Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Em89BDP7ypDYJwXnsThjhVAEqDk.cer
File:                     Em89BDP7ypDYJwXnsThjhVAEqDk.cer (raw, json)
Hash identifier:          OTM8hZ9RakdRxdsqKxaKHCxFxKB3kne95mRgaKodzDA=
Subject key identifier:   12:6F:3D:04:33:FB:CA:90:D8:27:05:E7:B1:38:63:85:50:04:A8:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A05E15951392D757B01B9DB0DDD1FB410
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/Em89BDP7ypDYJwXnsThjhVAEqDk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 17 Aug 2023 23:42:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216455

Validation:               Failed, certificate revoked on Fri 18 Aug 2023 00:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:05:e1:59:51:39:2d:75:7b:01:b9:db:0d:dd:1f:b4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 17 23:42:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=126f3d0433fbca90d82705e7b13863855004a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:11:b0:1c:38:7c:f4:ae:fe:18:71:67:3e:
                    01:69:fa:dc:bb:35:84:a8:f5:f2:72:b7:d8:f3:e2:
                    60:6a:e6:68:84:ab:17:02:bb:bc:ab:58:80:2c:81:
                    f4:c2:3f:ec:95:5b:82:05:8a:d7:e6:2d:d5:69:fe:
                    a4:88:f3:41:00:90:50:09:42:b1:05:6e:a9:25:6f:
                    66:f0:5f:bb:3a:58:27:be:3c:93:02:08:60:06:ed:
                    ec:59:cd:64:2e:45:68:f7:0a:95:ab:86:2a:9a:3b:
                    5a:88:97:ae:de:42:9f:6f:96:56:63:62:76:95:3c:
                    6f:6f:6b:57:7f:be:a0:f5:5f:40:18:ea:8e:2e:f5:
                    b4:9e:6e:a4:90:96:dd:72:e7:97:ff:b6:da:20:ef:
                    52:2b:c2:9f:ee:4c:df:27:12:1d:00:d9:a8:19:14:
                    ed:f8:7f:78:6f:76:dc:39:80:aa:d9:a8:91:75:fb:
                    ab:a0:91:e6:0d:3c:21:09:74:bd:47:75:c9:c2:d4:
                    e9:a3:46:04:4b:96:25:98:b2:81:2f:03:3f:d6:fe:
                    00:58:ae:d8:a2:61:41:c8:a8:61:37:f5:9c:c8:ec:
                    a2:18:c6:bc:35:10:48:61:aa:7b:29:7d:df:2e:77:
                    d6:04:c1:dd:04:4f:2b:e2:10:63:4d:1d:56:dc:27:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6F:3D:04:33:FB:CA:90:D8:27:05:E7:B1:38:63:85:50:04:A8:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b6c31b-9e6a-40fa-8a79-0b8a42d4f219/1/Em89BDP7ypDYJwXnsThjhVAEqDk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216455

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:55:d2:08:61:88:57:0a:1f:40:a5:4f:83:6a:4e:c4:af:
         40:95:c1:0e:af:b7:40:03:ba:2e:46:8e:c7:55:90:f1:83:8f:
         66:eb:76:26:97:38:bc:7f:dd:0a:a2:78:f6:9e:03:8e:01:cd:
         3b:f8:8b:3e:e0:02:7b:ab:2c:3a:e1:a3:80:4d:b3:84:42:97:
         4d:fa:a9:87:d7:4b:ad:1b:c5:9d:b9:98:e2:7a:18:7c:6b:9a:
         1f:79:2e:6f:d4:c3:bd:c8:eb:68:10:1a:8d:e3:c3:b4:44:9e:
         d3:54:55:b0:9f:0b:a3:44:e2:e2:16:a5:d4:14:ed:8e:2f:61:
         7a:d8:9e:98:8e:96:01:48:f3:4c:e4:9d:ad:a4:11:2f:bb:71:
         91:ec:59:bf:62:ef:ce:e2:d4:d9:ad:0d:7b:bb:00:68:ef:05:
         60:0e:20:43:2d:2d:11:0d:ad:fb:83:a9:73:e3:e7:87:91:6c:
         9a:89:c2:4c:52:aa:ce:80:15:67:d3:f3:2b:78:4b:b3:ff:2f:
         c1:16:96:2f:2e:23:ad:2d:9a:dd:3f:9f:4e:aa:03:98:2d:32:
         9d:8a:14:9d:4d:72:c7:c5:df:d0:09:9f:10:52:d9:5a:d4:08:
         bf:8f:f1:a5:e1:81:fc:87:30:d0:5f:d9:ec:4e:b4:bd:18:eb:
         6f:f8:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----