Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xst61Y64jNpHLssPKwjR5ydsRQ.cer
File:                     5xst61Y64jNpHLssPKwjR5ydsRQ.cer (raw, json)
Hash identifier:          VtiaV+34XrPBEoA68Ev37Pv41QsuJSPiLvNq+YkX/Xs=
Subject key identifier:   E7:1B:2D:EB:56:3A:E2:33:69:1C:BB:2C:3C:AC:23:47:9C:9D:B1:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F35A1E7154EDD61B7680DC6CA12A9A3AB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 May 2024 19:29:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216093

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 07:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:a1:e7:15:4e:dd:61:b7:68:0d:c6:ca:12:a9:a3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 19:29:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e71b2deb563ae233691cbb2c3cac23479c9db114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:58:14:a9:63:4a:21:5e:b6:3c:cb:ea:bc:
                    8d:9d:ed:c0:9e:d6:96:ed:75:b2:9b:25:de:db:48:
                    cd:72:62:48:aa:ce:2c:dc:1b:0a:23:e3:23:15:d5:
                    07:26:4b:99:de:e7:1a:bc:c4:9b:ca:eb:19:6d:9b:
                    df:55:7a:bf:56:62:8f:f8:d1:47:19:11:0a:96:5b:
                    9f:c8:80:1e:54:09:e4:1a:17:44:1b:00:11:31:9c:
                    c2:d8:7e:a7:5c:f1:33:34:99:d5:e6:55:e2:56:1c:
                    92:e4:af:04:96:06:f9:9c:e6:6f:97:41:7a:2e:d3:
                    60:8c:32:c7:34:d5:e1:d7:e2:e7:08:42:6c:be:c3:
                    f4:ab:2b:e9:47:39:d1:47:b9:ce:b2:1d:6d:c3:10:
                    e9:f2:44:cf:a1:96:3f:43:16:06:09:b2:c0:f0:b2:
                    e8:12:ba:84:a8:b6:4a:a3:bd:1a:34:1b:08:14:03:
                    2a:e0:f8:01:d6:2e:50:e6:98:07:a8:94:3d:99:1d:
                    0f:c5:98:38:e8:7b:4f:54:1f:77:68:55:ec:78:08:
                    2d:8d:d0:67:a9:1f:4f:1b:83:cc:2e:04:9b:40:08:
                    a4:34:00:ae:fa:7e:97:8f:3a:27:5e:e5:91:b3:26:
                    d8:21:6d:80:29:f9:a3:2a:d7:a4:9e:39:85:7e:bb:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:2D:EB:56:3A:E2:33:69:1C:BB:2C:3C:AC:23:47:9C:9D:B1:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216093

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:d2:bc:2c:e0:24:bd:db:97:dd:86:03:81:d9:86:fb:79:
         0a:8d:8b:40:c6:15:f6:ae:70:a6:b6:d3:47:c6:23:ec:16:21:
         6c:8b:b1:5a:9a:32:a1:a9:44:1c:ab:24:08:9b:e4:ae:a3:cb:
         19:34:75:89:86:00:44:23:ea:6c:63:5f:8b:ae:16:9d:26:0e:
         83:0f:b2:ea:23:75:53:49:e3:ba:55:e6:f4:3c:9b:c4:5d:55:
         71:5c:0e:c4:57:c4:f2:d2:ff:a4:97:a7:bc:ff:29:27:bb:06:
         d1:f3:d0:15:44:6b:b2:89:7f:f8:59:46:cc:98:ef:24:3f:56:
         58:3b:34:27:0d:db:14:86:d0:4f:bc:b7:65:13:82:19:ee:c9:
         1f:44:75:b6:bf:37:eb:d2:7a:03:aa:70:2d:8d:54:63:4b:d2:
         cb:0f:a3:b4:74:f1:97:87:7b:f0:93:bc:44:a6:58:98:d3:a9:
         d0:7f:7d:b4:28:ad:cd:36:33:11:cb:26:02:c5:95:bb:2e:c5:
         04:72:f4:b7:b7:d3:be:20:89:06:80:fc:3f:ad:74:ef:24:da:
         c1:ce:d2:b3:1f:80:50:19:6a:58:3b:cd:1e:55:b9:55:06:92:
         c1:02:d7:9f:ad:06:18:ec:dd:f9:33:f9:b3:c3:e5:bd:10:ce:
         43:da:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----