Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/0/EA2EDC2D895022F4F01ABFAA5847507308092321.cer
File:                     EA2EDC2D895022F4F01ABFAA5847507308092321.cer (raw, json)
Hash identifier:          nCVUz1GwK5lOPdGtCQflYU3OmFnqKfZ6IdRHnKbs0Ao=
Subject key identifier:   EA:2E:DC:2D:89:50:22:F4:F0:1A:BF:AA:58:47:50:73:08:09:23:21
Authority key identifier: 7B:FD:37:C8:63:C6:17:0C:DB:36:EA:33:EC:9D:EA:A9:A0:CF:7B:75
Certificate issuer:       /CN=6506a66ed0109123b5c97b500966b40ffbb12e247aabd3e067
Certificate serial:       5D00CECD8D82705862DF71C3343060244DD00FE2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0109123b5c97b500966b40ffbb12e247aabd3e067.cer
Manifest:                 rsync://rpki.co/repo/August/10/EA2EDC2D895022F4F01ABFAA5847507308092321.mft
caRepository:             rsync://rpki.co/repo/August/10
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    AS: 54625
                          IP: 23.149.232.0/24
                          IP: 149.112.26.0/24
                          IP: 165.140.142.0/24
                          IP: 2602:fc23::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:00:ce:cd:8d:82:70:58:62:df:71:c3:34:30:60:24:4d:d0:0f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0109123b5c97b500966b40ffbb12e247aabd3e067
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=EA2EDC2D895022F4F01ABFAA5847507308092321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:e9:5c:f7:6e:b0:08:b3:87:38:f6:63:ae:
                    d5:15:0b:0f:90:95:57:0f:b3:43:1c:df:43:5a:93:
                    d6:e1:1d:97:af:e0:bb:63:23:44:88:c7:c2:a3:26:
                    92:ab:9b:d6:bd:e6:d2:2d:34:40:b7:18:af:08:da:
                    9c:c9:90:8d:4e:b6:01:b2:04:e8:36:36:2a:4b:46:
                    11:d9:f2:72:88:08:f7:aa:cd:43:8f:70:3e:04:ae:
                    c4:a1:3e:ef:19:15:37:8d:8c:b7:17:dc:b0:84:7b:
                    ca:a1:4c:11:e1:9a:ae:2d:5d:51:7c:25:f0:3d:ba:
                    a8:97:db:22:12:2e:04:dc:ba:30:62:ab:8f:78:c7:
                    56:ca:ed:08:ef:63:99:11:8a:f2:85:18:f8:32:da:
                    f4:7f:50:5a:ac:d3:f0:ab:0a:a4:95:5b:d5:97:99:
                    e4:0f:f4:33:20:fc:c0:fc:17:41:ca:63:6d:a3:08:
                    03:25:db:e9:78:f3:32:e4:0e:20:2f:a0:d0:6f:6e:
                    d6:76:8b:7f:b3:32:2a:30:32:9a:9c:ae:49:19:b8:
                    df:46:88:b3:f9:d5:b0:c1:6d:18:61:41:e0:1f:9e:
                    6f:0a:7f:2a:ea:52:53:76:48:0d:a3:6e:b9:b4:b8:
                    44:d1:6b:84:79:46:39:65:35:86:de:04:2e:23:bf:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:2E:DC:2D:89:50:22:F4:F0:1A:BF:AA:58:47:50:73:08:09:23:21
            X509v3 Authority Key Identifier:
                keyid:7B:FD:37:C8:63:C6:17:0C:DB:36:EA:33:EC:9D:EA:A9:A0:CF:7B:75

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/7BFD37C863C6170CDB36EA33EC9DEAA9A0CF7B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0109123b5c97b500966b40ffbb12e247aabd3e067.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/10
                RPKI Manifest - URI:rsync://rpki.co/repo/August/10/EA2EDC2D895022F4F01ABFAA5847507308092321.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24
                  149.112.26.0/24
                  165.140.142.0/24
                IPv6:
                  2602:fc23::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54625

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:4e:e6:f0:58:b5:a8:e2:5a:8a:1c:aa:d5:77:46:b3:c8:
         3f:e0:30:8d:88:cb:b0:d8:bb:1c:fe:70:da:e1:c0:9a:5d:9b:
         c1:c0:ec:11:71:bf:47:5a:ea:01:5f:08:50:15:27:b6:d0:d2:
         a0:9e:68:be:7b:41:16:71:11:2f:33:a8:d9:7b:0c:ee:7e:8b:
         e5:75:2b:53:25:9a:31:a8:f2:74:70:95:a6:0c:98:e1:f8:de:
         43:dc:4b:76:2f:07:4d:2a:80:f9:1d:67:b6:13:cc:e9:9c:36:
         4d:9d:06:5c:24:8e:b6:20:43:df:cd:c3:c3:c8:52:63:9e:b0:
         34:35:f0:e1:67:29:bf:18:95:eb:ff:83:a9:69:cf:4f:c2:34:
         9d:df:96:84:1c:b8:c3:dd:d8:5a:51:06:12:e9:ed:29:d1:c4:
         16:1b:02:13:6d:b6:24:61:09:d9:97:50:e6:cb:e7:d5:cc:4f:
         a6:ad:53:6a:7d:19:24:00:ff:8c:5e:ee:78:fc:fc:4c:78:94:
         0c:16:dc:85:e5:be:76:ed:be:21:19:63:43:76:4c:08:70:7c:
         68:98:34:66:f1:13:85:9c:6a:35:71:8b:56:b2:b6:6c:5e:9c:
         a8:69:11:89:0a:70:d6:50:42:41:13:43:25:66:59:1e:52:92:
         c8:da:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:15 2023 by rpki-client on console.sobornost.net