Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7bGt9jbOht4FMfQMLccG3-I0JQ.cer
File:                     b7bGt9jbOht4FMfQMLccG3-I0JQ.cer (raw, json)
Hash identifier:          Jhr+q4Jvkf3U2P/7A0LqgP32afF7l59JOBRdxtn953c=
Subject key identifier:   6F:B6:C6:B7:D8:DB:3A:1B:78:14:C7:D0:30:B7:1C:1B:7F:88:D0:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348F93FDE323114258B4C1CC4851944
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/633a40-fef8-4d2c-8d69-00ba815e7176/1/b7bGt9jbOht4FMfQMLccG3-I0JQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/633a40-fef8-4d2c-8d69-00ba815e7176/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 204844

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:f9:3f:de:32:31:14:25:8b:4c:1c:c4:85:19:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6fb6c6b7d8db3a1b7814c7d030b71c1b7f88d094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:53:cc:94:2a:24:f4:35:f6:67:db:70:8c:
                    42:08:21:c9:be:2a:53:8d:d9:b8:b8:4a:9b:a7:1e:
                    24:2b:49:6d:06:3c:7e:fe:1c:39:2a:28:20:e9:e8:
                    85:66:2d:a6:8d:92:1c:1c:ce:5a:fe:2a:d1:53:ba:
                    08:3e:97:00:59:c4:38:ff:56:38:16:c1:51:91:5c:
                    e8:11:55:23:48:ac:e5:3f:5e:40:d0:b6:de:6d:9d:
                    b9:47:e1:77:5e:d2:34:34:89:1a:82:10:6d:2c:82:
                    c0:23:53:f1:5d:4e:f8:a4:54:82:c6:db:8c:00:da:
                    e1:31:e6:15:91:7b:f8:f0:cd:96:17:37:48:f7:73:
                    8d:ac:2a:05:71:01:71:a0:b9:2a:e4:e7:f6:6e:c2:
                    26:2a:fb:5a:2c:1b:9f:57:e9:3b:25:da:e6:cd:7b:
                    aa:fc:b6:83:54:9b:c9:a5:d0:57:43:28:9c:c6:c6:
                    6d:6f:83:09:2d:91:d4:c9:e3:25:ff:8e:17:36:96:
                    36:3c:7d:75:e6:d1:60:7d:f1:37:c3:6a:50:a1:44:
                    4e:3a:e5:da:6c:27:28:d3:aa:3e:ab:7d:5d:c4:d7:
                    f9:fb:68:e9:54:0d:e3:79:bd:8b:d1:44:de:0d:a7:
                    0f:0f:90:fc:00:e1:9d:52:32:6d:17:e3:cc:ad:ee:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:C6:B7:D8:DB:3A:1B:78:14:C7:D0:30:B7:1C:1B:7F:88:D0:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/633a40-fef8-4d2c-8d69-00ba815e7176/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/633a40-fef8-4d2c-8d69-00ba815e7176/1/b7bGt9jbOht4FMfQMLccG3-I0JQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204844

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:c7:fd:a8:bf:2e:05:e6:3a:ee:7b:a9:d0:8e:0b:a1:67:
         33:f0:72:d6:f9:e2:c8:50:b9:ab:99:a9:86:0c:6e:be:85:ba:
         04:25:e3:c5:df:40:ba:18:4f:32:8d:72:b4:77:51:6e:19:a3:
         a8:b4:f9:53:e3:a8:c4:5b:a4:88:76:3d:56:80:3a:68:7f:96:
         25:6f:a0:93:39:d3:88:e8:c4:d1:74:72:d8:50:a7:4f:cb:50:
         42:99:35:26:9c:71:e6:8e:b4:bb:cf:90:1e:fc:f1:47:5f:43:
         1f:17:0a:44:dd:9a:5c:28:d8:66:d4:9d:6e:78:44:9a:0b:15:
         cb:ab:75:18:da:db:4e:e2:28:ad:0a:e2:cb:a5:29:f4:5f:eb:
         e4:1a:24:42:e7:f2:26:6d:ab:89:c5:c8:f7:66:32:d8:e1:56:
         32:00:70:2d:a3:90:06:92:ce:c8:4e:3b:e3:90:c1:0b:6d:b7:
         d0:05:5e:47:8a:8b:bf:6e:e8:8e:d0:5a:5e:28:89:c4:4d:1f:
         4d:fd:56:c2:1d:54:9b:50:74:8b:35:05:8c:d3:40:b4:d0:2a:
         8d:9e:c2:99:a4:95:90:e3:26:81:3a:59:dd:d3:c8:98:68:7c:
         53:3d:76:60:6c:04:6d:e0:6e:42:c3:ff:8d:0a:f8:1c:e3:ca:
         1e:e6:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----