Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D8NJHE8k4f3psAgvAYjtEcShnjQ.cer
File:                     D8NJHE8k4f3psAgvAYjtEcShnjQ.cer (raw, json)
Hash identifier:          C17OniPLD7Er3Evhqt42GTJ4ko8tmMcGYoVGy996fbc=
Subject key identifier:   0F:C3:49:1C:4F:24:E1:FD:E9:B0:08:2F:01:88:ED:11:C4:A1:9E:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191B30FD6F30EB0AEEB22C14A97F38A0BD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 14:07:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 44324

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:0f:d6:f3:0e:b0:ae:eb:22:c1:4a:97:f3:8a:0b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  2 14:07:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0fc3491c4f24e1fde9b0082f0188ed11c4a19e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:24:09:86:f1:dd:d2:0c:1d:6e:0d:6e:0c:
                    9f:96:16:2e:9c:20:cf:7a:89:22:2a:d9:2f:98:f2:
                    e8:dc:b3:21:b8:e5:33:3a:52:96:f5:e4:44:fd:3c:
                    ae:62:d9:a0:97:90:8f:33:87:eb:96:25:5f:f1:cb:
                    2a:d8:66:76:e0:39:12:45:7d:77:62:23:62:80:9d:
                    e0:75:7b:83:18:69:05:e1:2b:10:b6:de:ed:f9:5e:
                    ed:34:f5:3d:2a:20:27:b1:62:83:59:b9:11:9a:ac:
                    4b:60:92:08:4c:58:d7:c5:6a:3b:76:1c:8f:ca:ee:
                    ff:51:c7:c1:d8:7f:9c:90:0d:4a:3a:0a:05:0e:58:
                    c6:5f:d1:96:13:64:1a:48:42:f9:a2:e5:c4:84:f1:
                    ae:72:53:83:7f:90:95:7b:20:14:f1:73:6b:cb:b1:
                    15:c0:3d:eb:91:c7:cb:85:4e:8a:84:de:e5:dd:db:
                    c9:4b:44:df:d9:8a:95:20:2f:2f:20:f8:2c:86:49:
                    d7:7d:9d:27:cc:5a:83:3e:e3:6e:bc:6a:fb:1d:3f:
                    38:00:50:86:97:6c:2f:06:19:1b:7a:ed:da:d6:16:
                    5d:fa:40:1d:00:25:81:db:6c:ae:c0:aa:73:b6:f4:
                    85:42:6c:95:d1:d7:b8:79:63:97:18:bd:82:6d:7a:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:49:1C:4F:24:E1:FD:E9:B0:08:2F:01:88:ED:11:C4:A1:9E:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44324

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:e4:2c:75:fe:a1:f9:fe:86:75:a3:df:93:bd:48:3e:94:
         64:23:cb:03:9e:50:0a:02:7e:9e:8b:5c:c7:48:3c:74:10:d2:
         96:a3:c6:3b:fb:52:85:90:74:1f:34:f9:26:b6:55:2e:5a:1d:
         40:b7:61:89:93:01:71:84:95:e8:ac:5f:81:f6:99:72:83:54:
         33:69:aa:b4:c9:c6:d1:d8:ad:cd:55:1b:06:c9:4f:6b:c2:77:
         fc:77:62:20:4d:7d:75:a2:28:af:a6:1a:bf:00:d0:2e:39:f3:
         c0:21:3c:4d:f1:36:65:54:97:a2:db:21:33:5a:a5:61:30:7b:
         3e:b8:ce:c7:5c:23:ae:35:70:c4:6e:f4:67:96:d8:ac:58:8b:
         ff:dc:8b:57:fd:d1:bb:95:e9:5a:68:75:86:e4:01:66:7e:f7:
         95:e3:7d:15:25:a3:b0:0a:5c:10:83:a4:da:7b:1a:ae:42:ea:
         74:87:83:53:2e:48:33:d8:3f:67:5c:cf:6f:67:b8:aa:e9:36:
         f6:77:1a:34:27:5b:6e:ad:7c:67:4c:a8:9f:9e:30:fb:b7:57:
         83:51:d1:48:9a:5d:f5:c6:b8:ec:d9:60:85:e7:40:ec:85:b4:
         91:e1:fb:90:d0:80:a3:89:57:f2:52:a2:e4:e8:b4:83:6e:81:
         cd:54:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----