Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.cer
File:                     6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.cer (raw, json)
Hash identifier:          SQMs0vnxV4h4zSrwQ3lbuvCyJHaU8uKLHmlYGRSHHYE=
Subject key identifier:   E8:D9:37:77:56:72:01:5D:9D:D6:07:55:54:A1:AD:F8:BB:6C:CA:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B744FCE72F07FA65CADC070EF7AD85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:30:17 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 205421

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 12:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:44:fc:e7:2f:07:fa:65:ca:dc:07:0e:f7:ad:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:30:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8d937775672015d9dd6075554a1adf8bb6cca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:01:ca:a7:81:2f:ef:3c:c9:45:a7:0e:76:
                    4c:e4:cf:ed:29:13:34:90:9f:86:d3:2e:31:61:7c:
                    12:44:fe:2a:29:28:c0:7e:23:7c:c2:5d:49:00:a5:
                    41:dd:12:44:20:55:31:a1:3f:6a:f8:e0:fe:30:c5:
                    02:5b:45:32:f2:e8:03:a9:d9:8e:44:0c:7a:b8:12:
                    96:7d:02:ae:a2:d5:8d:0d:ab:4f:35:97:45:90:7b:
                    62:15:5a:aa:85:69:77:62:d3:b2:5e:04:7e:ba:98:
                    47:91:2b:40:a8:9c:f8:05:52:e1:c1:4f:d0:f4:60:
                    05:41:f0:f9:1f:b1:bd:ae:03:c8:05:2f:9e:7a:f1:
                    02:3a:ab:75:59:aa:41:3b:78:11:41:0c:96:77:b8:
                    2a:99:18:ca:bd:bc:3d:56:2e:e7:2c:b6:26:83:bb:
                    e0:e0:e2:4b:8b:7b:d9:b2:4d:c7:c8:ca:35:06:b8:
                    09:6d:f2:09:d6:6c:16:b7:ec:0e:f5:51:5d:70:8c:
                    ba:e5:b5:15:75:97:3e:6d:d9:40:e4:a9:b0:80:34:
                    91:20:b3:11:8d:cb:38:ce:fa:5d:80:4d:db:89:12:
                    6b:28:ae:6b:be:ed:b2:ea:cd:75:bb:31:68:b8:e4:
                    eb:6b:73:51:c7:0f:78:9b:d0:c7:a7:19:fd:b7:50:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:37:77:56:72:01:5D:9D:D6:07:55:54:A1:AD:F8:BB:6C:CA:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205421

    Signature Algorithm: sha256WithRSAEncryption
         31:80:d5:48:ac:94:48:26:05:22:e4:45:3f:f5:69:68:6a:cc:
         ed:bd:c2:28:c1:1a:c1:e4:0a:6d:a8:c7:e1:f0:74:63:3b:b1:
         35:43:08:2b:4c:b8:8c:77:48:d8:ac:e8:f3:31:ab:b6:4a:a6:
         a1:5b:72:02:ff:c7:3a:8d:9a:ac:4d:3e:da:16:c5:1d:dc:75:
         64:dd:a6:45:32:0d:c8:c1:e3:33:1d:13:b0:9e:d8:4e:2b:6b:
         70:0f:36:e5:92:51:f0:5d:d4:f5:bd:d3:af:0f:ad:6c:3f:53:
         93:ed:1e:23:5f:98:85:48:b9:fa:d6:fa:69:46:bf:01:65:30:
         94:f5:6a:eb:8f:c9:16:1a:51:0a:b3:05:3e:3a:07:36:e8:6f:
         fd:77:a4:c0:d3:d0:c0:e1:64:1a:23:43:1e:0e:ec:72:86:dc:
         11:8a:83:67:bf:3d:9b:ec:da:86:ab:c7:28:53:f6:9c:33:ad:
         64:80:35:c1:e0:b9:ae:5e:9f:b0:fc:8a:44:5f:2a:c8:a7:d4:
         11:84:db:57:7d:d9:0f:b9:f9:82:dd:3e:bc:8c:62:ed:fe:2c:
         f1:64:e4:79:8e:4b:ef:e8:68:cf:6b:4e:45:6b:42:77:b3:2d:
         c3:f5:e4:df:83:b9:f0:81:7b:24:fc:70:92:d1:03:24:78:4e:
         95:a0:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----