Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer
File:                     DNFtkupuJlmryXpdrQsZliXMzT4.cer (raw, json)
Hash identifier:          Ku4X8kA7FRZYtKQh3G58lGXn6Z27qJLt9GsKv32U/tc=
Subject key identifier:   0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187D786C98E7F8C40D7BDB1BFE8060D6A4D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 May 2023 13:35:47 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.206.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d7:86:c9:8e:7f:8c:40:d7:bd:b1:bf:e8:06:0d:6a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 13:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:3f:0e:b4:ee:c4:f4:db:a6:96:1b:0d:2b:
                    01:80:62:05:99:c1:3f:20:93:e8:47:d7:e6:1a:6c:
                    44:84:47:73:55:50:d0:d3:43:81:c5:ee:85:be:47:
                    b2:56:c5:16:fe:1e:5b:19:5d:64:32:e2:c4:cd:8a:
                    ab:62:d1:4d:3e:c9:2d:23:19:1c:ec:13:ca:57:50:
                    76:9d:62:c4:30:71:4c:4e:f9:9d:49:f4:97:e9:be:
                    33:37:1c:6f:6f:1e:90:17:4e:f3:c1:20:95:a7:a9:
                    f2:5e:1d:a5:eb:a5:5b:1b:4a:d6:6f:b2:21:7b:fb:
                    41:80:9f:d3:51:25:0f:71:8f:11:4d:75:2c:6a:53:
                    f9:67:0e:e0:e0:37:50:ff:ff:e9:e8:34:e7:72:ed:
                    7f:1f:16:b1:83:8c:61:a9:a0:df:82:bc:1f:0e:a0:
                    fb:db:e8:88:fc:10:fe:f5:ec:55:f6:83:d4:b2:0f:
                    02:98:4c:15:5b:68:d5:40:ce:44:6f:2f:49:8b:98:
                    02:d0:ce:9e:91:58:3d:0d:87:b0:c6:29:0f:b3:c4:
                    93:57:7e:fd:aa:fa:32:0b:5e:d7:df:6c:44:a5:ab:
                    c8:5b:8d:52:e4:dc:52:72:cf:12:f0:60:e7:05:af:
                    6a:40:ad:c4:34:f9:9b:b9:2e:85:d1:1b:50:88:d9:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fb:82:f5:9c:b2:ca:40:3f:d4:83:a0:0e:b0:77:29:e9:63:
         80:73:3e:1e:5b:06:15:ac:c9:e4:f8:26:ea:9e:de:a2:de:12:
         7a:ac:ea:7d:26:a3:bf:69:08:b8:f0:d4:ca:c4:44:50:86:b5:
         9c:6d:8e:e7:ba:2d:d0:4e:68:ac:66:28:d5:5c:e5:d3:c2:07:
         0c:fd:f6:7f:f1:f0:3a:20:64:9e:d0:ed:73:1b:90:35:14:2e:
         66:a5:6a:15:d9:3a:15:3a:57:bc:79:d3:4b:5c:37:9f:be:3e:
         fe:b1:a2:c2:f4:66:a9:52:de:2b:2e:74:17:10:fa:6f:da:f2:
         a9:6d:2a:93:7e:15:86:6d:df:d6:25:19:a7:9c:c8:c7:51:66:
         c8:1a:21:88:28:fa:ac:cf:98:13:df:ce:4f:9d:be:49:05:d8:
         85:f0:4c:08:e0:ec:4d:e0:ff:1b:4d:04:0e:ff:09:07:3b:f6:
         72:07:93:c6:08:b4:3b:86:b7:82:d5:38:a1:3a:0e:04:a0:a2:
         04:d2:5c:9f:25:44:ec:85:42:41:07:b0:0a:1b:6f:0e:5b:d4:
         da:bb:2b:f0:4e:5b:3a:7b:b8:9f:7f:3d:64:3b:72:45:c8:c2:
         82:4d:2d:97:c2:a7:a7:9f:f3:18:03:7c:db:df:5d:d1:33:af:
         52:22:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 16:30:57 2023 by rpki-client on console-fra.rpki-client.org