Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FnGEiAWpBHcXdl3qswmVuS-ukAE.cer
File:                     FnGEiAWpBHcXdl3qswmVuS-ukAE.cer (raw, json)
Hash identifier:          wJAPjF1r1hrbFnEn9+D0W51CW/SRhabS3i4+mucNyuM=
Subject key identifier:   16:71:84:88:05:A9:04:77:17:76:5D:EA:B3:09:95:B9:2F:AE:90:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191C8B19D6A6E3912CE0022EE9A21D8E217
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/1671848805A9047717765DEAB30995B92FAE9001.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 06 Sep 2024 18:56:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 198980

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 17:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c8:b1:9d:6a:6e:39:12:ce:00:22:ee:9a:21:d8:e2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  6 18:56:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1671848805a9047717765deab30995b92fae9001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:a0:e9:a9:39:e6:56:1b:dc:f7:67:c6:ae:
                    8a:3e:35:23:eb:e0:da:bc:2f:38:09:3f:33:cb:43:
                    cb:53:e4:fc:fb:79:f5:98:80:c5:ca:2c:26:f4:b7:
                    da:78:e9:92:93:32:22:13:27:2a:79:87:7e:74:91:
                    60:79:bb:20:1d:8f:c3:db:9f:cf:d8:63:af:b5:02:
                    4c:69:4d:7d:70:54:91:c8:cf:90:9b:a4:00:41:27:
                    f2:97:bf:50:41:5d:4b:82:79:db:b4:74:71:9d:b8:
                    57:01:f5:28:ea:6c:4c:e9:ee:e7:71:6d:3f:a8:cf:
                    bd:21:c7:bc:76:b8:05:4e:eb:ae:d4:ae:d1:e4:de:
                    13:f4:e7:3e:53:3d:42:a1:81:cf:70:f0:12:1c:de:
                    b1:23:91:2b:e1:23:97:e3:05:da:c8:45:d4:f8:b4:
                    17:2c:2e:5a:e5:39:d4:c9:83:9f:0b:12:68:fc:1c:
                    0b:10:2d:57:79:e4:61:2a:80:80:db:43:27:8f:25:
                    2a:76:06:64:ac:b8:08:08:bd:7f:89:2b:d0:64:7c:
                    65:32:12:40:95:3a:6d:4a:06:14:fd:f9:09:11:b0:
                    df:c0:dc:51:9a:84:13:35:5d:09:9d:ed:8f:cd:c7:
                    fd:d1:24:57:ba:0a:02:db:7e:1c:b4:0d:68:7a:37:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:71:84:88:05:A9:04:77:17:76:5D:EA:B3:09:95:B9:2F:AE:90:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/7/1671848805A9047717765DEAB30995B92FAE9001.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198980

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:1b:eb:8d:c0:53:ed:9b:ea:59:8a:84:c2:91:d4:7d:d8:
         cc:52:f4:52:c9:90:4b:df:15:16:5a:96:15:a1:fd:68:42:db:
         fb:f5:ab:b1:c3:32:b4:11:35:15:0a:33:55:8a:53:55:fb:8c:
         ac:c8:bb:a1:f6:8a:18:4c:e2:28:85:e9:38:f1:66:d6:e1:8e:
         e7:c6:85:d3:af:a5:e0:67:e5:40:a3:3d:f0:02:56:50:66:9f:
         cb:45:0a:78:fa:da:fc:c9:bd:6d:e6:df:a7:b8:b0:2f:4c:58:
         a7:74:5c:00:86:79:30:76:74:57:2c:48:6e:a3:5d:73:84:b1:
         da:ee:4c:86:a4:7b:87:0d:f6:83:cb:e2:3c:39:e0:23:ef:12:
         2c:92:61:d4:7d:d1:98:b0:91:49:bf:a0:49:be:03:2e:3b:92:
         a5:fa:8c:2c:6b:5a:3b:f4:53:2f:ec:3b:e0:71:41:47:d9:10:
         89:3b:9b:a3:e9:30:57:d3:81:b5:1f:17:c1:18:33:d1:9d:c8:
         1a:d3:2b:19:3d:1b:9d:76:e7:52:87:e4:58:d1:4e:2d:da:34:
         ac:14:4f:86:77:ba:66:07:00:93:4b:70:9e:d6:df:21:1a:93:
         2c:dd:25:00:ca:f4:8a:25:3e:2e:d7:0d:9a:37:d9:7a:e9:98:
         9a:3b:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----