Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
File:                     GE__PPkA52quDSzS533-riTF0kw.cer (raw, json)
Hash identifier:          eQhipc2/FUO0rbrO6scmWF4S536Y/6IerzHZ6HzTnDY=
Subject key identifier:   18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274836ADA93E6E18433D5A728006B972
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198312
                          IP: 37.0.96.0/21
                          IP: 2a03:6a60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:36:ad:a9:3e:6e:18:43:3d:5a:72:80:06:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:3a:55:f6:90:dc:a1:ba:70:08:ae:4e:a3:
                    b5:ec:d2:53:51:3a:e2:0b:40:80:d8:52:d6:02:5b:
                    71:6f:33:ba:58:4c:f8:24:0c:b2:fe:d2:4a:4c:00:
                    03:cf:94:2c:05:6d:71:6d:bf:29:26:70:d2:38:bc:
                    d9:f0:57:0c:0f:be:eb:ab:8e:91:e1:f5:ca:b8:ba:
                    66:b7:47:25:34:ec:08:3f:d1:d2:06:7b:dd:aa:29:
                    14:60:b6:c6:b8:27:e2:b9:44:c2:06:c2:33:8e:bd:
                    70:42:81:d9:09:f5:fb:83:c0:cb:da:f8:6c:d6:fe:
                    b8:68:c2:8a:10:dd:07:27:08:41:f2:c8:36:31:9c:
                    fd:e3:50:bd:aa:cd:97:c1:cc:16:7c:89:f6:1c:96:
                    ba:6c:42:ce:a2:6e:fc:bb:db:4e:d4:6f:3a:5a:f6:
                    35:bc:f2:b3:9d:fa:8b:a6:47:4b:63:6b:6c:ba:33:
                    52:56:a3:9c:f2:c2:8b:c2:9b:a7:7b:3a:67:7a:19:
                    3d:2f:b3:c9:68:b0:97:c0:c3:f3:0c:05:fe:9b:e0:
                    ba:c4:63:bf:44:5c:24:8a:2f:f1:63:38:c0:d9:3a:
                    ef:a9:06:c1:ba:c1:c8:a9:38:28:e7:66:63:d6:b1:
                    39:a6:8a:ed:fb:bf:e5:51:7e:62:15:d5:d0:d8:fe:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.0.96.0/21
                IPv6:
                  2a03:6a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198312

    Signature Algorithm: sha256WithRSAEncryption
         70:02:59:b0:51:71:6f:8d:d4:c7:5c:79:0a:84:fc:68:a2:71:
         2b:d0:0a:03:44:73:13:77:fc:11:61:b6:7e:80:fc:9c:0b:c9:
         a6:e3:85:1c:56:0f:7d:e5:6d:0c:72:de:6f:1d:85:90:ac:6d:
         9b:e2:18:69:c6:a3:d7:15:15:7a:69:ec:da:60:24:00:3b:fa:
         59:7c:e4:99:e7:bb:2b:ff:7e:9c:48:fa:59:6a:22:44:79:e8:
         4c:0a:76:37:eb:44:0c:c0:cc:d6:1f:67:6c:66:53:36:f8:b1:
         4c:45:0e:fc:65:f8:8d:14:c0:8a:80:ec:5a:9f:78:9e:64:e4:
         31:94:36:2f:f3:d2:ba:50:53:80:35:62:33:96:55:18:ea:63:
         97:c9:26:68:b0:c3:e1:60:24:c5:1f:97:8b:35:fb:2d:59:f3:
         c7:36:ed:4d:96:c0:2b:29:ea:e7:3d:62:33:b7:d5:ef:61:02:
         ba:a0:4e:78:30:39:9d:22:cd:ac:ba:e2:ee:30:50:49:8d:c1:
         e1:ec:cb:02:dd:e0:59:55:1d:c5:fc:c5:07:49:69:29:81:01:
         fb:32:fc:f2:9e:2f:2d:8c:c0:96:22:79:4e:3b:2a:06:bb:37:
         a7:44:1c:eb:67:fd:b1:1b:a6:bf:da:e3:09:bb:7a:86:c3:42:
         38:a8:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----