Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MpFlo_XuD1JHNR7ldNPu0D5rw_M.cer
File:                     MpFlo_XuD1JHNR7ldNPu0D5rw_M.cer (raw, json)
Hash identifier:          6iFh51isAZCO3xzGZzGoYUkR8h7uXutkZ8bRyGR3kxM=
Subject key identifier:   32:91:65:A3:F5:EE:0F:52:47:35:1E:E5:74:D3:EE:D0:3E:6B:C3:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018959668CA2EAB768078C219D51D735A813
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/4388db-e23e-40e0-b777-f2f62105941a/1/MpFlo_XuD1JHNR7ldNPu0D5rw_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/4388db-e23e-40e0-b777-f2f62105941a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 15 Jul 2023 11:54:00 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 197919

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 12:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:59:66:8c:a2:ea:b7:68:07:8c:21:9d:51:d7:35:a8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 15 11:54:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=329165a3f5ee0f5247351ee574d3eed03e6bc3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:fd:61:90:f0:55:0d:08:3d:8c:5b:ea:eb:
                    b0:9e:dc:e6:17:2c:de:2f:df:c0:99:ca:17:3f:d9:
                    2e:67:75:4f:53:91:af:12:db:da:a8:0f:b2:94:33:
                    0d:4a:d3:35:54:db:1e:b0:ea:95:42:3d:96:bd:f8:
                    30:a9:f0:a1:06:04:3e:69:91:0e:7c:43:56:f6:32:
                    08:1d:0c:0d:53:92:01:de:f7:06:c2:4d:36:93:02:
                    d9:dc:b1:3b:f0:12:3e:c9:15:92:f8:b8:2f:ab:7d:
                    bb:64:1e:db:6f:25:2c:5d:32:13:24:f5:21:ee:70:
                    5c:78:e0:8c:c5:80:33:74:c8:ec:88:fe:16:19:e3:
                    3e:5a:44:72:1c:78:f3:0a:99:c2:07:5f:86:f3:ab:
                    c3:40:a3:d1:01:84:85:ff:3f:3f:9b:00:47:e6:49:
                    65:86:9d:7d:d5:d4:9b:73:69:8d:fc:7e:f9:94:f2:
                    6f:78:49:9f:ce:10:30:ec:80:3a:b6:05:e4:e9:56:
                    76:6c:b3:7d:86:19:0d:d9:8f:5d:b5:ea:2d:ea:aa:
                    0b:ba:15:95:19:17:dd:38:de:01:82:72:ba:23:1d:
                    65:d7:b2:64:c1:ec:7a:62:a1:e7:8c:ef:cd:a4:9c:
                    e2:b5:5a:a1:9a:f7:1a:ff:d7:09:49:3f:4d:65:61:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:65:A3:F5:EE:0F:52:47:35:1E:E5:74:D3:EE:D0:3E:6B:C3:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4388db-e23e-40e0-b777-f2f62105941a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4388db-e23e-40e0-b777-f2f62105941a/1/MpFlo_XuD1JHNR7ldNPu0D5rw_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197919

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:bf:0c:82:81:60:3d:8b:25:7c:8d:53:b2:54:cc:dd:00:
         80:ed:4e:8d:63:10:70:3b:9e:66:12:4f:43:3a:0e:91:e3:1d:
         78:dd:f4:84:7d:35:ea:f9:43:48:da:5a:46:fc:a9:74:ca:93:
         c0:fc:42:7a:77:a3:d3:97:e1:31:22:05:7b:21:90:ab:df:3a:
         09:8e:98:67:4f:ba:2b:0a:df:6d:07:08:df:8b:9d:b6:38:42:
         9e:1c:16:d4:2c:8f:3e:a7:2f:79:dd:e3:01:46:5e:2d:69:f3:
         98:e0:fe:43:a0:e6:e9:94:97:4e:a4:53:5a:2d:02:5c:62:46:
         e4:0f:a1:b2:ab:6f:5e:f6:d2:10:c9:ea:3f:e4:73:96:71:36:
         e2:a4:bf:39:13:e6:48:36:ae:89:f9:b1:b0:19:c3:c4:32:3a:
         09:50:ba:44:a2:72:85:96:dd:f8:b1:31:75:64:f6:4a:46:22:
         26:fe:74:22:81:e6:22:c1:78:1b:7c:a8:62:61:0b:ae:7a:65:
         9f:2b:e8:40:ec:4d:e4:31:c8:d2:43:5d:cc:2f:6b:46:87:e4:
         fa:67:1d:65:8f:f7:87:a9:e3:85:73:36:41:67:be:4b:b6:c3:
         f4:b8:84:7e:3e:d3:d8:00:4e:04:6a:ed:41:a6:1c:33:82:38:
         cf:4a:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----