Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
File:                     GHpwT0heEd7avFYmTl2AwUh-CEI.cer (raw, json)
Hash identifier:          PMPCiyRZaEqCRzNvYKxokREs5Vst64aEOSFHc+GMo24=
Subject key identifier:   18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195ED6A30B32E520706DAEBB779B69BB58A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 31 Mar 2025 18:15:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 5398
                          AS: 44160
                          IP: 77.220.64.0/19
                          IP: 2a14:d480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ed:6a:30:b3:2e:52:07:06:da:eb:b7:79:b6:9b:b5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 31 18:15:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=187a704f485e11dedabc56264e5d80c1487e0842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:06:e4:0c:a0:78:50:db:29:24:c9:c6:1a:
                    09:b1:ef:1b:59:84:b5:ab:70:97:85:2b:a8:9d:e5:
                    9a:9f:7f:60:ab:d4:19:b7:23:f1:4b:32:5d:fd:e7:
                    02:a8:ac:27:39:4a:e0:58:59:f4:63:16:38:33:91:
                    58:7a:6d:65:5f:69:4c:d2:ed:d8:c0:32:11:3e:a6:
                    30:1a:86:65:e4:db:b2:8a:c8:61:8f:19:a9:e1:d2:
                    8e:59:54:93:86:b8:09:3f:18:38:2b:3b:38:91:8e:
                    d7:70:97:87:60:7b:b5:28:0b:b3:94:5e:e1:0f:39:
                    e6:18:99:25:b2:aa:69:f7:54:9c:68:25:2a:de:7c:
                    c0:95:48:c1:23:ba:ac:78:8c:04:95:fd:04:50:8a:
                    e2:47:e8:6c:55:33:99:3a:5e:85:27:0c:fb:0c:ce:
                    3f:63:42:9d:fb:e1:6c:5c:b2:49:e5:5e:13:cb:d2:
                    77:eb:37:5c:96:76:80:7a:40:aa:f3:e3:56:20:f0:
                    0a:a9:eb:4c:09:12:de:9e:0e:dc:c2:91:3b:d1:a5:
                    30:35:33:eb:e9:80:97:a6:83:91:90:9b:56:d0:67:
                    f6:fd:5f:d1:37:5c:8e:68:99:b5:06:4f:67:4a:49:
                    a9:cb:0a:48:b2:d7:3a:f0:5a:a1:67:69:40:ba:e7:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.220.64.0/19
                IPv6:
                  2a14:d480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5398
                  44160

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:42:29:37:63:60:9d:e4:73:f3:6e:98:5f:eb:f7:8e:bd:
         22:7b:b0:3c:36:4c:f9:eb:c4:2e:99:94:71:a9:6d:84:ac:96:
         22:8f:a6:92:ce:90:1e:79:60:8c:07:17:34:6a:86:53:4e:96:
         11:6c:de:93:a9:8a:05:a3:8f:70:af:31:66:cc:8c:c1:41:3e:
         2c:78:ed:26:19:cc:dd:93:9f:b7:0b:15:61:89:0d:3e:2c:1c:
         ff:51:48:4a:d8:74:4b:91:1d:ef:6a:de:d7:30:c2:b5:db:82:
         a8:03:53:33:65:f8:2b:3b:a3:a2:71:c4:94:1b:ff:b1:3b:b3:
         63:26:20:ad:b5:2f:17:12:ec:80:67:b9:e6:94:eb:8b:80:cc:
         fe:bf:a0:d5:1f:7b:d7:80:8d:cb:e3:3c:0f:02:f3:21:2f:a9:
         c7:3e:75:ff:25:dc:bb:35:8e:98:f4:56:7e:d4:e3:b9:0c:b4:
         e7:86:44:50:98:fb:bc:04:03:04:3f:5e:48:fd:f7:1e:f9:ed:
         cb:67:aa:7b:00:84:ff:31:f1:ed:e4:fd:55:6a:b5:3a:cf:9e:
         2d:13:d3:b0:27:cd:75:9f:17:11:c3:d6:fb:fa:59:50:31:c7:
         8f:bc:48:91:2e:24:d2:36:f5:3e:bf:01:14:fc:0f:80:0b:12:
         f8:2a:e7:22
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZXtajCzLlIHBtrrt3m2m7WKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzMxMTgxNTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODdhNzA0ZjQ4NWUxMWRlZGFiYzU2MjY0ZTVkODBjMTQ4N2UwODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzQG5AygeFDbKSTJxhoJse8bWYS1
q3CXhSuoneWan39gq9QZtyPxSzJd/ecCqKwnOUrgWFn0YxY4M5FYem1lX2lM0u3Y
wDIRPqYwGoZl5Nuyishhjxmp4dKOWVSThrgJPxg4Kzs4kY7XcJeHYHu1KAuzlF7h
DznmGJklsqpp91ScaCUq3nzAlUjBI7qseIwElf0EUIriR+hsVTOZOl6FJwz7DM4/
Y0Kd++FsXLJJ5V4Ty9J36zdclnaAekCq8+NWIPAKqetMCRLeng7cwpE70aUwNTPr
6YCXpoORkJtW0Gf2/V/RN1yOaJm1Bk9nSkmpywpIstc68FqhZ2lAuufLAwIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFBh6cE9IXhHe2rxWJk5dgMFIfghCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzY5OGJl
Yy1hMGYwLTQyZjctOTlmYS0yODUxNmJiNzUwNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNjk4YmVj
LWEwZjAtNDJmNy05OWZhLTI4NTE2YmI3NTA1Yy8xL0dIcHdUMGhlRWQ3YXZGWW1U
bDJBd1VoLUNFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQFTdxAMA0EAgACMAcDBQMqFNSAMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAhUWAgMArIAwDQYJKoZIhvcNAQELBQADggEBAD4vQik3
Y2Cd5HPzbphf6/eOvSJ7sDw2TPnrxC6ZlHGpbYSsliKPppLOkB55YIwHFzRqhlNO
lhFs3pOpigWjj3CvMWbMjMFBPix47SYZzN2Tn7cLFWGJDT4sHP9RSErYdEuRHe9q
3tcwwrXbgqgDUzNl+Cs7o6JxxJQb/7E7s2MmIK21LxcS7IBnueaU64uAzP6/oNUf
e9eAjcvjPA8C8yEvqcc+df8l3Ls1jpj0Vn7U47kMtOeGRFCY+7wEAwQ/Xkj99x75
7ctnqnsAhP8x8e3k/VVqtTrPni0T07AnzXWfFxHD1vv6WVAxx4+8SJEuJNI29T6/
ART8D4ALEvgq5yI=
-----END CERTIFICATE-----