Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/17/6933B50843CCE9D912AD654001C699DB152EA139.cer
File:                     6933B50843CCE9D912AD654001C699DB152EA139.cer (raw, json)
Hash identifier:          WD9MzcjRvjelBuZhGb3QFT4jYfIkELAcLsXkfeBbud8=
Subject key identifier:   69:33:B5:08:43:CC:E9:D9:12:AD:65:40:01:C6:99:DB:15:2E:A1:39
Authority key identifier: A7:41:33:75:24:3C:D3:C1:29:A3:81:B8:A7:A8:03:22:97:6E:05:A7
Certificate issuer:       /CN=a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda
Certificate serial:       04BB187EFAC6E7C8133B7C7D7512F21DDD4D9731
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda.cer
Manifest:                 rsync://rpki.co/repo/August/12/6933B50843CCE9D912AD654001C699DB152EA139.mft
caRepository:             rsync://rpki.co/repo/August/12
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    IP: 23.149.248.0/24
                          IP: 149.112.53.0/24
                          IP: 2602:fa90::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:18:7e:fa:c6:e7:c8:13:3b:7c:7d:75:12:f2:1d:dd:4d:97:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=6933B50843CCE9D912AD654001C699DB152EA139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:fd:6f:d6:be:3f:ba:94:71:ec:52:03:91:
                    02:b3:99:f3:78:85:11:b2:da:11:49:15:a4:4d:05:
                    76:eb:94:85:df:13:56:fd:62:81:65:3b:b6:d3:ac:
                    e2:f3:6d:2f:57:d2:ce:40:e6:ee:29:09:fa:62:56:
                    98:50:9c:c8:72:6b:38:0b:c3:00:1a:fe:8e:86:f0:
                    57:1f:3b:9d:ee:00:8b:31:c8:99:3a:f8:b6:cc:cd:
                    ca:7f:7c:cc:16:db:4c:9c:73:74:bd:b8:32:36:76:
                    8d:f1:72:b0:7b:cc:94:fa:2b:78:ee:0f:e0:93:cc:
                    03:f2:43:a9:a4:4c:cc:98:ad:ed:54:8d:d8:74:41:
                    7f:5b:5f:ea:53:3f:1e:cf:ec:58:78:03:ea:3a:39:
                    75:bb:ec:4b:9f:c9:c7:b7:b7:3e:ed:66:4f:69:11:
                    72:bf:55:be:a6:b1:89:bd:68:7d:ef:95:82:59:dc:
                    13:45:c4:84:93:e4:08:34:48:85:da:10:38:d5:2c:
                    c4:e7:5b:34:88:54:5e:5d:62:9d:b8:e1:9b:96:9a:
                    b4:98:1f:a7:27:89:99:f9:0e:5c:69:aa:79:50:3d:
                    30:88:ef:52:5e:59:ee:9f:4f:d3:0e:5d:26:ed:b7:
                    9d:71:d6:ef:4a:d3:7f:1b:66:11:3f:06:26:23:7f:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:33:B5:08:43:CC:E9:D9:12:AD:65:40:01:C6:99:DB:15:2E:A1:39
            X509v3 Authority Key Identifier:
                keyid:A7:41:33:75:24:3C:D3:C1:29:A3:81:B8:A7:A8:03:22:97:6E:05:A7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/17/A7413375243CD3C129A381B8A7A80322976E05A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566abcbf4de15347b50da696f06cd90b6b6d82549fda.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/12
                RPKI Manifest - URI:rsync://rpki.co/repo/August/12/6933B50843CCE9D912AD654001C699DB152EA139.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24
                  149.112.53.0/24
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:31:1b:24:38:fa:29:ea:70:e2:fd:68:47:ba:e5:5e:2e:
         c5:b1:28:f0:10:b9:2d:d7:b7:48:c5:d4:e1:80:bf:71:14:33:
         19:66:ca:c8:5d:26:1d:e4:a4:d7:53:d6:2b:f0:24:7c:7d:c4:
         d3:28:b8:d4:3b:73:26:f1:b7:a1:95:33:f8:66:07:f2:d7:eb:
         25:cb:01:2b:1c:46:97:9d:04:d6:68:86:e5:f5:58:7d:9f:51:
         39:04:f2:01:c4:ca:ab:72:d2:20:38:7d:77:fb:a6:ad:d2:b3:
         8d:2a:62:28:ba:3c:99:c1:af:42:41:c7:19:f5:13:2d:33:1c:
         25:db:85:84:0f:53:8b:3f:97:f7:92:f7:bc:96:0d:db:a2:d5:
         0e:48:53:b2:80:4a:93:88:a7:29:3b:fc:df:6c:4f:fc:37:2e:
         b6:8c:d9:8d:be:79:2b:18:3f:40:64:d6:c8:50:53:f3:32:e8:
         97:b3:4f:36:3f:01:21:3f:1d:6e:8c:fa:a4:cb:69:40:73:16:
         42:d0:4b:ba:c7:35:1f:8d:b4:db:6c:3c:e6:b0:f3:70:77:da:
         7d:ca:b5:bc:9e:07:82:46:85:03:4b:32:03:68:6a:45:22:fd:
         ed:12:f4:ae:95:1c:9d:94:7d:80:80:1e:f9:4c:7b:58:7f:9b:
         27:9f:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:15 2023 by rpki-client on console.sobornost.net