Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SVnmOuxhwR64R5S1_emtzZ4u3kw.cer
File:                     SVnmOuxhwR64R5S1_emtzZ4u3kw.cer (raw, json)
Hash identifier:          hiQO89ACnPNnm98smp25Ui9y5TpNhpuMcLnTNaNJxtg=
Subject key identifier:   49:59:E6:3A:EC:61:C1:1E:B8:47:94:B5:FD:E9:AD:CD:9E:2E:DE:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56EFB21F49541C61A192D1060955C70
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:30:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216350

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 11:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:fb:21:f4:95:41:c6:1a:19:2d:10:60:95:5c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4959e63aec61c11eb84794b5fde9adcd9e2ede4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:a9:bf:64:48:ac:94:6b:b9:04:6d:db:37:
                    d3:c0:8f:d1:20:f3:ed:7f:19:9e:3e:a3:ba:36:8b:
                    db:57:3d:3b:3a:6f:27:f0:a0:b3:e6:b6:fc:9f:15:
                    a4:0d:20:88:94:e7:5c:49:65:61:65:8c:1f:23:88:
                    ab:c5:c8:dc:88:4e:f5:b0:24:87:6f:b2:ca:8f:c5:
                    8e:66:0b:13:2e:97:f2:90:62:db:5b:e2:41:3b:6c:
                    d8:fa:54:09:c2:64:52:e7:cd:78:f1:c3:6f:ab:cc:
                    0c:03:a1:bf:ca:79:28:32:ac:0d:06:52:7c:1c:0e:
                    ae:87:4c:ae:ff:6d:9c:25:b7:0e:dd:24:69:54:4d:
                    93:74:77:0a:53:9d:71:24:58:9a:7b:44:a1:77:a8:
                    6a:74:4a:11:0d:1d:d0:53:b0:12:8c:43:d9:bb:da:
                    9c:a6:9c:e0:1c:97:8a:38:aa:a5:bd:1d:5d:b4:4b:
                    96:7d:56:57:0c:b7:70:86:2a:3f:b3:16:ee:32:e3:
                    05:11:2c:fe:ab:c0:95:ed:75:ea:12:13:e3:ac:9e:
                    61:15:8c:8c:f6:ef:8f:fb:7b:ac:4a:14:24:d1:cb:
                    b4:f0:58:a0:29:03:82:c8:5a:ef:84:27:a4:8b:ae:
                    78:44:57:b9:2f:5a:cd:d1:f0:20:1e:9b:32:3d:22:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:E6:3A:EC:61:C1:1E:B8:47:94:B5:FD:E9:AD:CD:9E:2E:DE:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1e4b15-a5d7-46c6-ae64-2ac7e81e4b7c/1/SVnmOuxhwR64R5S1_emtzZ4u3kw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216350

    Signature Algorithm: sha256WithRSAEncryption
         12:42:82:40:02:75:ea:94:97:21:90:ef:af:8e:30:a3:1c:6d:
         e9:18:d2:47:82:5a:3f:4c:9e:42:0a:c9:47:1d:99:1e:d5:88:
         28:81:b5:dd:9b:8b:e2:c5:e6:5b:ae:c2:d3:71:93:98:14:ef:
         75:87:61:f1:13:04:3e:89:90:2b:5a:42:0a:fa:5f:cd:f8:1a:
         53:e2:26:4d:a5:3e:f6:02:34:6b:e1:63:0d:28:bf:78:d6:c8:
         8a:66:78:03:6c:ca:13:c3:a4:b9:f6:30:19:34:60:b6:53:b4:
         c5:09:54:55:36:7c:22:0b:5a:fa:4a:0f:0f:1b:16:14:0d:1c:
         7a:49:0e:0f:90:ed:fa:43:35:76:e4:29:f0:05:f7:08:8d:57:
         ec:34:32:b4:37:ec:23:f2:57:23:99:a6:a1:3d:05:38:c6:ca:
         9e:56:2c:bc:f8:cc:8d:36:16:ba:b0:34:e0:82:ce:58:ff:b1:
         25:7c:88:80:92:c2:18:a3:bf:ab:6f:10:5a:98:3a:cf:e0:4e:
         da:2d:ed:48:be:4f:ce:3d:8a:db:9f:3c:40:6a:aa:bd:c2:c0:
         35:0c:89:46:88:1e:80:15:6c:ec:c3:45:7b:d1:77:5a:76:d4:
         d8:0b:ac:90:d7:28:ef:4a:25:eb:1a:15:a7:0c:1d:b8:5b:7f:
         be:88:01:d3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzFbvsh9JVBxhoZLRBglVxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTU5ZTYzYWVjNjFjMTFlYjg0Nzk0YjVmZGU5YWRjZDllMmVkZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfCpv2RIrJRruQRt2zfTwI/RIPPt
fxmePqO6NovbVz07Om8n8KCz5rb8nxWkDSCIlOdcSWVhZYwfI4irxcjciE71sCSH
b7LKj8WOZgsTLpfykGLbW+JBO2zY+lQJwmRS58148cNvq8wMA6G/ynkoMqwNBlJ8
HA6uh0yu/22cJbcO3SRpVE2TdHcKU51xJFiae0Shd6hqdEoRDR3QU7ASjEPZu9qc
ppzgHJeKOKqlvR1dtEuWfVZXDLdwhio/sxbuMuMFESz+q8CV7XXqEhPjrJ5hFYyM
9u+P+3usShQk0cu08FigKQOCyFrvhCeki654RFe5L1rN0fAgHpsyPSJAeQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFElZ5jrsYcEeuEeUtf3prc2eLt5MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzFlNGIx
NS1hNWQ3LTQ2YzYtYWU2NC0yYWM3ZTgxZTRiN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMWU0YjE1
LWE1ZDctNDZjNi1hZTY0LTJhYzdlODFlNGI3Yy8xL1NWbm1PdXhod1I2NFI1UzFf
ZW10elo0dTNrdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNNHjANBgkqhkiG9w0BAQsFAAOCAQEAEkKCQAJ16pSX
IZDvr44woxxt6RjSR4JaP0yeQgrJRx2ZHtWIKIG13ZuL4sXmW67C03GTmBTvdYdh
8RMEPomQK1pCCvpfzfgaU+ImTaU+9gI0a+FjDSi/eNbIimZ4A2zKE8OkufYwGTRg
tlO0xQlUVTZ8Igta+koPDxsWFA0cekkOD5Dt+kM1duQp8AX3CI1X7DQytDfsI/JX
I5mmoT0FOMbKnlYsvPjMjTYWurA04ILOWP+xJXyIgJLCGKO/q28QWpg6z+BO2i3t
SL5Pzj2K2588QGqqvcLANQyJRogegBVs7MNFe9F3WnbU2AuskNco70ol6xoVpwwd
uFt/vogB0w==
-----END CERTIFICATE-----