Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KnFmveDRO-ugNGRU8x3IoSuEKf0.cer
File:                     KnFmveDRO-ugNGRU8x3IoSuEKf0.cer (raw, json)
Hash identifier:          ag8KHmQ4I6hJSzPJjBme9U7+bfgWkNxqkHJzJoX8Rqk=
Subject key identifier:   2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018E2E1D3E60A6B4C791791881A57DA8A852
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/KnFmveDRO-ugNGRU8x3IoSuEKf0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 11 Mar 2024 15:24:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204935

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2e:1d:3e:60:a6:b4:c7:91:79:18:81:a5:7d:a8:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 15:24:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2a7166bde0d13beba0346454f31dc8a12b8429fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:36:ab:a2:ff:22:ab:87:f6:85:3f:f8:89:
                    af:2a:c8:6f:a3:e8:b3:69:42:c5:a2:b1:a2:30:b4:
                    32:78:5e:17:cf:ea:fc:3d:e5:ad:e0:13:57:3a:70:
                    5b:72:af:35:59:a5:4f:26:a4:2b:9b:2e:ca:6e:0a:
                    a9:41:1b:ef:cd:1e:d9:94:a6:d6:49:d9:21:81:e3:
                    91:4c:53:5e:9f:cd:59:22:bc:ec:73:04:29:a1:61:
                    aa:a3:50:8a:c4:48:2d:e9:fd:3e:d2:ac:e6:5f:a9:
                    d7:b3:45:f0:8b:8c:2a:fa:f6:ca:94:62:92:02:9a:
                    46:a3:78:d5:a7:92:9a:23:7b:48:7f:7a:ef:9f:f9:
                    ba:df:b8:0a:4b:41:9c:29:8e:55:0f:7e:ee:5e:35:
                    da:ec:aa:6f:63:60:28:e1:de:e8:f3:6b:a7:fb:66:
                    0e:0d:e0:3d:2e:f5:1c:69:44:6a:72:15:63:85:dc:
                    99:8b:cc:8d:1e:75:a5:66:a1:9e:20:8e:a0:4d:57:
                    41:e0:29:8f:8b:6d:25:9d:72:ad:3f:6e:e6:ca:bf:
                    65:a8:18:50:3b:74:98:14:96:31:a5:c5:fa:5e:5a:
                    4d:89:72:c8:84:9a:26:fa:df:42:9c:91:d7:49:34:
                    27:2c:c4:45:fc:96:a4:71:7d:af:8e:17:c3:b9:72:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:66:BD:E0:D1:3B:EB:A0:34:64:54:F3:1D:C8:A1:2B:84:29:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bbc08d-aa24-4750-b75a-a9f752d408ff/1/KnFmveDRO-ugNGRU8x3IoSuEKf0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204935

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:ec:49:7b:34:8b:15:ed:0f:44:8b:b6:1d:c9:3c:3f:50:
         27:c6:35:63:3b:35:7b:0b:f8:93:8b:1e:f6:26:6d:e6:2e:6c:
         6d:0f:8f:5d:fb:5e:50:07:d1:e3:c1:ed:b5:8f:3b:b8:fb:cd:
         97:d0:a9:7b:74:bd:5f:d5:81:7d:d2:a3:22:cc:3d:b1:17:9f:
         fa:3a:40:ab:94:9b:bb:54:78:99:b5:fa:31:5f:c8:b6:c8:35:
         8d:bb:9d:c9:42:8c:e8:5e:5c:7e:34:36:11:d0:18:70:98:66:
         45:e3:df:6e:02:8b:b2:c0:33:54:6e:e5:c7:da:b8:83:4f:25:
         71:12:da:5b:02:32:5e:be:b8:4b:14:a7:40:a0:e7:8c:1f:f3:
         2b:85:75:79:8a:39:7c:f8:5f:51:23:8a:51:80:60:fb:9b:1e:
         b0:14:58:6d:80:5a:bb:23:5e:c4:a0:0d:12:13:8c:1f:42:22:
         14:aa:db:5e:66:b5:56:8f:67:ce:38:67:48:da:15:cc:d7:cd:
         01:23:1c:65:df:ba:bc:9f:a8:7d:ad:3a:f4:0d:f9:b8:50:5f:
         ed:19:0f:ab:5c:57:e0:14:b5:bc:3f:bf:23:77:3d:ec:b6:bc:
         0a:0e:94:e0:3d:dc:4e:8a:cc:1e:7a:86:82:95:9c:60:d9:80:
         8e:a8:da:51
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY4uHT5gprTHkXkYgaV9qKhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzExMTUyNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTcxNjZiZGUwZDEzYmViYTAzNDY0NTRmMzFkYzhhMTJiODQyOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d42q6L/IquH9oU/+ImvKshvo+iz
aULForGiMLQyeF4Xz+r8PeWt4BNXOnBbcq81WaVPJqQrmy7KbgqpQRvvzR7ZlKbW
SdkhgeORTFNen81ZIrzscwQpoWGqo1CKxEgt6f0+0qzmX6nXs0Xwi4wq+vbKlGKS
AppGo3jVp5KaI3tIf3rvn/m637gKS0GcKY5VD37uXjXa7KpvY2Ao4d7o82un+2YO
DeA9LvUcaURqchVjhdyZi8yNHnWlZqGeII6gTVdB4CmPi20lnXKtP27myr9lqBhQ
O3SYFJYxpcX6XlpNiXLIhJom+t9CnJHXSTQnLMRF/JakcX2vjhfDuXL1FQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCpxZr3g0TvroDRkVPMdyKErhCn9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2JiYzA4
ZC1hYTI0LTQ3NTAtYjc1YS1hOWY3NTJkNDA4ZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYmJjMDhk
LWFhMjQtNDc1MC1iNzVhLWE5Zjc1MmQ0MDhmZi8xL0tuRm12ZURSTy11Z05HUlU4
eDNJb1N1RUtmMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMghzANBgkqhkiG9w0BAQsFAAOCAQEAi57sSXs0ixXt
D0SLth3JPD9QJ8Y1Yzs1ewv4k4se9iZt5i5sbQ+PXfteUAfR48HttY87uPvNl9Cp
e3S9X9WBfdKjIsw9sRef+jpAq5Sbu1R4mbX6MV/Itsg1jbudyUKM6F5cfjQ2EdAY
cJhmRePfbgKLssAzVG7lx9q4g08lcRLaWwIyXr64SxSnQKDnjB/zK4V1eYo5fPhf
USOKUYBg+5sesBRYbYBauyNexKANEhOMH0IiFKrbXma1Vo9nzjhnSNoVzNfNASMc
Zd+6vJ+ofa069A35uFBf7RkPq1xX4BS1vD+/I3c97La8Cg6U4D3cTorMHnqGgpWc
YNmAjqjaUQ==
-----END CERTIFICATE-----