Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
File:                     103734D89B107354F2D009D6E780AAC0BCE606C0.cer (raw, json)
Hash identifier:          0HXCpTv2E9AsaFn44vI1jiy7UAhf0z8QpZ/vwcMFav8=
Subject key identifier:   10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       53936A0D5855B8390E899D58C1D0C8B2E67FE636
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 27 Apr 2023 03:54:22 +0000
Certificate not after:    Thu 25 Apr 2024 03:59:22 +0000
Subordinate resources:    IP: 2a12:dd47:3800::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:93:6a:0d:58:55:b8:39:0e:89:9d:58:c1:d0:c8:b2:e6:7f:e6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 27 03:54:22 2023 GMT
            Not After : Apr 25 03:59:22 2024 GMT
        Subject: CN=103734D89B107354F2D009D6E780AAC0BCE606C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:34:54:49:fe:a6:1a:87:ef:ef:33:ad:10:
                    dd:a3:ae:d8:4a:53:47:9f:a9:b2:82:f6:e8:82:be:
                    c1:51:8c:ba:df:27:95:c5:b3:f8:c0:fe:83:b4:de:
                    be:18:4c:96:ec:f9:8c:59:dc:62:cb:9c:c1:97:45:
                    7f:71:1a:75:49:8f:29:76:2b:86:53:f4:e0:b6:ec:
                    60:c7:07:e7:3e:c4:f8:de:09:ba:40:29:67:32:51:
                    8f:d1:f6:c5:eb:6a:f5:1b:5a:fe:3c:40:5e:d7:62:
                    7f:01:e6:86:af:a7:7a:9a:0e:af:03:03:06:35:4f:
                    45:cc:16:48:9e:1d:0f:2c:d4:37:4b:80:d7:e8:01:
                    59:40:a9:fc:ff:d2:30:68:da:36:8f:8d:5a:4d:fe:
                    fb:c2:50:d9:71:1c:ec:70:7b:d9:e1:54:a4:11:69:
                    d3:0a:a7:80:1e:9f:59:66:f8:09:55:53:d5:67:41:
                    d9:81:a9:ed:e9:3e:21:85:2b:ff:28:43:e7:82:63:
                    2d:e5:00:04:c9:8e:04:d8:58:cd:a6:59:6d:82:64:
                    0d:ec:ae:84:84:11:d6:32:6a:2a:b6:38:51:41:c1:
                    7b:52:d9:db:3c:a3:74:a6:f7:54:f9:06:95:94:58:
                    ed:4b:df:79:d3:1b:09:79:c1:92:99:a3:9e:d0:a9:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:81:4a:01:ba:ce:a3:c8:78:c8:7f:84:de:e6:92:94:35:3c:
         80:ae:98:98:f8:44:09:f5:2f:0f:9c:ef:15:29:90:ce:33:5c:
         4a:b8:14:50:bd:c2:13:22:95:96:d7:18:f3:67:7a:2a:f7:84:
         1c:8a:22:ff:c9:cc:df:66:5b:c4:6a:d0:a4:2a:e0:8f:ab:08:
         76:eb:57:17:b2:68:cb:e4:90:ce:74:ef:78:a4:4b:eb:35:9f:
         4c:38:28:69:d1:63:4a:1a:f7:b2:17:bd:d6:68:3a:a8:dc:52:
         25:a7:ef:56:3c:c6:5f:cc:ab:fe:e4:04:c7:b7:bb:6c:96:4d:
         47:5a:05:2b:e0:d1:74:0b:c2:b5:61:1f:3b:49:47:10:35:29:
         0e:9d:03:49:f6:e5:79:8e:e1:29:bd:08:32:d5:22:76:5a:07:
         4f:a6:23:e7:2a:7a:3f:55:7b:74:b0:cd:0f:81:27:84:e2:01:
         0e:58:08:c6:1a:49:ab:f5:bf:7e:02:6e:81:b3:74:39:c9:e9:
         6d:e2:65:ec:ca:18:3b:bc:e3:a4:75:14:80:dc:73:d4:6e:20:
         c7:6e:05:7f:80:8a:a6:0f:10:62:42:5e:b2:55:a6:4e:93:e5:
         24:c8:c5:59:84:dc:69:50:2b:79:f3:11:f1:10:97:78:9d:95:
         17:34:2f:7c
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUU5NqDVhVuDkOiZ1YwdDIsuZ/5jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MjcwMzU0MjJaFw0yNDA0MjUwMzU5MjJaMDMxMTAvBgNV
BAMTKDEwMzczNEQ4OUIxMDczNTRGMkQwMDlENkU3ODBBQUMwQkNFNjA2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyTRUSf6mGofv7zOtEN2jrthK
U0efqbKC9uiCvsFRjLrfJ5XFs/jA/oO03r4YTJbs+YxZ3GLLnMGXRX9xGnVJjyl2
K4ZT9OC27GDHB+c+xPjeCbpAKWcyUY/R9sXravUbWv48QF7XYn8B5oavp3qaDq8D
AwY1T0XMFkieHQ8s1DdLgNfoAVlAqfz/0jBo2jaPjVpN/vvCUNlxHOxwe9nhVKQR
adMKp4Aen1lm+AlVU9VnQdmBqe3pPiGFK/8oQ+eCYy3lAATJjgTYWM2mWW2CZA3s
roSEEdYyaiq2OFFBwXtS2ds8o3Sm91T5BpWUWO1L33nTGwl5wZKZo57QqdRRAgMB
AAGjggKpMIICpTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQNzTYmxBzVPLQ
CdbngKrAvOYGwDAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBmBggrBgEFBQcBAQRaMFgwVgYIKwYBBQUHMAKGSnJzeW5jOi8vcnBr
aS5jby9yZXBvL0F1Z3VzdC81LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzND
MDVCRkQ5OUYzRTYuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcw
BYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9k
ZTdkNTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgvMy8wgYsGCCsGAQUF
BzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8zLzEwMzczNEQ4
OUIxMDczNTRGMkQwMDlENkU3ODBBQUMwQkNFNjA2QzAubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoS3Uc4MA0GCSqGSIb3DQEBCwUAA4IBAQCYgUoBus6jyHjIf4Te
5pKUNTyArpiY+EQJ9S8PnO8VKZDOM1xKuBRQvcITIpWW1xjzZ3oq94QciiL/yczf
ZlvEatCkKuCPqwh261cXsmjL5JDOdO94pEvrNZ9MOChp0WNKGveyF73WaDqo3FIl
p+9WPMZfzKv+5ATHt7tslk1HWgUr4NF0C8K1YR87SUcQNSkOnQNJ9uV5juEpvQgy
1SJ2WgdPpiPnKno/VXt0sM0PgSeE4gEOWAjGGkmr9b9+Am6Bs3Q5yelt4mXsyhg7
vOOkdRSA3HPUbiDHbgV/gIqmDxBiQl6yVaZOk+UkyMVZhNxpUCt58xHxEJd4nZUX
NC98
-----END CERTIFICATE-----