Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer
File:                     Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer (raw, json)
Hash identifier:          a0w9x9PWJLUO8rmdejzO07cI6E4rMUGxpbB0QhXwGPA=
Subject key identifier:   32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019014AA9540D07507A7B3D4E51ED203EEBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 02:54:02 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216411

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 16:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:14:aa:95:40:d0:75:07:a7:b3:d4:e5:1e:d2:03:ee:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 14 02:54:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:c2:31:53:ec:d0:32:71:b3:04:16:19:37:
                    6d:4f:ba:dc:26:4c:cb:09:51:5e:21:ea:04:4d:09:
                    cd:fb:a7:d8:e1:f5:2f:26:c9:b9:07:bc:f9:c7:03:
                    ad:f9:b1:3d:7b:81:f9:c4:cc:22:f6:05:e6:71:9a:
                    b4:38:4e:fb:58:46:de:3f:6d:89:65:b8:c4:d4:9c:
                    c0:b0:d6:01:91:53:87:89:27:30:c7:d6:a6:34:dd:
                    2f:98:03:cc:0c:ee:ca:77:77:b0:53:e4:3c:c2:d6:
                    26:a0:5b:a5:77:a8:c7:b1:51:a4:87:06:ca:d8:5f:
                    26:18:e2:27:8c:3d:1a:81:eb:f8:08:8b:2f:16:0e:
                    a3:b3:9f:7d:55:5b:b2:47:f0:30:e9:0e:e3:d9:e9:
                    64:53:b9:bf:8c:c9:23:7d:46:b9:b0:07:01:43:f8:
                    77:02:21:c7:73:bf:4f:f6:15:6a:17:76:08:a1:e8:
                    33:6b:ca:94:a6:70:2f:6a:9a:fe:c7:36:7a:a0:d6:
                    cb:36:08:06:ed:06:e0:69:3f:27:c5:6a:1b:2b:74:
                    01:cb:3d:47:41:d6:28:68:83:ee:23:86:58:f3:0c:
                    9e:04:c2:fc:fd:2b:b9:48:aa:f0:5b:8b:e0:fc:ce:
                    b6:d8:2b:5a:5a:0b:0d:f0:5a:3e:79:d1:2a:08:f7:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216411

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:8d:8a:c9:2c:f8:fb:32:b5:3b:01:a9:71:92:2d:0b:bf:
         51:7c:68:57:9e:4c:9d:49:80:34:e7:61:d2:b6:72:33:3f:6d:
         61:27:18:e6:0c:fd:7b:13:6a:98:e4:4a:0f:c9:13:c7:54:d3:
         87:92:b0:49:e7:12:62:59:a0:54:fa:11:5d:f9:e7:d1:93:56:
         a3:61:ec:8a:b7:be:0a:19:56:f6:a8:67:33:46:c8:a6:0e:c6:
         2b:68:52:16:e4:c4:ab:85:b3:dc:0c:41:01:6b:ed:e8:9c:8a:
         31:79:0d:13:81:7d:d7:91:6f:8f:70:c0:24:c1:06:be:c1:46:
         f8:4d:6a:5c:50:76:f4:14:a3:dd:19:86:82:8e:cc:2c:d1:35:
         45:0c:b5:bb:74:5d:7e:5f:b9:58:f7:32:b7:04:76:a9:a7:2e:
         dc:de:5f:dc:98:79:c6:50:8d:fd:f5:e1:de:3a:e7:12:40:73:
         2b:f0:56:ab:ea:53:0a:48:88:25:7c:03:14:51:9f:c0:9b:fa:
         33:b6:99:2b:9b:22:83:78:b0:ce:9b:78:15:e0:cb:8f:35:68:
         17:ba:c8:f7:16:e3:f5:fa:fc:c0:c7:dc:aa:9b:45:b6:2b:c2:
         af:31:76:0c:df:ba:ee:b2:7a:7e:fc:d0:63:1a:10:b8:28:b8:
         02:48:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----