Certificate

$ rpki-client -vvf rpki.co/repo/HYSP/7/2DA9D1794ECCA35E488B5CCD77393287746E163C.cer
File:                     2DA9D1794ECCA35E488B5CCD77393287746E163C.cer (raw, json)
Hash identifier:          wDzH9DOhudnnohjaO1c+huIPYZV19YXXBWdSjjYmMfk=
Subject key identifier:   2D:A9:D1:79:4E:CC:A3:5E:48:8B:5C:CD:77:39:32:87:74:6E:16:3C
Authority key identifier: 8E:E5:32:C8:0E:5D:0A:D0:E1:DB:64:BA:87:C8:40:40:3A:99:EF:1F
Certificate issuer:       /CN=8ee532c80e5d0ad0e1db64ba87c840403a99ef1f
Certificate serial:       127AD986AC2CB304F2A6164A69E350839E29FA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/juUyyA5dCtDh22S6h8hAQDqZ7x8.cer
Manifest:                 rsync://rpki.co/repo/August/6/2DA9D1794ECCA35E488B5CCD77393287746E163C.mft
caRepository:             rsync://rpki.co/repo/August/6
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 07:21:03 +0000
Certificate not after:    Sat 06 Apr 2024 07:26:03 +0000
Subordinate resources:    AS: 51930

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7a:d9:86:ac:2c:b3:04:f2:a6:16:4a:69:e3:50:83:9e:29:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee532c80e5d0ad0e1db64ba87c840403a99ef1f
        Validity
            Not Before: Apr  8 07:21:03 2023 GMT
            Not After : Apr  6 07:26:03 2024 GMT
        Subject: CN=2DA9D1794ECCA35E488B5CCD77393287746E163C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:1f:2e:90:dc:c9:b3:62:dd:b5:aa:72:12:
                    6e:e3:fc:e4:17:4a:40:d3:69:03:49:db:ed:fc:8c:
                    77:93:1c:03:3b:c2:45:67:27:d0:b0:07:c9:96:91:
                    a8:1d:8c:87:44:cb:f4:c6:b4:e7:45:cf:07:cc:53:
                    63:a4:4f:c4:ad:07:6f:2e:bc:06:1d:a0:e3:2e:02:
                    db:18:55:7d:6e:0e:7e:aa:4e:bf:ce:b0:c5:0c:af:
                    26:fb:c3:42:87:04:49:75:bf:69:20:2c:61:f8:fa:
                    95:52:01:a4:22:9b:58:f8:e2:b5:3a:a2:d1:c3:7f:
                    b6:dc:a1:ba:da:57:63:2c:b4:63:04:29:eb:cd:c3:
                    e8:21:66:18:b5:ed:16:71:62:28:8a:b0:37:6d:f1:
                    8b:42:18:f1:cf:b4:6b:62:5d:d4:e6:ec:22:f7:17:
                    cc:bb:3f:13:08:5f:2c:ab:9a:0e:3c:61:bd:94:38:
                    84:93:8f:77:8c:26:86:2b:56:cc:3b:c0:e4:56:de:
                    fc:3d:36:7f:1d:0b:33:20:06:2b:df:67:e8:9f:15:
                    bd:0e:3b:92:1c:c1:2d:fe:3a:c1:d5:2a:ff:b1:67:
                    3d:d5:e5:c5:ef:3d:ff:4e:3a:12:07:c9:2c:c7:8c:
                    15:78:e4:d2:37:5b:2b:4b:8f:cb:5b:8c:b5:d6:20:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:A9:D1:79:4E:CC:A3:5E:48:8B:5C:CD:77:39:32:87:74:6E:16:3C
            X509v3 Authority Key Identifier:
                keyid:8E:E5:32:C8:0E:5D:0A:D0:E1:DB:64:BA:87:C8:40:40:3A:99:EF:1F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/7/8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juUyyA5dCtDh22S6h8hAQDqZ7x8.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/6
                RPKI Manifest - URI:rsync://rpki.co/repo/August/6/2DA9D1794ECCA35E488B5CCD77393287746E163C.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         09:f6:78:57:0b:15:bf:9a:39:8f:22:00:f0:53:bb:c3:dd:d6:
         f2:d3:ec:9e:13:1e:2c:1e:53:19:52:c8:19:1d:47:06:5d:b1:
         0d:f1:5b:82:27:26:b5:bd:35:71:aa:5f:25:a9:f0:1c:c4:23:
         c0:99:d6:8f:18:de:ec:09:8a:84:cc:4f:6e:03:80:8a:85:80:
         a7:c2:b3:a5:b4:74:aa:ef:a6:07:39:b0:48:2d:cd:b3:e0:ed:
         aa:81:03:23:21:d8:b2:1c:03:f7:68:1a:d7:93:3f:fe:e4:58:
         2c:06:0c:75:4e:df:0f:c5:88:48:19:52:2c:6b:aa:86:fc:86:
         f1:51:4b:f9:9f:43:2b:f1:78:28:a3:28:e1:6b:f5:a0:08:3f:
         f4:dc:77:4c:28:2e:05:97:9d:5d:bd:f5:1f:09:92:98:09:d3:
         37:b4:84:f3:fa:02:c0:55:01:70:d2:c9:08:2e:da:de:82:04:
         92:36:c7:8d:9e:1f:b4:96:77:d0:7f:ae:61:ff:e6:b6:c5:63:
         ba:b0:4b:08:30:bb:49:76:4a:18:8a:c9:35:7b:6e:36:d3:a5:
         b0:8a:eb:d9:fe:25:61:4e:e6:9f:5e:06:6f:c7:b9:1f:f7:18:
         4b:2b:c7:ed:42:a0:2b:8c:d9:13:ac:91:dd:63:d5:cb:23:39:
         5f:85:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----