Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
File:                     R8h8-T3Ge6p02s8kLN5seX-oQOs.cer (raw, json)
Hash identifier:          A0xWpXZEue8LzkKLxvHfEm45K2ZuEgLwec4uGMA+KRg=
Subject key identifier:   47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019344FAAA9AD812C0AB1FC663BF9FEED134
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 19 Nov 2024 15:11:38 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 210215

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 09:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:44:fa:aa:9a:d8:12:c0:ab:1f:c6:63:bf:9f:ee:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 19 15:11:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:ba:ab:74:8f:25:85:83:c5:02:4d:f8:38:
                    cf:b6:52:d4:a2:3d:5b:68:e6:c4:c8:bd:e7:df:4d:
                    ee:23:c8:f5:0e:30:58:2c:6f:12:5b:ad:f1:ae:91:
                    d5:e5:df:97:a9:e5:86:0e:82:18:73:d9:17:c6:fd:
                    c8:3f:4d:17:5c:22:87:7a:bf:2b:aa:76:f7:d4:33:
                    4d:f0:b5:c2:2d:4f:ca:70:c3:7d:23:1b:65:27:ac:
                    4a:ab:13:ee:0a:6a:09:05:4a:d8:3d:f7:e1:87:e4:
                    d4:6d:ce:f0:93:ff:6a:56:d1:da:fc:da:32:c1:40:
                    f5:00:06:67:83:6a:76:3c:3e:43:a3:11:68:10:0e:
                    c5:10:64:9c:12:81:5c:45:b8:c6:61:20:97:97:fb:
                    13:0c:a5:e0:77:52:36:bc:c1:c2:dd:fc:f8:0d:65:
                    a8:1f:d2:3c:c0:28:7a:da:76:89:8b:7b:01:10:cd:
                    2a:cf:85:d7:14:c7:47:15:22:1d:6c:10:13:d7:ef:
                    b4:99:23:9e:b7:b5:8f:5d:23:88:96:c0:a1:2e:bf:
                    13:a5:ca:00:3d:c2:7b:39:ea:69:29:33:94:8c:6c:
                    05:21:33:a6:d8:d1:49:87:7b:29:13:e5:65:e2:6d:
                    a3:ae:23:26:4e:96:eb:51:2c:21:73:bf:f4:6a:6c:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210215

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:9f:e1:08:48:5f:65:71:f5:7e:52:67:68:47:f6:c5:07:
         b9:a0:a5:d6:62:e8:82:88:f9:2e:96:c4:27:d3:a7:7f:27:ff:
         ae:4f:30:55:8a:5d:1e:77:05:75:ed:d3:b6:85:ff:01:e5:2f:
         3f:01:a1:71:8f:ad:06:f4:db:09:92:92:a2:88:18:5b:22:1b:
         62:46:b5:8c:cd:c1:f3:26:16:90:0c:1b:35:f1:d0:cb:d4:61:
         73:52:07:87:db:9a:f9:c8:b5:29:3d:0c:2a:6e:cd:a3:86:af:
         a5:92:3d:97:41:f8:8e:eb:81:9b:47:da:e5:2d:ef:06:3c:ce:
         84:d5:62:b4:ac:fa:24:b2:c6:21:91:80:f9:2a:db:ec:b3:d1:
         07:73:bd:47:df:55:ef:ee:b0:23:58:ec:44:06:f1:ff:6d:c4:
         e5:2b:32:65:0f:82:8e:f3:7d:3b:09:ac:78:ec:92:ce:d9:0a:
         0f:1c:36:0c:d0:62:a1:0a:4d:9f:f1:2a:d4:f7:49:8e:a8:37:
         cb:e9:63:54:86:ed:18:9b:f4:0a:fa:ab:06:00:61:50:24:8e:
         79:18:9f:bd:21:86:d0:42:17:95:e4:f0:35:a6:ad:be:2c:1c:
         e5:33:9e:5a:22:f8:30:97:9b:21:77:14:20:55:55:bd:1a:b9:
         d1:61:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----