Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ND5nGlbDN-3XMedpw_vaCM7W90.cer
File:                     1-ND5nGlbDN-3XMedpw_vaCM7W90.cer (raw, json)
Hash identifier:          BkssFYvqQaqeG2utCW3snNYcgTVPLf2aEGdsULu9pRs=
Subject key identifier:   F8:D0:F9:9C:69:5B:0C:DF:B7:5C:C7:9D:A7:0F:EF:68:23:3B:5B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188D3BA567558267704B9A094BC29AE850D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 19 Jun 2023 12:56:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199766

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 07:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d3:ba:56:75:58:26:77:04:b9:a0:94:bc:29:ae:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 19 12:56:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8d0f99c695b0cdfb75cc79da70fef68233b5bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:1b:0c:4f:26:ec:cc:8b:86:28:ef:61:8b:
                    23:c1:53:6f:2b:43:9e:52:1f:14:84:30:fe:9d:38:
                    82:d1:c4:12:dc:d6:d1:58:ed:fb:3d:e8:4f:e1:a2:
                    a5:aa:c1:ec:4d:e4:c8:75:0b:6e:27:46:a7:ef:d4:
                    a3:01:d3:7e:16:86:36:de:87:d4:aa:ef:d8:38:ff:
                    6e:98:80:38:3a:9d:52:c5:32:43:c1:f7:cf:8b:f2:
                    f9:2c:98:95:db:38:02:0c:f5:42:f9:87:a0:93:86:
                    e6:cf:3a:e0:35:83:2a:d0:af:f2:8a:8c:98:9c:f8:
                    d1:74:5f:73:bc:12:41:76:26:4a:58:2f:e8:90:30:
                    4b:e0:30:d4:0a:41:97:67:40:59:b6:a9:c2:ee:d9:
                    68:42:48:f4:4b:84:dd:e3:5b:59:de:57:97:4b:e8:
                    7e:3c:f6:b1:7b:9e:b1:92:7b:be:dc:22:9a:b2:67:
                    d7:3a:75:35:13:dd:54:64:24:b0:bd:8a:2d:f5:69:
                    63:27:76:18:84:c3:80:5e:1e:b3:7b:1f:f1:26:56:
                    8d:71:81:52:3f:e5:e9:b6:50:66:f4:59:0e:2e:d3:
                    8d:aa:89:20:32:96:54:d0:15:5e:39:11:2c:27:f4:
                    03:93:da:11:c3:da:47:c8:f2:44:10:6f:1f:c9:b4:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:F9:9C:69:5B:0C:DF:B7:5C:C7:9D:A7:0F:EF:68:23:3B:5B:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5d1b49-c57c-4291-8313-9d799c604f90/1/1-ND5nGlbDN-3XMedpw_vaCM7W90.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199766

    Signature Algorithm: sha256WithRSAEncryption
         51:58:ec:35:07:b0:12:e9:5b:1a:f6:7c:f0:46:b1:82:15:71:
         d8:cf:81:12:7f:f1:3d:b5:aa:97:2d:7a:a0:42:6e:04:4d:7b:
         93:82:72:06:d9:98:e0:47:91:74:8f:55:f7:22:41:8d:8c:e9:
         09:7b:ac:b6:23:86:e5:d0:aa:ea:52:ef:f8:51:2b:80:d7:25:
         50:c0:ac:ad:b7:84:a3:7e:90:4e:74:8f:c1:28:5f:8e:c9:12:
         08:f1:64:9b:26:d0:56:eb:45:80:54:fd:a0:87:14:a7:9c:7e:
         fe:37:26:0e:5e:5c:3c:a7:c0:85:b8:05:3c:9e:fb:a7:00:08:
         88:5d:72:40:0a:a6:88:8f:d8:65:5d:f6:91:25:4e:65:ce:44:
         84:37:6c:13:d1:a6:17:f8:b0:53:13:6c:9c:0d:9d:d0:f1:40:
         d3:06:21:1d:c7:12:d4:61:f7:52:dc:40:40:fa:57:22:36:3a:
         6e:10:c8:42:df:f2:8f:d7:a0:5d:2f:0d:69:a6:1d:a8:46:12:
         7d:b1:06:2d:98:05:af:45:5a:fa:4c:65:57:fb:95:a2:b7:46:
         cd:45:fb:e0:56:fc:35:6d:c8:50:f9:19:bb:7f:bf:82:8f:3b:
         c4:7a:26:e0:17:4a:15:6a:8a:00:cb:6b:31:91:9e:9f:1e:51:
         f6:ac:72:2d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYjTulZ1WCZ3BLmglLwproUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjE5MTI1NjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQwZjk5YzY5NWIwY2RmYjc1Y2M3OWRhNzBmZWY2ODIzM2I1YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PIbDE8m7MyLhijvYYsjwVNvK0Oe
Uh8UhDD+nTiC0cQS3NbRWO37PehP4aKlqsHsTeTIdQtuJ0an79SjAdN+FoY23ofU
qu/YOP9umIA4Op1SxTJDwffPi/L5LJiV2zgCDPVC+Yegk4bmzzrgNYMq0K/yioyY
nPjRdF9zvBJBdiZKWC/okDBL4DDUCkGXZ0BZtqnC7tloQkj0S4Td41tZ3leXS+h+
PPaxe56xknu+3CKasmfXOnU1E91UZCSwvYot9WljJ3YYhMOAXh6zex/xJlaNcYFS
P+XptlBm9FkOLtONqokgMpZU0BVeOREsJ/QDk9oRw9pHyPJEEG8fybS80QIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPjQ+ZxpWwzft1zHnacP72gjO1vdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzVkMWI0
OS1jNTdjLTQyOTEtODMxMy05ZDc5OWM2MDRmOTAvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvNWQxYjQ5
LWM1N2MtNDI5MS04MzEzLTlkNzk5YzYwNGY5MC8xLzEtTkQ1bkdsYkROLTNYTWVk
cHdfdmFDTTdXOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDDFYwDQYJKoZIhvcNAQELBQADggEBAFFY7DUHsBLp
Wxr2fPBGsYIVcdjPgRJ/8T21qpcteqBCbgRNe5OCcgbZmOBHkXSPVfciQY2M6Ql7
rLYjhuXQqupS7/hRK4DXJVDArK23hKN+kE50j8EoX47JEgjxZJsm0FbrRYBU/aCH
FKecfv43Jg5eXDynwIW4BTye+6cACIhdckAKpoiP2GVd9pElTmXORIQ3bBPRphf4
sFMTbJwNndDxQNMGIR3HEtRh91LcQED6VyI2Om4QyELf8o/XoF0vDWmmHahGEn2x
Bi2YBa9FWvpMZVf7laK3Rs1F++BW/DVtyFD5Gbt/v4KPO8R6JuAXShVqigDLazGR
np8eUfasci0=
-----END CERTIFICATE-----