Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/14/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.cer
File:                     B2E23857943C24C5F8423ACCDC7BE84E01E328DB.cer (raw, json)
Hash identifier:          0SHDwQCyfBCafVzrCP79JrXOA7r86m10MTIg9MbV9N4=
Subject key identifier:   B2:E2:38:57:94:3C:24:C5:F8:42:3A:CC:DC:7B:E8:4E:01:E3:28:DB
Authority key identifier: 3E:86:7D:89:D6:C0:9D:08:41:36:48:53:32:8D:D8:03:0D:FB:B0:FD
Certificate issuer:       /CN=3e867d89d6c09d0841364853328dd8030dfbb0fd
Certificate serial:       4355B97A0773F36EB117CB83E8314911E1BF5C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PoZ9idbAnQhBNkhTMo3YAw37sP0.cer
Manifest:                 rsync://rpki.co/repo/August/9/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.mft
caRepository:             rsync://rpki.co/repo/August/9
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:55:b9:7a:07:73:f3:6e:b1:17:cb:83:e8:31:49:11:e1:bf:5c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e867d89d6c09d0841364853328dd8030dfbb0fd
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=B2E23857943C24C5F8423ACCDC7BE84E01E328DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:6f:88:a1:73:e2:0b:d9:bb:e4:68:e6:f3:
                    28:29:68:75:ea:b7:3e:b5:f3:70:1f:39:ad:0d:5d:
                    7f:17:d4:b4:23:f2:c0:b7:52:db:7c:53:07:37:a2:
                    29:1d:54:60:ee:1b:38:bc:46:af:e4:e7:df:05:9f:
                    1d:89:7f:eb:de:b9:06:7c:a2:42:45:de:91:e0:a3:
                    3a:b4:a5:9e:1b:60:f9:d5:43:22:a3:d1:f9:36:11:
                    e3:39:bb:fc:63:94:a6:fc:27:47:55:63:8d:bf:85:
                    7a:98:08:58:e1:c8:3b:69:e5:d2:5a:95:e9:76:c4:
                    1d:51:d9:b4:56:3d:6d:f2:d8:2b:b6:49:23:77:c0:
                    a5:37:00:41:74:ea:58:55:70:4a:9a:1d:70:e1:96:
                    17:65:8c:9b:a4:87:5c:89:d3:58:07:66:b5:fe:58:
                    14:78:d7:ad:dc:e0:8f:1f:f3:8b:1f:5a:bb:7f:2c:
                    a2:06:a0:b4:89:22:3d:67:a6:5b:e3:38:24:21:29:
                    03:15:ce:08:57:08:b2:d1:e3:f6:51:91:47:22:88:
                    0d:8b:46:b6:95:b3:5e:ca:97:7e:d1:89:a2:f6:89:
                    2d:34:cd:ea:be:90:b0:4b:16:61:e6:3a:08:49:d0:
                    28:d9:2c:d3:7e:22:08:23:f2:7b:ee:dd:51:d4:e5:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:E2:38:57:94:3C:24:C5:F8:42:3A:CC:DC:7B:E8:4E:01:E3:28:DB
            X509v3 Authority Key Identifier:
                keyid:3E:86:7D:89:D6:C0:9D:08:41:36:48:53:32:8D:D8:03:0D:FB:B0:FD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/3E867D89D6C09D0841364853328DD8030DFBB0FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoZ9idbAnQhBNkhTMo3YAw37sP0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/9
                RPKI Manifest - URI:rsync://rpki.co/repo/August/9/B2E23857943C24C5F8423ACCDC7BE84E01E328DB.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:d0:bd:1a:63:db:f4:bc:23:3f:65:74:2e:7c:1b:bf:85:
         93:e1:de:5b:43:b6:69:d1:8f:28:ba:ee:67:e8:47:91:c4:77:
         a7:ea:b3:08:62:fd:8d:f9:4f:9c:00:cb:58:32:12:a9:cd:fe:
         29:99:6b:1b:96:08:56:c0:69:71:c9:0d:43:7d:a1:b0:ea:84:
         13:26:bf:1b:10:99:11:db:51:db:ee:39:cd:d5:48:3d:36:dc:
         05:2f:46:41:68:a1:98:45:3d:18:93:10:05:6d:64:81:af:d5:
         11:a5:bd:51:3d:fd:08:e3:e2:66:a1:9a:53:b9:51:06:b8:63:
         53:8a:c7:66:54:83:0d:2c:f4:85:c9:f7:ee:54:2c:1c:47:96:
         ea:69:c2:13:8b:fc:75:4e:d1:a7:48:fe:58:f4:55:16:37:ec:
         39:69:e1:86:35:ae:11:90:f3:e0:93:20:60:20:da:ba:42:13:
         99:ff:44:b9:36:93:78:68:f8:57:7c:48:76:c8:63:75:14:d1:
         7b:38:03:af:bd:57:fa:14:25:84:9e:4c:31:fb:26:af:ae:a1:
         e7:d9:8c:1e:21:35:a8:51:0d:04:b2:0b:e4:95:78:f3:29:fc:
         3f:69:e3:53:7c:5f:b2:c4:de:a6:1c:f6:26:d2:d5:78:bb:3a:
         80:9e:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:15 2023 by rpki-client on console.sobornost.net