Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M6fFfjy-qDsbCFxp2Of51FIFE2I.cer
File:                     M6fFfjy-qDsbCFxp2Of51FIFE2I.cer (raw, json)
Hash identifier:          zLE6oSeu6ZWCeA6LEjIRgIuHCaby8tPuxTskA24HNTY=
Subject key identifier:   33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018ED92F2148C1FE2DB6D97D0247EA62D6B4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 13 Apr 2024 20:38:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215108

Validation:               Failed, certificate revoked on Sun 14 Apr 2024 10:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:d9:2f:21:48:c1:fe:2d:b6:d9:7d:02:47:ea:62:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 13 20:38:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33a7c57e3cbea83b1b085c69d8e7f9d452051362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:10:2d:f7:a4:93:6a:fa:e4:f9:47:e6:7c:
                    5a:93:57:0d:d4:09:89:f7:73:fd:7a:2e:af:91:79:
                    63:56:3c:b2:bc:e8:5f:9e:70:2a:ac:28:7a:3f:d2:
                    25:84:8c:55:10:1a:f8:2d:d1:2d:d4:36:a3:8a:19:
                    9d:c1:85:32:98:7a:b5:bc:46:07:6f:bf:f9:2d:1d:
                    cf:ff:13:fa:38:95:1c:ab:7c:24:6f:aa:97:6a:b2:
                    0a:61:4c:e4:b4:39:c3:3c:9f:26:d6:de:29:f4:ff:
                    d5:a7:c8:05:41:15:50:92:5e:fd:fd:65:5f:e9:ca:
                    5b:75:3c:67:7f:f9:4c:3b:41:3f:9e:94:2e:28:4c:
                    23:d2:22:ab:a3:5b:ec:5c:34:03:2d:d5:76:b7:19:
                    72:c5:53:44:35:87:c2:2a:b9:08:f8:c4:54:78:bf:
                    a3:23:28:fb:27:1b:94:c0:b0:96:3c:fe:93:1d:6f:
                    be:35:06:a0:cf:2e:18:71:3a:e3:04:e7:61:48:ee:
                    6a:17:86:f5:5d:9f:29:70:c2:4b:c8:72:f3:4e:33:
                    f0:0b:7e:2e:fb:6c:49:8f:a0:14:ae:8e:88:80:d9:
                    1e:fb:48:48:ce:c7:d9:13:47:86:96:62:b4:a3:c3:
                    fd:7e:5b:10:92:f3:60:08:d7:5f:59:af:83:6a:aa:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215108

    Signature Algorithm: sha256WithRSAEncryption
         31:05:a4:82:52:ca:b5:64:ae:03:dc:ec:ff:62:45:88:1d:a1:
         35:8b:bc:20:51:bc:b9:22:a8:69:c8:31:fc:c6:74:36:b5:bb:
         01:3a:4b:f7:b4:3b:59:a5:a7:4e:a3:10:54:e6:b0:32:5f:8e:
         6a:39:3e:b5:36:5e:78:8d:06:88:7b:f6:ac:a2:1a:11:b9:ea:
         a8:41:8c:23:26:05:2d:8e:7b:27:02:66:c4:17:6b:64:46:84:
         87:91:0d:20:ba:ea:67:f9:a6:b7:ca:b6:9d:7b:64:a4:35:06:
         8a:1d:ab:78:32:09:77:9d:e6:97:bb:5f:de:da:c5:53:8e:a5:
         f3:a7:f6:4e:57:e3:1d:d8:31:45:66:a7:ba:9a:42:75:8c:4a:
         29:02:27:fd:dd:8f:b4:aa:7b:76:fa:1b:fc:d5:7c:32:55:4e:
         ce:70:7e:4d:bc:a0:d6:f2:2c:4e:6d:3e:2d:b8:b2:cd:6a:ef:
         01:48:9e:f5:6f:2e:0f:db:0c:d0:6c:fc:3f:6f:32:8f:7e:9d:
         84:2f:01:8e:51:dd:af:95:15:cc:05:51:64:a9:be:a0:b7:ed:
         a5:e4:c9:8f:06:6a:20:16:3e:c2:d3:bf:9a:ce:8c:de:da:b5:
         d8:4f:04:1a:67:16:74:17:0b:ed:ab:60:24:93:b7:23:e9:e0:
         2d:d9:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:11 2024 by rpki-client on console-fra.rpki-client.org