Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LAKtk7WdNkDOWIUfzf72FDRfpd0.cer
File:                     LAKtk7WdNkDOWIUfzf72FDRfpd0.cer (raw, json)
Hash identifier:          d+5enfjRuXMQxshDonbK7q6oddcJja3Ys1xc7VHKeiw=
Subject key identifier:   2C:02:AD:93:B5:9D:36:40:CE:58:85:1F:CD:FE:F6:14:34:5F:A5:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018EBDD277ED799049EF33FF36B2A01E0BFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/790a28-41ed-4014-ab2e-25a89326bc14/1/LAKtk7WdNkDOWIUfzf72FDRfpd0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/790a28-41ed-4014-ab2e-25a89326bc14/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 08 Apr 2024 13:07:50 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215147

Validation:               Failed, certificate revoked on Wed 01 May 2024 16:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bd:d2:77:ed:79:90:49:ef:33:ff:36:b2:a0:1e:0b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 13:07:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c02ad93b59d3640ce58851fcdfef614345fa5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:66:39:ca:12:36:57:48:9a:fc:28:1d:cb:
                    26:e1:1c:03:1b:47:ab:e4:af:e5:f8:f1:95:97:36:
                    0c:be:cc:4b:96:ac:18:18:64:bd:a8:e0:69:27:e5:
                    68:d9:5f:a6:d4:2e:a4:ca:dc:99:17:15:37:3b:c7:
                    bc:74:26:77:81:51:a2:5f:d4:c3:38:5c:bc:f4:8f:
                    6c:db:d4:6f:5f:5c:c4:2d:85:77:6c:02:53:fa:50:
                    1e:71:b4:bd:31:91:60:fd:40:74:12:44:c8:99:c8:
                    89:98:5f:a2:11:03:09:b3:bd:e9:46:c9:ff:28:04:
                    5b:f9:8a:71:e9:53:df:4d:b8:32:23:c5:ea:71:12:
                    6a:b3:ec:65:aa:42:1c:1e:54:52:04:05:9b:ce:f4:
                    c5:1f:7b:08:89:86:71:06:23:8f:37:68:5b:6a:9e:
                    7c:cd:24:94:77:0d:52:7a:9f:42:bf:b6:2c:bb:5f:
                    08:9a:e5:30:7a:78:99:da:1b:02:d5:5c:2c:5e:25:
                    9a:7f:93:7d:fd:ff:1a:50:37:21:da:04:48:8f:e1:
                    e0:fb:0a:d2:70:90:dc:f1:d7:b9:2b:73:ce:f8:0a:
                    98:3f:5f:5f:f9:0e:ad:51:58:b9:4e:ba:2c:93:c1:
                    0b:86:5e:c3:74:24:d1:2a:a3:cc:17:47:20:15:7c:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:AD:93:B5:9D:36:40:CE:58:85:1F:CD:FE:F6:14:34:5F:A5:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/790a28-41ed-4014-ab2e-25a89326bc14/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/790a28-41ed-4014-ab2e-25a89326bc14/1/LAKtk7WdNkDOWIUfzf72FDRfpd0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         14:29:aa:4b:0d:50:b3:21:5b:d2:67:61:e6:e6:06:4a:11:bd:
         3e:cd:9e:c8:45:4f:63:72:ea:ad:8c:25:cc:30:b6:4b:fa:a1:
         98:e3:9c:dd:99:b6:6c:f6:72:85:b7:dc:66:5b:b7:76:39:e8:
         38:cd:a4:d4:33:44:c6:b0:a3:7d:21:dc:3f:94:df:2e:ca:11:
         db:66:18:e1:fd:f5:fb:c3:dd:09:9a:39:97:5a:44:37:15:3e:
         45:fb:be:fb:31:19:c2:f2:6f:27:d0:f1:a5:61:9f:09:24:37:
         1b:c1:bc:7d:fe:48:59:af:d0:a6:3b:5b:84:32:2e:3a:fa:6b:
         89:e4:20:1f:0b:98:fe:35:fe:74:c8:8d:58:60:67:9f:9b:99:
         33:ee:7c:81:ca:39:3d:1e:bf:73:a7:f3:d1:5d:eb:36:87:3e:
         d6:d8:5d:59:0b:b8:bb:bf:86:0e:27:11:b0:44:75:b7:52:0f:
         e8:27:05:0c:19:ef:af:b4:25:cb:e9:d7:a9:f0:6a:43:89:89:
         1c:22:98:a4:80:0d:43:a1:48:c8:a9:79:20:bf:6c:d3:d2:de:
         e4:f4:13:49:48:f7:72:b5:ac:c9:af:01:66:58:1d:e6:00:c6:
         92:1e:ad:f3:6a:58:72:40:0a:d6:13:69:89:e1:8e:32:51:4a:
         59:fd:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----