Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JwZSp6anw5v8yEL3wt1wnmBQMSg.cer
File:                     JwZSp6anw5v8yEL3wt1wnmBQMSg.cer (raw, json)
Hash identifier:          +sccL9D+kHReHP88dIwayFiudsJ4jzelF49xv2/+8I0=
Subject key identifier:   27:06:52:A7:A6:A7:C3:9B:FC:C8:42:F7:C2:DD:70:9E:60:50:31:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018DAB9DA9D6903ED3F03BC39AB16060DCC1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/61f06c-8cd1-49fe-ade9-3e99548ab53c/1/JwZSp6anw5v8yEL3wt1wnmBQMSg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/61f06c-8cd1-49fe-ade9-3e99548ab53c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Feb 2024 07:14:13 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215527

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 05:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ab:9d:a9:d6:90:3e:d3:f0:3b:c3:9a:b1:60:60:dc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 15 07:14:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=270652a7a6a7c39bfcc842f7c2dd709e60503128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:95:7f:1d:15:ab:49:0c:5b:2c:d4:75:09:
                    e3:e8:05:82:ea:7e:a0:6e:49:03:86:bb:7d:36:f4:
                    b5:13:78:ba:09:d7:92:1d:08:f1:eb:8a:d4:41:27:
                    da:03:64:fd:06:f6:72:0b:c2:2e:a7:2c:9a:2d:3a:
                    44:0f:e6:59:a8:6f:e5:01:17:b1:bd:df:e9:49:af:
                    b8:fc:97:07:49:13:bc:16:e8:c7:ba:75:72:95:a6:
                    c6:4b:e5:03:14:9b:e1:70:57:03:66:c6:f1:19:53:
                    e3:86:08:da:72:a1:9c:23:bb:9e:ff:bd:9f:61:4d:
                    d4:a2:77:3d:47:b6:62:96:b6:d2:23:ee:3d:9b:1d:
                    47:9a:fe:39:96:4b:5e:8a:a9:9f:ac:f8:2b:fa:42:
                    8c:04:f2:8c:5f:b5:5a:ab:27:37:3a:29:86:3f:d2:
                    70:ea:10:65:32:c3:2e:0c:6b:3b:b7:ce:77:78:3f:
                    cf:30:d7:24:f5:06:74:2d:5b:53:83:c7:ca:e9:b0:
                    9a:bc:07:e7:54:dd:2c:22:bc:20:d6:43:8d:b5:18:
                    e9:53:fc:fd:63:8e:b5:79:5a:97:32:e4:20:ea:8c:
                    31:ea:bf:05:a9:54:8f:e8:2a:1c:d0:02:7f:28:a4:
                    af:a7:92:07:d4:a2:d8:8f:3f:c7:cd:d6:46:0f:ae:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:52:A7:A6:A7:C3:9B:FC:C8:42:F7:C2:DD:70:9E:60:50:31:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/61f06c-8cd1-49fe-ade9-3e99548ab53c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/61f06c-8cd1-49fe-ade9-3e99548ab53c/1/JwZSp6anw5v8yEL3wt1wnmBQMSg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215527

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:27:11:be:bf:c5:6b:00:7b:86:85:31:2f:b9:9b:10:0a:
         1e:4c:0f:53:9e:ae:38:5d:5f:0d:e9:28:e2:2b:10:4a:a1:ad:
         dc:43:99:9b:8d:04:03:b5:15:f7:eb:e1:f9:12:7c:2f:ed:b5:
         1d:f2:0a:fe:10:f1:d0:91:11:9e:5d:d4:62:96:41:71:39:63:
         83:36:99:01:4e:45:55:7a:d9:b1:30:44:c7:7a:5b:55:fd:47:
         92:f4:72:43:e1:3a:f9:b9:5f:61:e1:74:fe:a8:f0:cd:79:fb:
         ab:c4:bf:67:3b:bc:f9:ea:e5:d2:54:5f:5b:cb:5e:a8:41:a0:
         02:30:0e:b5:64:84:da:88:65:eb:8b:e3:37:63:58:9e:e3:e6:
         af:f5:80:f8:16:2b:be:69:8b:18:c9:52:8f:05:a3:da:bb:7d:
         b3:a4:97:fb:91:5e:1e:a0:fa:e6:20:1a:81:aa:fa:96:5d:40:
         0a:56:56:14:e7:a4:d7:ea:87:99:ae:9b:b3:9a:94:f3:69:09:
         95:1d:d0:01:da:0b:88:6b:90:86:bb:16:d0:9f:e2:9a:72:12:
         8e:4f:4c:74:38:14:57:07:8e:a9:d2:0a:78:ca:ca:60:29:7d:
         12:05:8b:5d:c6:01:31:ea:c9:47:e3:15:b1:c4:b0:4a:97:f4:
         cf:64:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----