Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
File:                     GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer (raw, json)
Hash identifier:          2HRJGKNoBxGgtL9mM2gSGzmFc6ZvQANRWAeblKgsC5M=
Subject key identifier:   18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424453E9B6F680A57B07C91C339E632CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200718

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:3e:9b:6f:68:0a:57:b0:7c:91:c3:39:e6:32:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:d6:48:b5:0c:0b:1c:27:19:08:ab:38:24:
                    26:db:b2:ad:b2:48:8d:ac:52:0d:b6:4f:8e:23:22:
                    4f:5a:e8:96:5c:5c:64:6f:e0:1a:08:1f:5f:3b:86:
                    fd:80:59:c2:c6:3f:d5:b2:2d:b5:6d:ec:fa:7c:71:
                    26:5e:84:ac:4d:4f:0b:2a:42:86:aa:ad:6f:ae:92:
                    97:01:a1:8e:e8:a3:86:b2:f3:dc:57:f7:12:e8:a8:
                    34:31:2f:a9:81:5e:57:70:a4:1b:f6:37:f5:8d:39:
                    fe:3b:09:8d:31:ef:9d:99:07:58:68:8f:9e:84:96:
                    d5:81:59:ae:6c:7e:5a:89:d8:92:fa:b9:f9:d5:8e:
                    3c:93:f6:34:08:d4:93:bb:89:75:ad:fd:8d:77:38:
                    5c:96:0c:52:f2:22:ea:5f:c2:9a:a8:6d:2b:4a:d6:
                    5b:06:79:c3:68:2e:b9:ff:b0:ff:76:24:34:55:6e:
                    c6:f6:8e:e4:32:3f:85:5f:57:11:5a:8a:3e:86:0c:
                    31:f5:b3:67:3f:3d:e5:fd:11:55:99:76:ca:f6:90:
                    ee:5a:9b:2a:a9:69:94:1d:85:b9:88:85:94:33:c3:
                    e2:10:22:05:ac:f8:e5:8f:8e:9b:44:6d:28:55:23:
                    1b:d2:0d:e7:66:88:94:bd:89:da:14:60:b3:98:0a:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200718

    Signature Algorithm: sha256WithRSAEncryption
         9e:c9:36:02:83:b1:c5:8a:af:bf:9d:e3:f8:7a:6d:d1:4c:17:
         35:08:cb:ba:fc:66:a2:97:f7:3f:6c:fa:65:02:3a:8c:50:ad:
         5d:9e:f5:c2:4a:e5:5d:cd:3e:22:54:6f:5d:9c:31:cb:21:33:
         6a:96:a1:47:8e:fe:fe:af:93:43:a9:07:11:2c:b2:c9:aa:65:
         b4:7c:c2:e5:8f:45:21:ba:75:ff:27:25:00:04:d6:77:88:75:
         62:0b:06:95:ae:96:cd:82:90:ae:b8:39:72:fc:d5:e0:64:25:
         76:c9:52:8b:fc:eb:6c:be:18:a2:ce:29:7d:68:97:94:71:f5:
         18:12:04:b4:5f:8a:c2:69:79:6c:c1:7c:0f:33:26:55:4b:cc:
         2d:37:2f:f4:c3:2e:d7:16:5e:4a:29:c0:1c:55:f2:2a:40:17:
         44:92:55:a3:86:0a:ed:8e:d6:fb:8c:1f:d4:4c:6f:0f:6e:11:
         ce:72:08:c6:67:c9:88:bb:6f:55:ae:2d:38:35:05:7f:24:06:
         e0:b6:2a:98:1f:a5:55:c7:ad:8c:51:75:94:63:41:f4:5a:e4:
         9e:b6:0f:8a:0a:0f:95:3c:43:3b:e6:47:02:2b:e5:7b:f6:e7:
         08:af:42:68:18:bb:98:32:60:f0:f7:57:18:e6:c8:44:99:4b:
         ca:74:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----