Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BfVR6PgzPgrJl_LYLMpBvGg7yI.cer
File:                     2BfVR6PgzPgrJl_LYLMpBvGg7yI.cer (raw, json)
Hash identifier:          vWKeY2v9oYA+vg4w6SroE9BZhd6zX2t2O/Uwh3HmH5g=
Subject key identifier:   D8:17:D5:47:A3:E0:CC:F8:2B:26:5F:CB:60:B3:29:06:F1:A0:EF:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0190296F8899FA9E89B4695111D17AD30161
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/2BfVR6PgzPgrJl_LYLMpBvGg7yI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Jun 2024 03:41:33 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215023

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:6f:88:99:fa:9e:89:b4:69:51:11:d1:7a:d3:01:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 18 03:41:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d817d547a3e0ccf82b265fcb60b32906f1a0ef22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:2f:af:88:0b:fb:72:9e:e8:f4:74:a5:5f:
                    c7:1f:5b:97:ce:1f:9a:26:4e:7a:69:79:c0:44:a3:
                    3a:3a:06:41:cc:de:e7:24:e5:01:bc:50:ea:5d:f3:
                    4e:9f:20:19:5f:87:38:be:75:3d:e4:e9:10:e2:a9:
                    2b:9e:76:4a:1c:99:cd:99:dd:33:32:df:b9:8d:d5:
                    c5:a1:99:29:6f:52:b6:ea:91:2b:f8:bf:e5:0b:43:
                    ba:3d:3f:66:70:09:5c:2a:fe:91:5c:f8:04:52:aa:
                    c7:d5:bc:c3:65:8e:d7:e4:83:73:30:86:b0:d7:c4:
                    6e:8c:9c:5c:ce:24:a4:72:0c:b4:73:60:cd:82:33:
                    21:be:41:c1:e5:e2:45:31:f4:c5:14:bc:06:d0:10:
                    ea:2c:60:1a:9d:1a:54:5d:00:41:4a:52:fb:b6:c8:
                    62:f0:17:5b:a9:34:cd:9a:1c:9b:b9:33:83:05:bd:
                    ff:a9:74:8b:68:92:c6:d7:21:ac:35:38:0c:02:2b:
                    a2:93:36:a1:c7:65:be:41:9d:60:3b:2e:87:fe:46:
                    79:3b:70:96:21:6d:ef:2c:ca:27:f4:d8:ea:e5:c9:
                    90:53:18:01:14:2c:fd:44:b4:c3:7d:20:31:9d:e6:
                    62:c2:e6:f3:27:6a:db:f7:21:82:15:c5:95:97:0a:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:D5:47:A3:E0:CC:F8:2B:26:5F:CB:60:B3:29:06:F1:A0:EF:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc8d0c-f5b3-4ab5-b58b-4ad611363de2/1/2BfVR6PgzPgrJl_LYLMpBvGg7yI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215023

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:8c:3a:4f:3b:4c:1c:f8:9b:d3:92:3d:3b:fe:de:94:64:
         7a:c0:90:a4:ec:de:98:60:00:c8:fa:82:1e:d8:eb:1b:b9:74:
         a2:ce:22:5e:5c:27:e3:80:75:41:dc:81:fa:dc:86:e6:94:9e:
         ae:db:32:b0:b0:ad:ac:0e:7c:4b:89:93:dd:63:4c:e8:4f:4e:
         13:3f:23:bf:f6:a5:3e:22:fc:11:fc:cb:0f:86:34:67:a0:9b:
         6e:b4:18:58:11:eb:4e:6f:03:24:51:46:38:5a:ca:f8:f3:77:
         15:29:39:67:fc:23:86:7c:34:d6:56:59:20:fb:d9:e1:b5:ed:
         28:15:50:e7:48:f5:3f:57:27:87:7e:a7:c6:3c:b9:83:a2:82:
         ab:80:e9:59:25:6c:18:31:03:94:7f:13:db:5f:7b:16:95:59:
         d5:75:d5:1c:7d:6b:8c:67:69:5e:3b:9c:15:b3:6e:df:3d:34:
         23:9b:06:b8:64:de:04:9d:a4:e4:2c:bf:03:4f:ff:04:e1:09:
         05:e8:67:f8:87:a3:51:92:3c:c7:13:fd:96:66:4d:df:79:af:
         11:53:49:49:5d:97:38:ce:57:e3:36:33:9a:c4:7f:e8:26:6e:
         e8:eb:b0:b9:68:64:e8:fa:11:01:5f:18:b5:00:29:98:77:aa:
         b2:3c:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----