Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/7/2DA9D1794ECCA35E488B5CCD77393287746E163C.cer
File:                     2DA9D1794ECCA35E488B5CCD77393287746E163C.cer (raw, json)
Hash identifier:          m3O7iau1e6HDWt2UvSgVl8rTQQgl0ip2pyjGO1wyDLw=
Subject key identifier:   2D:A9:D1:79:4E:CC:A3:5E:48:8B:5C:CD:77:39:32:87:74:6E:16:3C
Authority key identifier: BA:B6:C9:B9:0C:B9:51:CF:E1:B8:2F:79:C0:E1:DD:5C:CD:C7:39:3E
Certificate issuer:       /CN=bab6c9b90cb951cfe1b82f79c0e1dd5ccdc7393e
Certificate serial:       2DE3871049B172740F137F57E70C0BA20D33DDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urbJuQy5Uc_huC95wOHdXM3HOT4.cer
Manifest:                 rsync://rpki.co/repo/August/6/2DA9D1794ECCA35E488B5CCD77393287746E163C.mft
caRepository:             rsync://rpki.co/repo/August/6
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:09 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:09 +0000
Subordinate resources:    AS: 51930

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e3:87:10:49:b1:72:74:0f:13:7f:57:e7:0c:0b:a2:0d:33:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab6c9b90cb951cfe1b82f79c0e1dd5ccdc7393e
        Validity
            Not Before: Apr  8 09:04:09 2023 GMT
            Not After : Apr  6 09:09:09 2024 GMT
        Subject: CN=2DA9D1794ECCA35E488B5CCD77393287746E163C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:1f:2e:90:dc:c9:b3:62:dd:b5:aa:72:12:
                    6e:e3:fc:e4:17:4a:40:d3:69:03:49:db:ed:fc:8c:
                    77:93:1c:03:3b:c2:45:67:27:d0:b0:07:c9:96:91:
                    a8:1d:8c:87:44:cb:f4:c6:b4:e7:45:cf:07:cc:53:
                    63:a4:4f:c4:ad:07:6f:2e:bc:06:1d:a0:e3:2e:02:
                    db:18:55:7d:6e:0e:7e:aa:4e:bf:ce:b0:c5:0c:af:
                    26:fb:c3:42:87:04:49:75:bf:69:20:2c:61:f8:fa:
                    95:52:01:a4:22:9b:58:f8:e2:b5:3a:a2:d1:c3:7f:
                    b6:dc:a1:ba:da:57:63:2c:b4:63:04:29:eb:cd:c3:
                    e8:21:66:18:b5:ed:16:71:62:28:8a:b0:37:6d:f1:
                    8b:42:18:f1:cf:b4:6b:62:5d:d4:e6:ec:22:f7:17:
                    cc:bb:3f:13:08:5f:2c:ab:9a:0e:3c:61:bd:94:38:
                    84:93:8f:77:8c:26:86:2b:56:cc:3b:c0:e4:56:de:
                    fc:3d:36:7f:1d:0b:33:20:06:2b:df:67:e8:9f:15:
                    bd:0e:3b:92:1c:c1:2d:fe:3a:c1:d5:2a:ff:b1:67:
                    3d:d5:e5:c5:ef:3d:ff:4e:3a:12:07:c9:2c:c7:8c:
                    15:78:e4:d2:37:5b:2b:4b:8f:cb:5b:8c:b5:d6:20:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:A9:D1:79:4E:CC:A3:5E:48:8B:5C:CD:77:39:32:87:74:6E:16:3C
            X509v3 Authority Key Identifier:
                keyid:BA:B6:C9:B9:0C:B9:51:CF:E1:B8:2F:79:C0:E1:DD:5C:CD:C7:39:3E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/7/BAB6C9B90CB951CFE1B82F79C0E1DD5CCDC7393E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urbJuQy5Uc_huC95wOHdXM3HOT4.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/6
                RPKI Manifest - URI:rsync://rpki.co/repo/August/6/2DA9D1794ECCA35E488B5CCD77393287746E163C.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         00:71:06:b4:11:32:e9:1e:45:5b:f1:52:83:f0:57:72:ec:ae:
         04:f8:c5:2b:14:5d:f6:26:6f:3d:52:98:c0:49:a5:10:39:6f:
         82:6c:67:72:59:b4:a4:14:fc:f5:f4:aa:d5:7f:57:c8:60:3f:
         c5:a8:c2:2f:83:5d:c5:c3:d0:8d:bd:d4:84:8e:f7:5f:52:68:
         3a:b1:6d:4a:61:e9:2c:8e:f7:11:69:ef:9c:92:e2:b8:56:de:
         2d:a2:d4:21:10:ee:39:22:99:5d:75:db:d7:27:08:a3:fd:e4:
         1d:ae:ca:2c:00:10:0c:08:08:9f:75:59:43:5c:e5:96:c3:48:
         dc:35:a2:19:94:8d:03:d3:05:08:4f:5c:e7:d9:f6:5c:8d:75:
         fc:94:c9:27:cd:f2:c2:ef:23:12:c9:d4:f6:65:73:3a:d5:1a:
         7d:0d:59:94:93:e4:54:82:99:c5:97:b7:3e:60:7b:77:f3:8d:
         61:a8:de:21:ee:ef:9c:88:11:3a:02:12:de:81:ec:6e:6f:23:
         e8:c2:cc:c6:3e:4a:0f:98:71:41:0d:f1:b5:35:14:5b:9b:07:
         81:59:fd:f4:ef:3b:dd:2d:57:c7:30:bd:39:94:86:55:86:99:
         84:02:0f:ee:27:af:04:79:23:66:fa:be:7e:07:b1:58:98:f0:
         3a:c3:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----