Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/15/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.cer
File:                     7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.cer (raw, json)
Hash identifier:          gWxeErE+68D7Bn0MeE7dmSPD4DLP2o/euYDb1tJbDNM=
Subject key identifier:   7F:F0:B2:56:E5:65:F1:52:3D:0B:4F:6F:A4:B6:1B:58:6B:7B:35:DD
Authority key identifier: CA:47:79:5B:AA:8F:F1:C2:19:20:0F:56:79:4E:AC:50:6A:7D:7A:61
Certificate issuer:       /CN=ca47795baa8ff1c219200f56794eac506a7d7a61
Certificate serial:       5EA4B4A5FF18680AFF080ADC9C2B3919452B14AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykd5W6qP8cIZIA9WeU6sUGp9emE.cer
Manifest:                 rsync://rpki.co/repo/August/4/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.mft
caRepository:             rsync://rpki.co/repo/August/4
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:b4:a5:ff:18:68:0a:ff:08:0a:dc:9c:2b:39:19:45:2b:14:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca47795baa8ff1c219200f56794eac506a7d7a61
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:a3:11:78:d7:ef:d9:9f:ca:51:0d:25:c9:
                    f6:b9:5c:ae:7a:9f:1d:be:6c:d8:f9:a5:ad:dc:0c:
                    c0:87:11:69:96:71:87:c6:7d:4a:14:4e:cb:30:62:
                    89:83:7d:e8:13:9b:4c:18:a3:81:03:26:77:8f:15:
                    3e:81:59:c8:0a:c9:96:9a:35:86:c2:dc:a2:8f:5e:
                    4a:52:0a:c5:12:8d:d8:38:ec:c0:b8:a1:0a:38:4d:
                    a5:6a:9a:95:5f:16:92:f6:5e:cd:fe:97:30:55:8f:
                    4d:4e:29:85:32:69:c8:c3:11:4c:01:a4:6e:43:88:
                    89:0b:a6:62:eb:be:b3:7a:38:bb:6b:35:95:5a:4e:
                    54:46:7a:72:e2:3a:81:44:68:ce:3d:4b:3b:88:02:
                    0c:d6:df:d7:b3:e8:03:19:12:f3:3d:3c:c2:34:5c:
                    df:0f:d3:a0:3b:e4:f4:c9:b4:15:5a:28:d1:58:fc:
                    98:2b:c6:9a:da:41:70:77:5c:41:7d:3a:38:27:a9:
                    07:ac:fa:7f:65:9e:8a:9a:bb:1a:1b:b9:84:c7:41:
                    eb:1a:b4:89:5e:5b:75:87:6b:93:f1:d6:b9:da:f5:
                    00:fc:46:37:bf:52:93:eb:92:20:b2:20:ee:4b:e7:
                    36:c3:57:91:5b:38:ba:7f:74:38:f6:ef:ca:36:0b:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:F0:B2:56:E5:65:F1:52:3D:0B:4F:6F:A4:B6:1B:58:6B:7B:35:DD
            X509v3 Authority Key Identifier:
                keyid:CA:47:79:5B:AA:8F:F1:C2:19:20:0F:56:79:4E:AC:50:6A:7D:7A:61

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/15/CA47795BAA8FF1C219200F56794EAC506A7D7A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykd5W6qP8cIZIA9WeU6sUGp9emE.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/4
                RPKI Manifest - URI:rsync://rpki.co/repo/August/4/7FF0B256E565F1523D0B4F6FA4B61B586B7B35DD.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         ba:ed:ee:9c:98:06:f3:5b:8b:af:71:2a:3c:8d:bd:0e:6d:bf:
         a9:f3:36:c1:a4:0b:06:30:02:af:85:2a:7d:6f:8c:cd:c3:fe:
         fd:55:6d:07:e8:2c:e1:74:02:77:fd:3e:38:26:11:53:00:3c:
         5b:04:91:f9:db:12:22:3b:7c:8c:c3:e0:13:9e:ad:a6:af:7d:
         64:df:31:bb:f1:ed:c2:5b:a7:b8:8e:ef:8f:c1:ea:9d:76:65:
         8e:ad:12:75:71:63:46:05:21:c7:13:72:a8:e4:76:eb:ec:fb:
         65:47:ba:43:09:13:ae:cf:ef:5e:42:7b:31:bc:92:2b:cb:2a:
         1b:03:ee:b6:e7:8d:e2:bb:4a:75:58:e0:ff:62:ad:ae:ef:55:
         88:33:d8:cd:b5:6c:b5:17:01:ac:ce:4d:60:e7:37:23:d5:7e:
         97:5a:d6:9a:ab:ea:b3:77:bc:35:29:33:62:f0:ec:77:0d:73:
         19:a2:86:c3:49:d3:d6:df:72:40:c9:01:e4:bc:50:8c:d2:8d:
         ac:0f:03:5f:e0:7d:5f:30:1c:99:e8:6b:87:b2:bf:db:fb:a9:
         10:57:be:52:8c:ad:c9:99:05:15:3c:c3:77:52:47:2a:6b:ef:
         9c:97:3d:76:0d:aa:a5:6e:13:c3:3d:a7:52:32:9a:b7:13:af:
         b8:5c:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----