Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer
File:                     gMGC8Jzf20wXzTGwpYkaidYTx_w.cer (raw, json)
Hash identifier:          E5V8aD758cRrMx30NLJu/NvDBW5quSZ68TRsaMTliHM=
Subject key identifier:   80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4246C591D2D4BF477D5F0337D6DB46A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 197691

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 06:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:6c:59:1d:2d:4b:f4:77:d5:f0:33:7d:6d:b4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:1d:54:3c:61:62:2f:4a:85:d2:b9:96:fa:
                    76:01:c4:97:97:45:df:29:a4:7d:aa:15:c3:8f:be:
                    36:80:85:cb:54:cb:c6:c0:49:32:ab:d8:71:70:d0:
                    93:6d:4f:8e:a3:3d:af:11:a1:68:be:4e:1c:76:e5:
                    f1:91:b4:df:10:90:32:da:5e:33:13:11:8d:3c:b2:
                    10:7d:96:84:0d:c0:20:37:97:ea:3a:67:2d:da:f2:
                    2c:f6:da:5b:05:eb:d9:fb:2f:22:03:1a:19:71:e7:
                    0a:ab:fa:7e:c7:e3:94:d8:7d:1f:55:c0:a7:82:af:
                    86:5e:cd:6c:b9:28:72:c7:21:9a:4e:89:d7:a9:40:
                    82:54:a8:9f:fb:5f:c4:8f:1c:24:45:0a:61:44:d5:
                    f8:9a:7c:fa:8a:9c:54:4b:f0:40:05:73:6f:7c:af:
                    ec:36:9e:a2:eb:f7:ae:b8:dc:67:6f:36:38:ae:66:
                    e1:61:54:7f:3e:ee:0b:b3:f8:56:8b:96:c4:69:45:
                    47:83:71:fe:60:75:72:0f:f5:3a:91:7f:99:71:b9:
                    98:62:9f:ae:e4:0c:a1:f2:a9:81:7d:41:39:e1:da:
                    f2:d8:a2:8d:ad:bb:de:38:ed:a8:c7:a3:ec:6f:77:
                    ff:51:f7:e7:58:61:5d:bb:4d:7f:b7:a9:06:83:e1:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197691

    Signature Algorithm: sha256WithRSAEncryption
         7c:9d:33:45:e4:38:69:52:da:60:30:b9:21:3e:a9:60:cd:b9:
         0a:f0:cd:26:55:59:00:71:85:2b:a6:e3:0e:06:3a:93:19:43:
         a5:d2:cf:67:17:6d:ff:7e:a4:ca:70:15:ff:2f:1e:19:e6:5a:
         d7:05:fd:ea:62:8e:38:2f:7d:14:04:a2:8a:11:c1:5e:01:23:
         2c:76:75:77:bf:63:c1:88:71:1b:8b:b8:b7:5b:b3:9e:0b:de:
         45:8b:45:14:98:65:2b:a0:6f:89:d0:44:58:18:e0:cb:94:55:
         f0:4f:52:f1:47:fa:f3:db:72:ea:c6:c0:ee:55:7d:15:3b:80:
         5a:23:e3:da:10:77:b4:a7:2e:84:bb:a7:96:62:38:5c:b9:45:
         2e:64:ee:ae:40:f9:49:c1:53:02:d8:9f:37:66:47:29:6b:72:
         da:f1:9c:83:bd:5c:37:6d:8b:2e:f5:01:6a:c0:ca:b0:59:7a:
         70:77:0d:4c:cb:93:33:14:93:89:a6:0f:51:d7:60:14:19:f6:
         4a:05:16:bf:3c:94:9c:58:17:58:b9:fe:d0:be:8c:ec:e5:91:
         e7:76:61:54:57:a6:6b:d1:89:93:85:6f:92:0f:aa:09:d6:6a:
         79:ba:fa:2e:ac:9a:73:75:f8:dc:9a:40:22:47:ef:4e:6c:3e:
         a1:a2:06:17
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzEJGxZHS1L9HfV8DN9bbRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGMxODJmMDljZGZkYjRjMTdjZDMxYjBhNTg5MWE4OWQ2MTNjN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKIdVDxhYi9KhdK5lvp2AcSXl0Xf
KaR9qhXDj742gIXLVMvGwEkyq9hxcNCTbU+Ooz2vEaFovk4cduXxkbTfEJAy2l4z
ExGNPLIQfZaEDcAgN5fqOmct2vIs9tpbBevZ+y8iAxoZcecKq/p+x+OU2H0fVcCn
gq+GXs1suShyxyGaTonXqUCCVKif+1/EjxwkRQphRNX4mnz6ipxUS/BABXNvfK/s
Np6i6/euuNxnbzY4rmbhYVR/Pu4Ls/hWi5bEaUVHg3H+YHVyD/U6kX+ZcbmYYp+u
5Ayh8qmBfUE54dry2KKNrbveOO2ox6Psb3f/UffnWGFdu01/t6kGg+HUIwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIDBgvCc39tMF80xsKWJGonWE8f8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzEwZjlk
Yi1hNzlhLTQzNjUtYmVjYi00ZmU4NDQ3MTkyNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMTBmOWRi
LWE3OWEtNDM2NS1iZWNiLTRmZTg0NDcxOTI0OS8xL2dNR0M4SnpmMjB3WHpUR3dw
WWthaWRZVHhfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMEOzANBgkqhkiG9w0BAQsFAAOCAQEAfJ0zReQ4aVLa
YDC5IT6pYM25CvDNJlVZAHGFK6bjDgY6kxlDpdLPZxdt/36kynAV/y8eGeZa1wX9
6mKOOC99FASiihHBXgEjLHZ1d79jwYhxG4u4t1uzngveRYtFFJhlK6BvidBEWBjg
y5RV8E9S8Uf689ty6sbA7lV9FTuAWiPj2hB3tKcuhLunlmI4XLlFLmTurkD5ScFT
AtifN2ZHKWty2vGcg71cN22LLvUBasDKsFl6cHcNTMuTMxSTiaYPUddgFBn2SgUW
vzyUnFgXWLn+0L6M7OWR53ZhVFema9GJk4Vvkg+qCdZqebr6Lqyac3X43JpAIkfv
Tmw+oaIGFw==
-----END CERTIFICATE-----