Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.cer
File:                     1-GNgxLkQAiYeTHaWSc9pcA1zKfg.cer (raw, json)
Hash identifier:          yxvnn4i5CVrWLa6UjtXt2owCiyBR0blpaYAqdmeE67E=
Subject key identifier:   F8:63:60:C4:B9:10:02:26:1E:4C:76:96:49:CF:69:70:0D:73:29:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FC13A073B6BCE07D679698074465FF893
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 28 May 2024 22:02:36 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214809

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 19:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c1:3a:07:3b:6b:ce:07:d6:79:69:80:74:46:5f:f8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 28 22:02:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f86360c4b91002261e4c769649cf69700d7329f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:ed:a6:a5:88:07:94:53:aa:4c:b7:de:a3:
                    31:bd:12:61:25:03:d1:29:3e:3c:da:ef:21:7f:7a:
                    de:e3:94:93:81:1f:05:e8:99:d7:d8:57:69:fc:ae:
                    d4:c0:80:03:84:91:68:ee:46:43:15:5f:54:eb:a2:
                    68:db:a0:00:da:e1:bb:ee:00:30:69:67:10:ab:94:
                    c6:5d:da:a4:77:a3:be:55:35:fe:b3:0c:a0:3f:69:
                    33:5a:12:1f:0f:fb:5d:e2:e6:5b:04:73:2c:df:99:
                    b9:24:d7:8e:f9:2f:4d:2e:ec:86:89:8c:bf:cf:3f:
                    cc:d8:d4:43:1f:83:58:d0:3c:34:56:1b:b4:59:e3:
                    32:72:b8:7d:9f:6f:14:39:54:bf:a8:1e:99:61:d8:
                    26:3c:a6:1e:f9:35:6c:aa:16:01:d2:d9:b5:e4:d9:
                    d5:83:ca:66:0c:a7:9b:34:26:6d:d1:4f:a5:9f:bb:
                    2f:2d:9b:77:39:db:61:33:06:42:5a:ac:23:b4:8a:
                    56:84:74:e6:d6:14:bd:44:74:0d:3f:3f:2e:a9:af:
                    c3:14:9e:ab:45:25:6d:2f:78:40:f2:6d:f4:1e:e7:
                    a1:d7:6c:ce:fa:93:0e:7b:52:93:c5:57:ac:fe:7f:
                    e5:9f:0d:ee:0a:27:14:a3:cd:ec:25:16:bb:94:d7:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:60:C4:B9:10:02:26:1E:4C:76:96:49:CF:69:70:0D:73:29:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5be5c2-79cc-4a71-aebc-796685bbbd6f/1/1-GNgxLkQAiYeTHaWSc9pcA1zKfg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214809

    Signature Algorithm: sha256WithRSAEncryption
         68:92:42:11:0e:c3:f0:da:7f:4e:4b:b4:7e:ab:64:bc:66:b6:
         40:91:e8:82:22:7d:56:c8:43:b2:ff:7e:09:04:2e:fa:cc:86:
         37:9e:cd:60:d0:58:c0:9a:9c:c5:1b:82:90:bd:46:2b:fc:aa:
         3c:02:19:ec:cf:89:9e:ef:5e:9b:52:3a:58:45:48:6d:98:c9:
         94:07:eb:ea:b5:f2:b8:c0:47:60:98:b9:ca:4a:c1:7c:ed:29:
         de:2a:1c:a5:74:54:b0:44:bf:ea:67:cd:3d:89:23:d5:a4:24:
         fa:fe:be:84:74:77:b4:99:f9:b8:09:7d:86:a9:3b:ea:33:fc:
         8a:9b:08:d2:38:68:0a:73:b2:8a:7d:c1:7e:d8:b4:f1:f4:ac:
         d2:5d:e4:ac:18:7a:e2:f7:2b:3b:e8:f4:52:cf:1f:70:52:b4:
         95:5d:78:d0:0a:45:f4:b2:d5:1f:d0:5d:26:5a:03:7e:4d:01:
         c2:ae:30:43:1b:58:54:88:d7:a0:6a:dc:4f:0d:0e:a6:e9:9d:
         09:e9:0d:51:09:80:a7:11:d2:33:ad:d6:d0:7e:9f:8b:78:2b:
         a6:df:48:5d:83:14:ac:54:08:5e:44:c2:c1:55:ef:73:36:17:
         5c:c9:4d:5d:e6:87:6e:40:32:82:f1:58:5d:98:13:00:30:c1:
         c6:b9:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----