM=
Subject key identifier:   6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00
Authority key identifier: 59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7
Certificate issuer:       /CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
Certificate serial:       161F90248952C81E7BD4CAF09FA092CAEECD2560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/6D198923E0B9960D744113B139EDF2E1DF3F3200.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 09 Apr 2023 07:38:12 +0000
Certificate not after:    Sun 07 Apr 2024 07:43:12 +0000
Subordinate resources:    IP: 2a12:dd47:8047::/48
                          IP: 2a12:dd47:80e4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1f:90:24:89:52:c8:1e:7b:d4:ca:f0:9f:a0:92:ca:ee:cd:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597eb599c1f994417eb5cdeba00df77b595ef6b7
        Validity
            Not Before: Apr  9 07:38:12 2023 GMT
            Not After : Apr  7 07:43:12 2024 GMT
        Subject: CN=6D198923E0B9960D744113B139EDF2E1DF3F3200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:e5:4f:76:63:d6:de:50:9b:db:4a:f8:85:
                    11:5e:1c:4b:92:a3:fe:c8:c6:e2:57:0d:62:0c:1a:
                    8b:62:c2:58:89:38:c0:e6:26:e9:26:fa:51:26:d6:
                    53:91:a3:07:d9:15:cd:34:0a:91:4f:ee:d5:81:27:
                    10:be:d0:ab:d7:da:0f:64:c6:ab:5f:f1:4d:e5:4a:
                    45:fa:71:04:fb:93:6d:67:63:6f:55:b3:22:c7:5f:
                    0d:6c:62:76:33:36:19:7e:55:24:d3:85:fc:65:8b:
                    aa:09:00:b6:a3:f0:38:bf:e9:22:4a:4b:1a:97:84:
                    e0:8b:ff:07:fc:ca:e5:4f:14:6d:bd:49:74:05:60:
                    ee:07:f7:09:89:a2:c5:88:e9:9d:a8:7d:8a:aa:56:
                    cb:97:19:21:7c:1e:ae:b9:40:30:8a:52:31:2e:7e:
                    8c:68:28:74:26:9f:37:f8:67:a9:7f:d1:a3:d0:31:
                    86:29:44:de:8c:92:aa:17:c7:c9:25:50:d1:69:7b:
                    f6:38:01:07:b7:14:33:6d:9e:73:f7:59:d1:2f:6b:
                    02:ed:4b:44:ef:f6:97:0a:bd:85:bb:34:4c:6d:90:
                    c5:59:c2:10:ca:b9:34:15:d9:88:80:49:26:9a:b7:
                    0d:00:d7:b1:24:21:5a:fb:b1:61:55:63:25:43:12:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00
            X509v3 Authority Key Identifier:
                keyid:59:7E:B5:99:C1:F9:94:41:7E:B5:CD:EB:A0:0D:F7:7B:59:5E:F6:B7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/597EB599C1F994417EB5CDEBA00DF77B595EF6B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX61mcH5lEF-tc3roA33e1le9rc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/6D198923E0B9960D744113B139EDF2E1DF3F3200.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48
                  2a12:dd47:80e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:98:b3:79:6d:7c:ef:a4:ae:0a:8c:30:aa:ea:01:08:73:
         ac:62:0e:f4:a0:59:af:f4:37:de:88:d4:cc:57:9d:0d:03:3f:
         64:a7:1b:0b:77:87:ae:54:d2:da:db:3b:5a:d9:f4:e1:5e:8c:
         89:29:0c:5b:a8:dd:19:35:a1:ee:6e:d3:c4:dd:cc:9c:21:87:
         73:f2:4f:f4:68:79:16:b9:92:c1:e7:6b:51:48:e7:43:bc:b3:
         c8:12:bc:23:a1:ce:2e:00:e8:a9:20:e1:fa:f6:8c:10:f3:12:
         05:a2:0b:1d:85:42:8d:8d:25:63:fc:3f:e0:b3:71:51:d1:09:
         e3:7b:63:66:b5:f7:14:86:bc:4b:1a:fc:bb:6a:bc:d2:d3:d1:
         c0:a0:af:67:ce:e8:d8:7c:04:00:c0:a3:c1:db:24:e9:3f:df:
         f3:bd:d5:00:8c:19:fc:9e:d4:ae:7b:ad:7c:85:50:2a:8b:e6:
         b4:63:7b:aa:56:57:a1:7f:68:30:66:0b:62:91:b0:b6:54:1b:
         a1:18:30:35:b0:ab:8a:03:af:18:33:51:6e:e4:fc:97:4a:5b:
         87:5f:c6:5e:10:92:cf:cb:20:50:77:46:74:ca:02:50:27:1e:
         11:c9:92:3d:ea:bf:2d:2e:99:31:eb:4b:ee:e6:4e:19:fe:a9:
         55:a4:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----