Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
File:                     ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer (raw, json)
Hash identifier:          eiOYpQUqePhtFTQ97VBypr3DbUKE5y/yjziak4/S550=
Subject key identifier:   65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FC9045A48A3A5BF362D7313239F84E65A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 30 May 2024 10:20:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:678:e40::/48

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 11:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:04:5a:48:a3:a5:bf:36:2d:73:13:23:9f:84:e6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 30 10:20:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=650309a6c618c718bd369f561fff0dccbf320b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:86:89:65:37:2f:f1:fb:1c:e9:f4:b8:df:
                    ac:02:0a:20:cf:43:0e:0c:98:06:ce:9b:50:db:7f:
                    2b:18:fa:d6:fc:2c:f4:96:34:6d:55:54:2c:64:8e:
                    2e:25:7d:ec:e2:51:ec:35:f8:d7:e7:3f:72:a1:9e:
                    bc:cd:bb:c3:cf:38:d8:8b:8c:e2:49:51:f8:0f:d1:
                    1e:fe:99:a2:a8:cf:ff:ed:8f:cc:25:4b:17:b3:2f:
                    be:a2:ac:13:86:43:26:40:24:c0:62:4d:47:d5:10:
                    02:95:cc:3e:c6:fb:24:a3:e2:59:aa:d5:bd:7c:61:
                    a4:de:70:5e:c1:14:fd:45:34:37:ad:c5:c8:a4:cf:
                    b7:b9:96:b9:0e:3f:c5:33:32:c1:5f:44:ff:77:92:
                    38:f1:12:b0:9b:40:39:b5:3e:18:e1:f6:8f:c0:1b:
                    81:f2:cb:a0:45:01:fd:c2:65:78:e8:1e:91:0e:73:
                    58:89:b6:11:b6:99:f8:70:b1:9c:e6:0e:18:e5:ed:
                    ae:a3:a6:4a:3a:8a:96:e0:21:68:e5:7b:82:66:fd:
                    84:94:77:5a:47:08:47:aa:a9:b2:de:d5:b6:13:32:
                    dc:14:d6:32:5a:b3:bc:79:72:30:b3:8f:4d:e4:c0:
                    24:c5:3f:0c:8f:9b:23:ec:94:dd:2f:59:ea:41:9a:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:63:88:62:9d:33:3c:ff:47:a9:6b:7a:eb:09:fe:54:89:
         11:f3:f1:5f:34:a1:f4:f7:a9:aa:bc:cf:f4:0b:d0:c0:92:97:
         f9:65:e3:e0:9b:14:80:51:b0:0d:24:3f:12:f7:d2:de:8c:64:
         09:29:aa:78:f4:5b:bc:60:86:a5:60:a1:8d:01:a8:7a:02:42:
         ed:f8:c9:47:55:bc:95:55:2b:82:d6:2c:c7:ac:87:4b:97:87:
         a8:7a:7f:36:69:81:29:4d:00:38:f2:f2:ac:9e:8d:9c:cb:cb:
         de:a0:8a:54:8c:96:25:f1:2f:ca:99:0a:48:cc:7f:f5:f5:4f:
         cd:d0:f9:bc:13:17:0f:73:7c:c5:1d:b6:f2:fe:c1:26:b0:5d:
         36:e8:bb:86:2c:c6:64:ff:e8:e4:42:6e:cf:ef:f1:25:7f:89:
         2f:66:ef:f3:04:30:d1:6a:88:ac:39:82:83:83:84:a7:d1:14:
         36:c0:f5:48:4a:b8:e8:6e:0c:95:12:97:0f:66:e8:0d:ee:56:
         36:ef:2e:0a:57:17:6f:4e:ee:9a:2d:22:fc:8c:c1:b4:0c:f6:
         a0:2d:d8:27:6a:85:81:ea:0a:99:c3:8c:fb:a6:32:cb:8f:9f:
         d7:ba:f1:f3:93:06:42:4b:e1:2e:5a:a4:26:76:d5:a0:4c:1b:
         52:b5:47:b1
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAY/JBFpIo6W/Ni1zEyOfhOZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTMwMTAyMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTAzMDlhNmM2MThjNzE4YmQzNjlmNTYxZmZmMGRjY2JmMzIwYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvuGiWU3L/H7HOn0uN+sAgogz0MO
DJgGzptQ238rGPrW/Cz0ljRtVVQsZI4uJX3s4lHsNfjX5z9yoZ68zbvDzzjYi4zi
SVH4D9Ee/pmiqM//7Y/MJUsXsy++oqwThkMmQCTAYk1H1RAClcw+xvsko+JZqtW9
fGGk3nBewRT9RTQ3rcXIpM+3uZa5Dj/FMzLBX0T/d5I48RKwm0A5tT4Y4faPwBuB
8sugRQH9wmV46B6RDnNYibYRtpn4cLGc5g4Y5e2uo6ZKOoqW4CFo5XuCZv2ElHda
RwhHqqmy3tW2EzLcFNYyWrO8eXIws49N5MAkxT8Mj5sj7JTdL1nqQZr14wIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFGUDCabGGMcYvTafVh//Dcy/MgtIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FiNjhl
NS0xNGM5LTQxMjMtODIyNi1mZTI2ZDQxY2U3Y2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWI2OGU1
LTE0YzktNDEyMy04MjI2LWZlMjZkNDFjZTdjYi8xL1pRTUpwc1lZeHhpOU5wOVdI
XzhOekw4eUMwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5AMA0GCSqGSIb3DQEBCwUAA4IBAQAo
1mOIYp0zPP9HqWt66wn+VIkR8/FfNKH096mqvM/0C9DAkpf5ZePgmxSAUbANJD8S
99LejGQJKap49Fu8YIalYKGNAah6AkLt+MlHVbyVVSuC1izHrIdLl4eoen82aYEp
TQA48vKsno2cy8veoIpUjJYl8S/KmQpIzH/19U/N0Pm8ExcPc3zFHbby/sEmsF02
6LuGLMZk/+jkQm7P7/Elf4kvZu/zBDDRaoisOYKDg4Sn0RQ2wPVISrjobgyVEpcP
ZugN7lY27y4KVxdvTu6aLSL8jMG0DPagLdgnaoWB6gqZw4z7pjLLj5/XuvHzkwZC
S+EuWqQmdtWgTBtStUex
-----END CERTIFICATE-----