Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
File:                     Nv-NjgLh0RSksKn3oiluItBuHWk.cer (raw, json)
Hash identifier:          iaJAGgey15jjKwnyAxHiUdaYqt4GFIJWBvWJCAq4av4=
Subject key identifier:   36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018AFF61D1802A93558F4A24CBEDD37DEAC1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 05 Oct 2023 10:28:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a0c:d6c0::/32

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 09:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ff:61:d1:80:2a:93:55:8f:4a:24:cb:ed:d3:7d:ea:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  5 10:28:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:33:70:f3:cd:e6:44:2a:3b:4a:9d:63:2b:
                    5e:14:d5:98:6a:e9:4d:74:78:55:b3:32:21:00:a2:
                    e4:c5:25:e7:ba:1b:ed:8e:23:fa:23:49:27:cc:fb:
                    95:e0:46:73:a9:ae:1c:3c:6d:bd:7e:8d:c0:fc:d3:
                    69:dd:4e:5d:8a:4f:c4:56:a7:6c:59:f7:63:8d:ae:
                    2f:be:4a:4d:9a:5a:bc:d6:50:3f:56:cf:66:89:32:
                    a5:c8:1a:65:51:4f:d7:ac:10:a8:01:0c:21:43:55:
                    ae:0d:d5:90:2a:54:17:a9:ae:3b:11:22:f2:ce:0f:
                    9e:aa:0d:ed:c1:7b:ad:0a:3f:02:c6:9f:6f:a2:18:
                    0b:29:e1:0a:33:14:c3:ec:53:9c:e3:41:5f:05:35:
                    d3:7b:fa:ee:b8:ea:69:9a:dd:0d:eb:4a:c7:1a:23:
                    62:c8:e3:02:d0:ca:d9:f6:a7:3f:f2:cc:9a:6e:38:
                    82:9a:51:ec:31:74:d2:eb:d3:a9:51:5c:b2:a1:e9:
                    02:3d:62:31:6b:aa:7e:85:23:7e:a9:dc:b5:b9:84:
                    8f:0d:1c:bc:6d:92:cd:6d:34:11:c7:b2:ff:02:f2:
                    0f:f8:02:d8:26:80:fb:eb:54:4c:e7:69:31:57:9c:
                    99:0f:70:38:f5:79:98:b1:b8:c6:d0:c6:72:ae:1b:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:32:1a:88:19:f6:20:44:fc:d5:a8:ab:1c:4d:69:82:63:e8:
         75:55:b2:44:33:05:2a:92:f8:07:bf:1c:66:58:dc:6d:a5:49:
         74:d0:89:17:55:e4:e7:6d:1b:6c:65:6e:58:8b:54:e4:0c:18:
         50:48:2f:ce:cc:25:1a:fa:7f:49:0f:7a:f8:c7:89:a9:4e:63:
         86:0f:78:71:e8:da:b8:78:4c:92:74:81:11:d4:20:aa:7c:22:
         c0:69:e6:e4:43:7c:f6:4a:11:2c:b2:db:51:0c:c4:89:dd:1d:
         4d:d8:9c:3a:ce:7d:f4:a4:0a:e6:7b:7b:2e:86:c8:4f:23:31:
         fb:ae:51:d7:00:52:49:df:45:c1:df:aa:3e:7d:f0:43:52:59:
         74:29:25:53:08:7e:e8:cd:e6:3e:20:61:3f:b1:9f:6a:9b:75:
         a6:e1:47:f1:6a:ab:0c:a1:d0:6e:3b:f8:a5:55:ef:f4:0b:ca:
         91:92:a5:18:ae:15:d7:a9:cc:c7:fb:b0:3f:e5:b9:74:a2:67:
         16:65:8c:41:92:ad:27:c6:46:c2:9a:02:1a:d9:87:07:71:33:
         4a:72:40:bf:52:f2:34:e6:59:c6:ef:ca:d0:27:5c:dc:bb:3d:
         58:5e:18:8e:94:8f:72:3a:0d:c1:7c:50:ea:ce:ef:c1:16:3f:
         fc:9e:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----