Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/8/EA3A4BE96F82A8C6340EE7D4AE717F70990B54C8.cer
File:                     EA3A4BE96F82A8C6340EE7D4AE717F70990B54C8.cer (raw, json)
Hash identifier:          L6Ymh+rsA/VU/JG4/OkxHz6fNW/FrsQvnynAUIpngYk=
Subject key identifier:   EA:3A:4B:E9:6F:82:A8:C6:34:0E:E7:D4:AE:71:7F:70:99:0B:54:C8
Authority key identifier: 06:2B:36:CF:23:50:AE:D7:57:6E:DC:0D:44:02:34:0A:25:97:B6:BC
Certificate issuer:       /CN=062b36cf2350aed7576edc0d4402340a2597b6bc
Certificate serial:       0CB3F261069914A47545FFD4BF80B8BBD6E91033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bis2zyNQrtdXbtwNRAI0CiWXtrw.cer
Manifest:                 rsync://rpki.co/repo/August/3/EA3A4BE96F82A8C6340EE7D4AE717F70990B54C8.mft
caRepository:             rsync://rpki.co/repo/August/3
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:04:10 +0000
Certificate not after:    Sat 06 Apr 2024 09:09:10 +0000
Subordinate resources:    AS: 57481

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b3:f2:61:06:99:14:a4:75:45:ff:d4:bf:80:b8:bb:d6:e9:10:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062b36cf2350aed7576edc0d4402340a2597b6bc
        Validity
            Not Before: Apr  8 09:04:10 2023 GMT
            Not After : Apr  6 09:09:10 2024 GMT
        Subject: CN=EA3A4BE96F82A8C6340EE7D4AE717F70990B54C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:9d:69:cd:a1:3a:d3:a0:35:0a:d9:f0:b2:
                    0a:86:d4:94:62:d7:33:74:58:cc:dc:4f:f0:96:a9:
                    61:c0:ab:cc:fd:38:09:aa:31:94:5c:fb:bb:93:a9:
                    71:ef:a2:0c:0d:6d:18:19:dc:1c:85:91:23:2c:d3:
                    97:e8:03:02:39:a4:2e:ec:f6:94:b2:ff:46:3f:9b:
                    91:13:1f:f6:c0:64:18:35:5a:01:09:ba:41:fd:00:
                    4a:ae:bc:1d:3f:14:75:20:56:ad:6a:08:ef:a9:a8:
                    72:d2:0b:65:73:14:eb:1d:33:e3:bc:3c:ff:a2:70:
                    db:7f:4a:6d:69:94:62:35:ea:c8:40:03:2e:88:9e:
                    be:a2:ab:13:39:f5:65:d7:ff:df:23:3f:39:70:8d:
                    c6:ea:82:ad:db:33:1e:d8:ef:6c:d2:ad:55:d2:e8:
                    99:b8:06:2d:6f:5a:94:84:fc:fa:a7:3d:d4:03:50:
                    67:df:94:13:2a:a6:c9:51:dc:d5:fe:dc:c6:60:b0:
                    11:a1:cf:85:a8:db:b6:b7:cc:89:cc:1b:4a:0a:77:
                    f0:02:9a:dc:7c:af:a1:44:af:c8:32:e6:3f:df:ca:
                    17:eb:c6:02:aa:a6:6a:c9:e6:13:df:a4:96:01:9b:
                    7c:22:65:5e:cc:f0:ec:7d:be:72:6f:3f:42:7a:53:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:3A:4B:E9:6F:82:A8:C6:34:0E:E7:D4:AE:71:7F:70:99:0B:54:C8
            X509v3 Authority Key Identifier:
                keyid:06:2B:36:CF:23:50:AE:D7:57:6E:DC:0D:44:02:34:0A:25:97:B6:BC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/8/062B36CF2350AED7576EDC0D4402340A2597B6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bis2zyNQrtdXbtwNRAI0CiWXtrw.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/3
                RPKI Manifest - URI:rsync://rpki.co/repo/August/3/EA3A4BE96F82A8C6340EE7D4AE717F70990B54C8.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57481

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:64:7e:a5:08:c5:e6:d8:e3:90:0d:10:8e:36:59:b9:16:
         94:5a:21:cf:52:67:e7:54:f1:05:bc:65:95:18:58:de:c2:a1:
         59:5b:c5:c5:f7:9c:d3:ff:00:9d:bc:2b:6d:07:88:59:24:91:
         c1:67:a6:01:09:5d:49:d8:75:3c:11:06:31:c0:67:b2:44:af:
         d1:c9:66:95:e9:32:8c:61:18:f3:9d:71:bc:30:85:91:2d:3c:
         dc:35:cd:24:c4:28:31:77:1b:c7:81:cd:29:15:c4:58:ee:8b:
         7b:46:d4:5f:bd:58:a6:45:cd:f4:22:f8:cd:34:c5:5f:c6:81:
         51:63:36:81:ee:c2:d0:b8:e8:c8:9c:4d:04:82:b5:e7:27:ea:
         c9:11:aa:3c:54:63:7c:f7:9a:77:93:1a:d6:74:2e:1e:43:e9:
         b5:89:95:48:04:09:34:9a:cf:37:ea:3e:aa:b2:38:55:0e:e7:
         33:e5:dc:56:5f:9e:30:fc:09:3e:58:92:b2:f2:91:ef:d9:f0:
         cc:53:21:21:27:34:91:48:d1:ea:b3:a9:e6:3d:7d:ae:33:90:
         0b:c2:d6:5b:a5:47:69:7f:a9:79:f3:bb:0e:db:e7:56:b3:f7:
         d5:22:2d:94:07:12:82:63:ed:0b:1b:e8:87:b0:c6:c6:b4:c4:
         07:14:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----