Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NMzTjbMcyeLZyMP9nQNvaSTncPA.cer
File:                     NMzTjbMcyeLZyMP9nQNvaSTncPA.cer (raw, json)
Hash identifier:          RIVhkkDx9mJCSGR5HRtqjaqhRykoVpAl44ZB2+vnkSw=
Subject key identifier:   34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC3B68D7E5A4F51710E59088A7FE20762
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 06:29:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204785

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 09:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:8d:7e:5a:4f:51:71:0e:59:08:8a:7f:e2:07:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34ccd38db31cc9e2d9c8c3fd9d036f6924e770f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:3f:9e:2e:e4:08:a5:35:45:7e:8d:11:bc:
                    c7:ad:86:b0:b0:48:4b:c7:70:fb:6e:33:9b:bc:7d:
                    25:83:3f:f9:5f:5e:9d:d2:1c:a8:6e:f4:80:7f:17:
                    30:dd:dc:f4:75:bc:28:95:82:c6:5e:c2:e9:1f:fb:
                    65:eb:e4:f2:1a:23:ca:79:c8:18:5a:f2:43:e1:fc:
                    f3:2c:b6:54:44:8c:e2:27:c7:13:cc:8e:14:54:14:
                    e0:71:75:2d:67:1b:c7:6f:c6:c1:4f:9c:84:64:a3:
                    95:45:bb:02:5a:67:2b:8d:2a:f6:e9:6e:8d:55:61:
                    59:f0:26:76:2a:dd:f6:d0:29:90:c6:06:37:ae:75:
                    bc:af:41:7c:88:7f:9c:a8:89:91:93:80:2c:6a:d3:
                    03:78:4f:18:64:4b:5c:4e:a6:6f:2f:23:03:ca:39:
                    c9:44:0d:6b:0d:19:fe:a0:a3:3c:9b:ac:79:99:9d:
                    b9:85:1c:4f:99:ae:1e:fb:b9:b8:11:a2:16:99:c9:
                    d3:dc:39:45:42:a2:1a:18:ac:e1:48:18:bb:6e:9d:
                    38:9e:bc:f4:63:bb:6e:71:0e:cb:67:5f:fe:1e:c6:
                    db:af:43:a1:4f:0d:1b:7b:46:f4:e2:a0:f8:2d:ef:
                    2d:cb:16:6e:e3:11:22:7c:8a:7f:2e:5a:eb:b5:91:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CC:D3:8D:B3:1C:C9:E2:D9:C8:C3:FD:9D:03:6F:69:24:E7:70:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f1fb6-a2b0-4c96-8569-0e75489f3f6c/1/NMzTjbMcyeLZyMP9nQNvaSTncPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204785

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:fb:41:1f:ed:b5:86:22:7f:94:56:ea:24:be:21:32:a8:
         f7:00:7d:0e:21:c0:74:e9:7f:00:98:8c:9f:85:ac:fe:85:7a:
         6c:01:85:fe:5c:a0:e0:9c:94:82:c6:a3:96:89:56:42:22:34:
         58:25:82:76:e5:19:ff:5e:5d:18:5e:fe:e9:27:0a:1b:da:94:
         8b:56:36:4e:85:f8:43:86:96:4a:21:7b:95:7e:de:24:c8:c8:
         ad:ef:31:62:4d:08:5f:8c:cb:09:60:ef:40:36:c7:06:6f:1c:
         1a:7b:18:78:d2:55:a5:6c:5e:7d:50:5e:8a:05:18:1b:c2:3b:
         5c:68:98:54:20:89:70:d4:ed:04:ab:58:bb:75:bc:b3:dd:d8:
         96:37:bd:dc:54:42:5b:8f:2e:2f:a5:31:f9:e2:07:9c:8c:06:
         79:8c:ff:67:0d:78:39:3e:e4:46:9b:8d:6d:ad:55:82:8c:22:
         2e:82:14:92:08:c4:7d:74:a0:7c:fd:b1:94:b7:ab:29:8a:35:
         28:a0:d4:d1:4c:04:fb:36:30:cd:b3:c8:5a:f6:c8:85:c8:d4:
         26:7e:2f:0a:f6:60:1c:3f:9b:e2:6e:c2:db:78:82:74:cd:8a:
         80:d9:43:47:a1:70:71:32:21:f2:8d:0d:86:fd:1a:fa:44:e8:
         a8:32:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----