Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cV35qvnRzRfKQMlSrY9x8KNDK7c.cer
File:                     cV35qvnRzRfKQMlSrY9x8KNDK7c.cer (raw, json)
Hash identifier:          X/jArpkfOhEe97h9eFhaCNIDa5vjo9jBjSSVtQlssXo=
Subject key identifier:   71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FE7A5DB71C3625B05E0A87422B0DA6CA8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Jun 2024 09:05:57 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 2a02:e480::/29
Validation:               Failed, certificate revoked on Fri 20 Dec 2024 12:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e7:a5:db:71:c3:62:5b:05:e0:a8:74:22:b0:da:6c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  5 09:05:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=715df9aaf9d1cd17ca40c952ad8f71f0a3432bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:49:ab:83:3d:d4:a7:00:13:30:ca:f6:2e:
                    f9:b1:20:04:ec:35:e8:41:11:b0:d4:06:f2:75:4e:
                    4c:98:1f:ff:46:6d:25:56:bd:26:8b:fd:16:d5:96:
                    40:36:5a:dd:ec:ba:13:c5:b2:29:7c:ab:4f:d2:6f:
                    b6:b5:4e:c0:6e:3e:c1:56:28:09:68:ea:1b:c2:70:
                    b8:32:b1:c6:a4:d5:72:b1:c7:26:5d:35:2b:ea:72:
                    94:1b:43:66:99:da:23:1b:21:5c:ed:61:f2:d9:cd:
                    d7:c0:8c:9b:a1:8f:0a:9d:c7:e4:fa:ec:81:83:33:
                    c8:33:d2:a2:95:d4:c7:07:76:4e:cb:8c:f5:b3:02:
                    8e:b5:9a:79:24:81:f0:55:34:d8:5a:73:60:c9:89:
                    80:84:3c:a5:38:77:48:1a:5f:de:02:cd:c8:14:35:
                    8f:3e:ee:e5:8e:10:7f:3d:31:40:ac:61:d2:4c:a3:
                    ff:45:89:e9:b8:ca:d0:91:df:46:74:81:73:9a:16:
                    6b:fe:e9:c9:6d:33:b5:87:95:ab:a3:de:28:6a:90:
                    83:cd:23:a3:d6:87:26:36:dd:3f:17:55:20:94:8e:
                    67:8e:f6:99:18:b5:82:e6:68:b0:4f:94:90:0b:de:
                    36:94:0b:ec:6b:69:45:5e:d8:4c:14:25:cf:61:58:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:e480::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:93:50:33:b1:81:14:c1:c2:e9:fa:3c:de:77:b0:f5:2a:
         18:a1:3a:84:48:fc:e5:82:4c:e1:5c:f2:b6:49:1a:63:5f:0e:
         6b:96:b5:ae:ac:bb:fc:44:10:20:8c:c9:46:d5:de:f5:ed:a6:
         bf:c7:db:51:f6:2e:d7:53:71:d2:c4:0f:8f:91:1a:03:08:d9:
         b3:84:13:af:d2:44:b4:c0:1d:2d:be:8b:00:af:76:bd:2d:2f:
         e9:e9:3d:31:3f:66:18:1d:92:39:96:16:94:12:07:fa:15:3b:
         6c:c6:07:21:26:79:2f:1a:4d:51:e0:97:7b:33:ad:ff:c4:63:
         e2:f1:7b:e6:3a:35:df:bc:71:6b:cf:a9:bb:ab:3f:96:b8:bc:
         b4:6a:b6:67:d2:80:50:2a:00:e7:37:ed:d2:5f:f1:74:60:13:
         ac:db:68:df:86:64:0e:69:7d:ae:6a:42:2b:c0:c2:4d:30:92:
         e6:84:af:24:21:27:d5:72:c6:eb:5b:6d:27:ef:fb:94:1e:6d:
         82:a5:20:3a:8d:94:07:be:a0:d3:19:c2:42:3f:a2:98:dd:46:
         7b:4f:56:a7:b3:9e:6a:4a:09:07:cd:73:62:1d:87:87:c8:09:
         90:e5:6f:e5:62:af:8d:d2:7b:1d:5a:13:6e:11:9f:e4:f3:20:
         83:74:d5:9d
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAY/npdtxw2JbBeCodCKw2myoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjA1MDkwNTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTVkZjlhYWY5ZDFjZDE3Y2E0MGM5NTJhZDhmNzFmMGEzNDMyYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVFJq4M91KcAEzDK9i75sSAE7DXo
QRGw1AbydU5MmB//Rm0lVr0mi/0W1ZZANlrd7LoTxbIpfKtP0m+2tU7Abj7BVigJ
aOobwnC4MrHGpNVysccmXTUr6nKUG0NmmdojGyFc7WHy2c3XwIyboY8Kncfk+uyB
gzPIM9KildTHB3ZOy4z1swKOtZp5JIHwVTTYWnNgyYmAhDylOHdIGl/eAs3IFDWP
Pu7ljhB/PTFArGHSTKP/RYnpuMrQkd9GdIFzmhZr/unJbTO1h5Wro94oapCDzSOj
1ocmNt0/F1UglI5njvaZGLWC5miwT5SQC942lAvsa2lFXthMFCXPYViBBQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFHFd+ar50c0XykDJUq2PcfCjQyu3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzAyM2Iw
Ni01YjFlLTQ0ZTktOThkOC03ODFiZTU5OGJmNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMDIzYjA2
LTViMWUtNDRlOS05OGQ4LTc4MWJlNTk4YmY1OC8xL2NWMzVxdm5SelJmS1FNbFNy
WTl4OEtOREs3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgLkgDANBgkqhkiG9w0BAQsFAAOCAQEAWwWT
UDOxgRTBwun6PN53sPUqGKE6hEj85YJM4VzytkkaY18Oa5a1rqy7/EQQIIzJRtXe
9e2mv8fbUfYu11Nx0sQPj5EaAwjZs4QTr9JEtMAdLb6LAK92vS0v6ek9MT9mGB2S
OZYWlBIH+hU7bMYHISZ5LxpNUeCXezOt/8Rj4vF75jo137xxa8+pu6s/lri8tGq2
Z9KAUCoA5zft0l/xdGATrNto34ZkDml9rmpCK8DCTTCS5oSvJCEn1XLG61ttJ+/7
lB5tgqUgOo2UB76g0xnCQj+imN1Ge09Wp7OeakoJB81zYh2Hh8gJkOVv5WKvjdJ7
HVoTbhGf5PMgg3TVnQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 16:38:47 2025 by rpki-client