Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
File:                     XgtnXfGZ0qUFa663c9vgF6YUxKs.cer (raw, json)
Hash identifier:          4txo9PjkcygccD7ZYoKDojScnySiQdPo4MAN2ssl6+0=
Subject key identifier:   5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC326AA8A21CB0CDE7C79512231F6D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 56796

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 13:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:32:6a:a8:a2:1c:b0:cd:e7:c7:95:12:23:1f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:0f:49:d1:48:05:32:b7:2d:29:93:24:a5:
                    61:9c:86:0d:fc:47:b9:7f:91:6c:78:d0:68:77:e7:
                    16:28:fa:e8:8f:f7:77:51:c8:2a:0b:5f:46:ec:11:
                    4a:7c:25:eb:dd:81:81:a2:1a:5d:a1:14:47:bb:2c:
                    49:a5:62:33:dc:3d:be:96:5b:3f:fa:c1:fe:4b:ba:
                    3e:f4:94:39:ff:eb:b7:d4:aa:67:8e:5d:03:bc:77:
                    46:ab:b8:81:2b:44:b8:bb:e5:ed:0c:89:c4:4a:0c:
                    02:4d:13:56:8e:08:6d:47:e7:40:1d:32:6b:ad:69:
                    4a:c5:de:65:78:55:5d:78:e9:d9:78:33:44:7b:01:
                    48:24:51:b9:fb:bc:44:f1:13:76:2e:a5:a2:57:4b:
                    a9:f0:b5:ae:9f:a4:7d:b5:9e:a1:e0:d2:3e:27:f3:
                    b2:a1:31:9d:16:05:18:66:c2:fb:e5:9b:e5:f2:6b:
                    23:31:9d:aa:b0:2b:7c:ec:ee:99:1c:c4:d9:ff:74:
                    1d:48:99:ed:0e:73:98:f4:6a:56:d6:b6:39:53:f8:
                    7a:41:68:fb:1a:bb:1d:74:c1:18:8a:01:c5:09:6b:
                    70:3b:6d:a2:4d:9c:10:b7:6e:69:02:19:20:ed:0c:
                    b1:31:16:74:94:c2:88:c8:1e:be:fe:fc:07:1f:5e:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56796

    Signature Algorithm: sha256WithRSAEncryption
         66:74:84:66:36:14:65:9f:13:6f:64:45:9f:59:59:b4:36:69:
         96:02:f6:d0:81:17:79:1e:bb:4a:a7:8d:fb:76:0d:be:39:1e:
         d5:92:a7:49:1a:d1:9f:12:b0:b0:bf:c7:e6:68:17:3e:f6:4c:
         98:1d:96:f0:59:12:66:1e:0e:dc:6c:01:cf:e5:34:8f:b8:52:
         29:1b:4f:5a:68:b0:69:6b:5d:b3:40:f9:82:e3:1c:a0:75:0f:
         be:36:83:fe:d4:23:a2:d8:5f:01:5b:ed:8b:84:6b:3b:62:60:
         0f:5f:bf:68:09:a7:a8:05:19:bb:a4:99:16:f2:e4:a6:e0:e6:
         a6:e3:05:7f:65:86:62:28:32:fe:02:ba:f2:4c:65:0f:13:21:
         6f:c0:80:b7:a2:9e:d9:7a:94:39:f7:b9:53:7c:ea:46:c0:63:
         d4:d9:0a:98:d9:fe:ed:4f:50:36:b1:ba:9c:80:42:22:9f:df:
         2c:42:be:7c:45:ff:b4:ff:4e:e4:a3:b7:a9:2b:ed:34:12:19:
         13:5c:eb:32:63:71:83:3c:f0:95:c8:97:dc:9b:d8:93:15:80:
         f4:7f:92:9c:37:29:2b:36:a2:69:c2:19:40:d0:46:a6:08:77:
         e8:3e:90:07:cc:02:a3:7e:ea:56:9f:05:b3:b9:26:db:29:47:
         68:37:2d:c3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzF3DJqqKIcsM3nx5USIx9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTBiNjc1ZGYxOTlkMmE1MDU2YmFlYjc3M2RiZTAxN2E2MTRjNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznYPSdFIBTK3LSmTJKVhnIYN/Ee5
f5FseNBod+cWKProj/d3UcgqC19G7BFKfCXr3YGBohpdoRRHuyxJpWIz3D2+lls/
+sH+S7o+9JQ5/+u31Kpnjl0DvHdGq7iBK0S4u+XtDInESgwCTRNWjghtR+dAHTJr
rWlKxd5leFVdeOnZeDNEewFIJFG5+7xE8RN2LqWiV0up8LWun6R9tZ6h4NI+J/Oy
oTGdFgUYZsL75Zvl8msjMZ2qsCt87O6ZHMTZ/3QdSJntDnOY9GpW1rY5U/h6QWj7
GrsddMEYigHFCWtwO22iTZwQt25pAhkg7QyxMRZ0lMKIyB6+/vwHH163iQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFF4LZ13xmdKlBWuut3Pb4BemFMSrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzk4ZmNk
Mi1kNGY2LTQwOWItOWVhMy1iNzQxZTQzMDhhN2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvOThmY2Qy
LWQ0ZjYtNDA5Yi05ZWEzLWI3NDFlNDMwOGE3ZC8xL1hndG5YZkdaMHFVRmE2NjNj
OXZnRjZZVXhLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDd3DANBgkqhkiG9w0BAQsFAAOCAQEAZnSEZjYUZZ8T
b2RFn1lZtDZplgL20IEXeR67SqeN+3YNvjke1ZKnSRrRnxKwsL/H5mgXPvZMmB2W
8FkSZh4O3GwBz+U0j7hSKRtPWmiwaWtds0D5guMcoHUPvjaD/tQjothfAVvti4Rr
O2JgD1+/aAmnqAUZu6SZFvLkpuDmpuMFf2WGYigy/gK68kxlDxMhb8CAt6Ke2XqU
Ofe5U3zqRsBj1NkKmNn+7U9QNrG6nIBCIp/fLEK+fEX/tP9O5KO3qSvtNBIZE1zr
MmNxgzzwlciX3JvYkxWA9H+SnDcpKzaiacIZQNBGpgh36D6QB8wCo37qVp8Fs7km
2ylHaDctww==
-----END CERTIFICATE-----