Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RCzCPjvYflDCxZCIGerFP9rTd9k.cer
File:                     RCzCPjvYflDCxZCIGerFP9rTd9k.cer (raw, json)
Hash identifier:          PBsjgjnU//LB4CO50eCEmxjjCBtsPr/Fh29kJmTonlY=
Subject key identifier:   44:2C:C2:3E:3B:D8:7E:50:C2:C5:90:88:19:EA:C5:3F:DA:D3:77:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018F06ED05D63365E84B18A9D6351B091FFE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/0d6de1-b6bc-4fc7-bd62-8e0f78f44df2/1/RCzCPjvYflDCxZCIGerFP9rTd9k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/0d6de1-b6bc-4fc7-bd62-8e0f78f44df2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 17:49:07 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215069

Validation:               Failed, certificate revoked on Fri 10 May 2024 04:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:06:ed:05:d6:33:65:e8:4b:18:a9:d6:35:1b:09:1f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 22 17:49:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=442cc23e3bd87e50c2c5908819eac53fdad377d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:8f:df:11:86:d6:f0:2e:e8:0c:86:62:c5:
                    7b:aa:29:b8:b2:40:a4:90:52:3c:e9:d5:82:6b:5b:
                    42:b2:6e:d4:c3:8b:0f:b1:0e:84:d5:c8:a0:2d:02:
                    1b:e1:2f:06:2d:0f:a7:e9:c4:af:33:67:cf:9f:ef:
                    9d:55:d4:af:e4:65:24:5d:9e:2e:4a:f2:8f:c0:05:
                    95:db:67:9d:81:35:a2:14:4a:8b:57:f2:2e:8f:b9:
                    37:5c:fd:13:d0:48:c6:03:74:0f:5d:ef:dd:af:6a:
                    c2:1a:67:52:9c:86:9c:f5:a6:0d:7f:91:5b:05:b7:
                    f9:77:e9:46:80:00:d6:79:62:3c:2f:76:6a:63:02:
                    6a:2b:2d:5c:c9:35:2b:7a:5b:a3:6a:36:29:29:92:
                    0f:45:0c:0b:43:b2:08:3e:9d:9e:2f:d1:e1:7b:29:
                    6c:22:6d:96:5f:c0:69:2e:f8:ee:54:aa:26:13:f0:
                    88:c3:0b:ec:33:aa:79:e4:a9:d3:23:86:b1:d9:f5:
                    c9:7e:d4:48:63:4c:74:4d:eb:95:4f:ae:b2:aa:30:
                    2a:fc:da:16:10:6c:26:fa:01:a5:4c:43:37:1c:f8:
                    90:8c:9a:e2:bf:52:04:0a:aa:b1:9d:11:67:43:45:
                    11:f8:0f:24:60:3c:e1:22:93:bd:58:0c:d0:8b:ee:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:C2:3E:3B:D8:7E:50:C2:C5:90:88:19:EA:C5:3F:DA:D3:77:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0d6de1-b6bc-4fc7-bd62-8e0f78f44df2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0d6de1-b6bc-4fc7-bd62-8e0f78f44df2/1/RCzCPjvYflDCxZCIGerFP9rTd9k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215069

    Signature Algorithm: sha256WithRSAEncryption
         45:ca:6b:a3:e9:6d:66:d6:b3:ad:4b:72:c3:c8:18:b8:6c:f2:
         76:4f:1b:88:6a:43:38:ae:31:11:67:1c:d6:5e:d4:98:7f:75:
         aa:bd:fe:1f:1c:fe:99:bb:44:b0:57:9d:a6:f9:ac:45:b9:06:
         ba:5e:c6:61:84:7d:8c:f3:0d:98:02:7a:81:87:ae:af:c7:0d:
         05:04:2d:80:04:ca:85:4e:2b:9c:f9:e3:97:a9:8a:92:48:52:
         29:91:c2:a5:48:be:f8:90:9e:b9:3b:b3:de:7c:e6:97:6e:69:
         c2:b9:1f:d4:08:e3:7f:10:a2:65:46:b4:7c:31:4e:67:b6:49:
         d0:8a:0a:b2:4f:eb:d4:d8:94:a3:cd:d6:92:9d:c1:8c:66:52:
         b3:f6:c0:10:de:11:e4:f8:3c:18:6d:55:b1:89:06:11:85:b2:
         93:0b:88:f8:01:d4:64:d8:aa:9d:be:e2:56:9f:b1:93:03:89:
         4d:4d:4b:e1:0a:97:3a:42:c9:ab:e1:59:fa:a5:50:71:31:6d:
         2a:11:49:2b:5b:d9:d6:f3:3c:1e:86:69:db:25:06:50:c6:8a:
         02:ad:16:a2:6c:1f:7e:c3:e4:45:e5:ee:ae:e8:3a:a8:f2:c5:
         db:81:43:80:f7:67:57:1c:27:a5:15:13:e2:6e:a8:03:40:54:
         9c:a5:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----