Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JM_NiKGX2b2fSyzyd6lkVjMmQSM.cer
File:                     JM_NiKGX2b2fSyzyd6lkVjMmQSM.cer (raw, json)
Hash identifier:          10ejF0a3mjJMDvsdeBa8/3mhqW4lyXxSFdNmS5LvABI=
Subject key identifier:   24:CF:CD:88:A1:97:D9:BD:9F:4B:2C:F2:77:A9:64:56:33:26:41:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DA2646634B0E62F1B906292D2181BF961
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/bede6e-48bd-40a6-a049-052fd1c213e0/1/JM_NiKGX2b2fSyzyd6lkVjMmQSM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/bede6e-48bd-40a6-a049-052fd1c213e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:15:05 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215517

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 08:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a2:64:66:34:b0:e6:2f:1b:90:62:92:d2:18:1b:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 13 12:15:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=24cfcd88a197d9bd9f4b2cf277a9645633264123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:ff:f7:86:5f:52:a4:73:e9:4d:83:62:97:
                    e0:9a:c4:d3:f1:ba:18:f0:ad:51:99:63:17:ad:24:
                    a2:03:4a:d2:15:08:21:31:db:2b:3a:ef:18:f6:6c:
                    dc:63:4c:cc:90:be:a7:69:ba:2b:a2:93:f7:3e:63:
                    1e:5a:18:92:5f:68:ba:46:4a:09:5d:01:16:a0:a0:
                    6a:94:45:d9:fe:05:7f:ad:93:56:53:c7:b2:36:b4:
                    2c:11:d4:46:27:6f:d4:a4:d1:c5:99:40:c9:50:47:
                    35:10:4e:9d:7c:95:59:e9:60:43:c0:4b:7f:60:91:
                    8e:0b:71:96:16:7b:24:6d:a1:93:fa:14:07:50:af:
                    d6:01:17:5d:ee:d4:82:09:13:16:c7:fb:8b:65:2f:
                    32:bb:04:09:c4:65:a4:0b:75:6d:f4:f6:25:cf:63:
                    28:a7:2b:79:71:28:86:94:58:b5:a2:3a:55:65:a0:
                    e4:a6:42:4b:75:f2:ee:2f:7f:7b:cf:0a:56:eb:25:
                    4d:06:1d:2c:3a:b9:97:c7:51:ba:66:9d:95:75:90:
                    99:09:20:0a:a9:3a:9f:e9:85:4e:08:ae:a9:c7:8e:
                    f4:a9:6c:6f:3c:95:e9:35:72:4b:60:30:cc:6c:12:
                    7b:b9:cb:27:3b:54:20:1f:06:9f:d0:d8:75:44:97:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CF:CD:88:A1:97:D9:BD:9F:4B:2C:F2:77:A9:64:56:33:26:41:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bede6e-48bd-40a6-a049-052fd1c213e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bede6e-48bd-40a6-a049-052fd1c213e0/1/JM_NiKGX2b2fSyzyd6lkVjMmQSM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215517

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:12:1c:fe:d2:6b:6b:d0:dd:63:5b:7c:ce:e9:f1:6d:f1:
         23:df:75:6a:3e:0c:d9:67:11:0d:a1:2c:6f:9f:09:a2:85:87:
         d3:7c:ab:76:91:a7:c9:21:29:6b:09:b5:7f:7f:7e:b6:cc:1a:
         57:0d:1c:d4:e1:96:10:ac:7f:23:3d:b4:b6:64:56:f6:92:66:
         d3:4d:c7:dd:6e:be:91:f7:70:7a:e9:d1:2a:05:66:65:3e:7b:
         8d:36:b5:25:2e:b2:c3:aa:7e:38:42:c0:4f:03:c6:55:88:25:
         a6:65:d6:ca:82:8d:96:ef:fe:9c:1f:5b:33:5d:73:a2:19:bf:
         1e:99:9a:f1:ac:e4:1e:59:7d:48:bc:4d:04:05:8b:06:34:bc:
         7f:bf:62:0f:ee:04:2b:bd:40:ee:78:98:a6:05:9b:ec:07:b9:
         5c:cf:e6:04:ad:ec:c2:dd:36:f1:c1:a4:2d:8b:8e:a7:76:c6:
         43:8e:5b:91:a3:3d:d0:e2:ff:08:a5:31:f8:7d:2c:07:71:81:
         cf:c1:68:bf:d3:2e:d0:5a:aa:45:cc:dd:74:5f:68:8e:55:ac:
         08:26:39:a5:4e:7f:f8:e6:61:c3:b7:bc:4f:61:8d:d4:c6:f7:
         b7:1b:6b:bd:3f:02:04:19:7c:6c:3b:e2:f1:19:2c:7d:7a:f6:
         1d:78:23:fc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY2iZGY0sOYvG5BiktIYG/lhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjEzMTIxNTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGNmY2Q4OGExOTdkOWJkOWY0YjJjZjI3N2E5NjQ1NjMzMjY0MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbr/94ZfUqRz6U2DYpfgmsTT8boY
8K1RmWMXrSSiA0rSFQghMdsrOu8Y9mzcY0zMkL6naboropP3PmMeWhiSX2i6RkoJ
XQEWoKBqlEXZ/gV/rZNWU8eyNrQsEdRGJ2/UpNHFmUDJUEc1EE6dfJVZ6WBDwEt/
YJGOC3GWFnskbaGT+hQHUK/WARdd7tSCCRMWx/uLZS8yuwQJxGWkC3Vt9PYlz2Mo
pyt5cSiGlFi1ojpVZaDkpkJLdfLuL397zwpW6yVNBh0sOrmXx1G6Zp2VdZCZCSAK
qTqf6YVOCK6px470qWxvPJXpNXJLYDDMbBJ7ucsnO1QgHwaf0Nh1RJfuyQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCTPzYihl9m9n0ss8nepZFYzJkEjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2JlZGU2
ZS00OGJkLTQwYTYtYTA0OS0wNTJmZDFjMjEzZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvYmVkZTZl
LTQ4YmQtNDBhNi1hMDQ5LTA1MmZkMWMyMTNlMC8xL0pNX05pS0dYMmIyZlN5enlk
NmxrVmpNbVFTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNJ3TANBgkqhkiG9w0BAQsFAAOCAQEAJA8SHP7Sa2vQ
3WNbfM7p8W3xI991aj4M2WcRDaEsb58JooWH03yrdpGnySEpawm1f39+tswaVw0c
1OGWEKx/Iz20tmRW9pJm003H3W6+kfdweunRKgVmZT57jTa1JS6yw6p+OELATwPG
VYglpmXWyoKNlu/+nB9bM11zohm/Hpma8azkHll9SLxNBAWLBjS8f79iD+4EK71A
7niYpgWb7Ae5XM/mBK3swt028cGkLYuOp3bGQ45bkaM90OL/CKUx+H0sB3GBz8Fo
v9Mu0FqqRczddF9ojlWsCCY5pU5/+OZhw7e8T2GN1Mb3txtrvT8CBBl8bDvi8Rks
fXr2HXgj/A==
-----END CERTIFICATE-----