Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
File:                     1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer (raw, json)
Hash identifier:          8CRdD8UHq9eIr04vdj+smO6YuHlfsGtUwIqUHE6ErIQ=
Subject key identifier:   FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C8D1D5326A4F2474ECD8B1A82031683A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 21 Dec 2023 16:02:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 208525

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 12:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8d:1d:53:26:a4:f2:47:4e:cd:8b:1a:82:03:16:83:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 21 16:02:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb0726994524a2757a42c9d6e4e0e1726c795931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:0d:41:08:6d:e8:dd:9d:42:6e:8f:ad:f3:
                    df:6e:cc:bb:4c:e7:6f:ac:ba:2a:45:22:fa:74:f8:
                    d7:5a:ba:cc:0f:44:1b:4d:94:bf:8c:c9:02:ad:ac:
                    b9:c8:c5:35:f3:c7:6f:60:be:91:83:d9:c9:46:14:
                    99:b0:a8:7d:d8:d0:d0:d4:e2:db:bc:ad:27:cf:91:
                    f4:20:8d:f1:2e:f8:91:ba:0f:d9:de:e1:0e:f5:7f:
                    86:1c:03:62:39:0b:c1:3a:9a:96:dc:ae:2c:39:c0:
                    91:68:fa:e6:2f:ef:dd:5d:a2:16:33:ee:0e:ca:ce:
                    71:be:ab:69:55:5b:e2:04:c2:e5:ac:35:e9:65:36:
                    39:69:1d:52:85:f1:d0:48:28:ea:1f:7d:e4:1a:d2:
                    26:a1:73:56:4e:54:96:29:5c:8b:82:bf:f7:d6:24:
                    cf:c7:e0:07:0b:22:44:3f:6c:17:bf:61:c2:52:5f:
                    68:6d:4e:cf:27:cb:51:88:9f:bf:dc:70:05:2a:b3:
                    c2:63:53:3a:1e:42:66:ab:a7:2b:dd:44:e8:c9:f7:
                    0c:8b:27:11:68:05:74:1d:ab:5d:ba:6b:11:8c:e0:
                    22:80:51:99:7a:2b:07:ef:32:7e:8a:c1:07:c8:68:
                    aa:87:dd:10:41:d9:78:bc:ce:80:c3:fc:7f:8e:a0:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208525

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:d3:ea:41:4c:cb:da:f4:82:fa:5c:27:dc:ed:c1:ec:6d:
         20:65:2c:e9:72:32:bf:05:b8:75:8e:9d:69:e5:fa:9d:8f:40:
         b7:29:92:9d:e7:ff:37:a7:cc:7d:b1:e7:ae:48:75:4c:41:d5:
         e1:1c:54:ab:d2:bd:48:ff:aa:f6:98:6e:01:c2:7b:df:33:2b:
         d6:0c:7a:a9:e3:21:43:c2:23:6f:08:5b:ad:62:2f:31:b5:d0:
         ce:1e:6c:6f:c7:3c:d8:f1:a2:9f:75:34:2b:c4:fb:c5:3b:46:
         b3:85:a0:6b:45:3b:00:b5:ff:f8:fa:db:84:16:fc:fc:ac:74:
         34:71:f6:5c:5d:7c:e7:c0:1a:35:be:70:79:52:03:ea:a9:b7:
         39:a4:38:94:ec:76:3c:4b:aa:9b:d5:ec:ec:85:21:3e:8c:55:
         d3:6e:a9:2e:6f:c6:c9:d3:a2:27:55:5b:86:11:bc:2f:4f:a0:
         92:1b:35:98:43:81:46:bc:5c:60:2b:0d:07:76:00:54:b8:04:
         c2:6c:2e:d7:83:6f:2a:ae:65:c6:22:a3:1d:01:31:45:a2:b1:
         49:77:87:3b:6f:82:c5:5d:7c:51:aa:03:6c:bc:ec:3e:02:fb:
         b7:a6:ec:a8:dd:f8:dd:5c:ea:c7:a9:44:aa:c7:3f:fc:f6:1c:
         12:ce:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----