Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fEIT-wlBNQ5xH-F44HQcjmunEbg.cer
File:                     fEIT-wlBNQ5xH-F44HQcjmunEbg.cer (raw, json)
Hash identifier:          y0jYkxdvtCDLgNNSQ/6PumTddtarbRVOujV/yx3QGtw=
Subject key identifier:   7C:42:13:FB:09:41:35:0E:71:1F:E1:78:E0:74:1C:8E:6B:A7:11:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444B69A2F065C3D041468A5AE064780
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/e8f90a-f0d8-4935-8760-dde2a9f8e4a6/1/fEIT-wlBNQ5xH-F44HQcjmunEbg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/e8f90a-f0d8-4935-8760-dde2a9f8e4a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213254
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 07:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:b6:9a:2f:06:5c:3d:04:14:68:a5:ae:06:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c4213fb0941350e711fe178e0741c8e6ba711b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:e0:a1:2f:df:c6:ee:5b:c8:4d:36:d5:72:
                    0b:82:5c:f2:35:0d:49:d1:fa:c9:cf:c4:48:28:aa:
                    b2:7a:fd:19:39:09:50:96:2c:21:33:9f:92:ef:07:
                    10:44:2a:d7:51:c3:b2:49:12:60:06:45:30:40:d2:
                    da:bf:dc:61:72:ea:f5:5c:68:78:9f:76:b0:c3:14:
                    a3:24:0b:f2:e2:37:a4:1a:ed:b3:72:4e:f3:da:c3:
                    ab:a2:07:5b:02:41:7e:69:4d:c3:49:f4:26:8e:8f:
                    59:2b:c4:70:96:f7:ba:4b:c1:ad:50:d1:d3:c0:ca:
                    b4:59:5e:ae:1e:c4:d3:1d:b3:cc:9a:da:d4:8f:e7:
                    c4:3a:b1:b7:bb:1e:34:89:ad:32:7a:35:94:55:06:
                    94:45:c0:53:16:8a:47:ec:cf:2c:50:23:50:b8:c0:
                    30:59:52:5a:86:01:89:f0:ea:99:6b:f3:fd:b9:26:
                    76:a4:d3:f5:36:84:aa:21:be:d1:75:bc:ee:af:50:
                    0e:99:2c:b3:3e:78:b1:7b:07:bb:a0:2c:d2:aa:6d:
                    85:40:98:2c:1f:ef:76:b7:11:ba:b3:e4:7c:5c:29:
                    9e:9b:5f:f7:e1:2e:00:67:e6:58:1e:fb:35:b4:6b:
                    05:c4:7f:13:71:5c:2c:0f:10:d9:e0:93:c5:1e:e9:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:13:FB:09:41:35:0E:71:1F:E1:78:E0:74:1C:8E:6B:A7:11:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e8f90a-f0d8-4935-8760-dde2a9f8e4a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e8f90a-f0d8-4935-8760-dde2a9f8e4a6/1/fEIT-wlBNQ5xH-F44HQcjmunEbg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213254

    Signature Algorithm: sha256WithRSAEncryption
         48:22:46:d3:b4:68:72:9b:97:77:f1:a0:3e:8d:2c:eb:5c:6a:
         c0:69:2c:f9:e2:ae:a6:e2:00:36:45:d1:89:d3:a9:f8:0f:03:
         e2:fb:5e:7e:6e:d2:70:0c:d1:97:37:ac:1d:e1:2a:91:00:2b:
         1e:5b:8b:ce:14:69:07:d7:8f:ad:af:16:c5:28:aa:b1:59:dd:
         9d:a9:54:3d:8e:0a:ea:0d:cb:9f:e6:bc:af:35:81:fe:96:9b:
         e5:90:b7:2c:39:8b:91:aa:98:e5:50:10:df:44:0a:e5:25:47:
         a0:ee:c4:d1:6b:6b:37:07:b4:66:80:b5:b0:14:f1:b0:3d:30:
         57:35:8b:ed:36:34:54:7a:d7:78:4d:18:35:e4:b1:01:8e:cf:
         e7:f9:77:f8:b0:13:7a:02:ad:4a:5c:66:3e:73:93:95:d8:8a:
         8e:f7:63:d8:fe:03:d1:b3:6a:92:27:0c:5d:d8:4b:9b:d0:a7:
         93:e9:eb:34:f1:7e:31:48:da:8c:ce:e3:de:b3:05:25:b3:56:
         48:c1:10:33:43:26:ee:27:1a:75:ae:84:dc:30:ea:a3:7c:8f:
         b0:11:2a:f2:40:93:61:f1:f3:e3:fd:e8:47:47:fa:ac:f6:6b:
         54:05:fc:62:db:41:27:77:19:4d:ce:eb:a6:db:70:b4:93:ef:
         e2:8e:05:76
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQkRLaaLwZcPQQUaKWuBkeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzQyMTNmYjA5NDEzNTBlNzExZmUxNzhlMDc0MWM4ZTZiYTcxMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7vgoS/fxu5byE021XILglzyNQ1J
0frJz8RIKKqyev0ZOQlQliwhM5+S7wcQRCrXUcOySRJgBkUwQNLav9xhcur1XGh4
n3awwxSjJAvy4jekGu2zck7z2sOrogdbAkF+aU3DSfQmjo9ZK8Rwlve6S8GtUNHT
wMq0WV6uHsTTHbPMmtrUj+fEOrG3ux40ia0yejWUVQaURcBTFopH7M8sUCNQuMAw
WVJahgGJ8OqZa/P9uSZ2pNP1NoSqIb7Rdbzur1AOmSyzPnixewe7oCzSqm2FQJgs
H+92txG6s+R8XCmem1/34S4AZ+ZYHvs1tGsFxH8TcVwsDxDZ4JPFHunC/QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHxCE/sJQTUOcR/heOB0HI5rpxG4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2U4Zjkw
YS1mMGQ4LTQ5MzUtODc2MC1kZGUyYTlmOGU0YTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZThmOTBh
LWYwZDgtNDkzNS04NzYwLWRkZTJhOWY4ZTRhNi8xL2ZFSVQtd2xCTlE1eEgtRjQ0
SFFjam11bkViZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBBjANBgkqhkiG9w0BAQsFAAOCAQEASCJG07RocpuX
d/GgPo0s61xqwGks+eKupuIANkXRidOp+A8D4vtefm7ScAzRlzesHeEqkQArHluL
zhRpB9ePra8WxSiqsVndnalUPY4K6g3Ln+a8rzWB/pab5ZC3LDmLkaqY5VAQ30QK
5SVHoO7E0WtrNwe0ZoC1sBTxsD0wVzWL7TY0VHrXeE0YNeSxAY7P5/l3+LATegKt
SlxmPnOTldiKjvdj2P4D0bNqkicMXdhLm9Cnk+nrNPF+MUjajM7j3rMFJbNWSMEQ
M0Mm7icada6E3DDqo3yPsBEq8kCTYfHz4/3oR0f6rPZrVAX8YttBJ3cZTc7rpttw
tJPv4o4Fdg==
-----END CERTIFICATE-----
Generated at Wed Mar 12 17:48:56 2025 by rpki-client