Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
File:                     iF7nSXYIGvmeHXt0Btio9fbA97k.cer (raw, json)
Hash identifier:          5s/FOMGmAhLEzdeGiF7r5Rjj9Tdx6248IG5K22XRqPA=
Subject key identifier:   88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428263556978FC7ECC872EC3EFBD30B67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215652
Validation:               Failed, certificate revoked on Fri 03 Jan 2025 11:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:35:56:97:8f:c7:ec:c8:72:ec:3e:fb:d3:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:57:f4:c3:2e:07:e6:65:bb:57:67:36:fb:79:
                    38:44:06:12:23:31:48:7e:77:20:f5:6d:a3:b1:80:
                    17:f1:b2:cb:26:63:ae:f6:04:0d:dc:c7:d4:34:0c:
                    ed:9f:cf:e0:1f:98:02:a7:b4:cc:a6:9c:a0:94:1f:
                    9a:d8:f6:2a:79:14:2c:a8:e3:a9:98:f8:21:37:31:
                    cf:61:c7:b0:42:03:a5:30:3a:cf:27:58:11:e2:06:
                    68:dc:d8:55:fb:eb:a8:d8:94:8e:cb:6f:3e:21:17:
                    3b:53:8a:f7:aa:6c:79:05:91:b6:94:17:cf:c9:7d:
                    64:25:eb:87:83:ba:7d:69:dd:8a:fc:c1:34:5f:60:
                    53:ec:23:7b:3f:ed:9b:dc:ab:89:49:51:9c:2b:96:
                    7b:6e:01:45:a9:78:43:51:b9:f9:86:63:e0:9c:91:
                    3b:c6:9f:59:7f:63:29:a0:05:45:15:71:18:73:c4:
                    35:4c:8f:36:af:4b:cb:e6:16:8c:fd:6f:5b:7c:7e:
                    a1:ef:ce:a9:a2:53:bc:57:e6:36:6a:8e:ba:c8:d7:
                    7c:6d:f9:64:d9:af:d9:b1:9a:56:51:90:61:4a:6f:
                    af:1d:7b:5b:f2:52:c3:41:66:07:85:a3:91:01:42:
                    cf:ad:d7:bd:08:b7:7a:38:a8:f1:3f:64:bd:a7:13:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215652

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:ff:bf:04:66:fd:9c:8a:67:17:99:31:09:49:3f:bf:77:
         39:68:10:be:75:b6:9f:9b:22:16:6a:35:9f:61:84:dd:ff:13:
         3d:62:ad:1a:cd:85:68:c2:b4:fc:1c:e4:de:3b:55:6c:22:30:
         ac:ce:b8:75:76:14:fb:d7:a6:16:4e:f2:5d:7e:e1:27:1e:a1:
         1b:bd:ed:ad:3a:d1:00:fb:7e:5e:af:da:2e:f2:d4:78:55:d4:
         ab:be:34:e8:e3:29:aa:2b:b4:7a:ec:ca:0f:a3:f8:ed:ec:5b:
         c8:4b:57:48:48:76:2a:4e:69:68:5c:84:f6:4b:88:40:c6:53:
         2d:99:43:3c:82:f9:98:e2:1a:a2:34:96:fd:06:d1:7b:27:44:
         98:ec:32:75:cb:03:cc:14:27:2b:74:6b:20:93:e9:17:94:5f:
         17:93:c5:08:fe:1b:e0:6b:69:b4:2a:74:dd:67:0a:bc:e7:08:
         3e:b2:c5:ce:f0:76:65:0f:3f:f0:3a:93:05:1a:2f:f2:a4:c0:
         f8:e8:d5:a7:f3:61:18:0f:23:69:27:92:c7:34:92:25:31:26:
         ed:5d:85:e2:83:01:bf:5a:6c:de:11:1d:98:5e:9e:52:0f:78:
         84:16:79:44:f7:1c:0e:0d:0b:4a:df:8a:04:3e:5d:a2:d8:de:
         c0:06:a9:a5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQoJjVWl4/H7Mhy7D770wtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVlZTc0OTc2MDgxYWY5OWUxZDdiNzQwNmQ4YThmNWY2YzBmN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lf0wy4H5mW7V2c2+3k4RAYSIzFI
fncg9W2jsYAX8bLLJmOu9gQN3MfUNAztn8/gH5gCp7TMppyglB+a2PYqeRQsqOOp
mPghNzHPYcewQgOlMDrPJ1gR4gZo3NhV++uo2JSOy28+IRc7U4r3qmx5BZG2lBfP
yX1kJeuHg7p9ad2K/ME0X2BT7CN7P+2b3KuJSVGcK5Z7bgFFqXhDUbn5hmPgnJE7
xp9Zf2MpoAVFFXEYc8Q1TI82r0vL5haM/W9bfH6h786polO8V+Y2ao66yNd8bflk
2a/ZsZpWUZBhSm+vHXtb8lLDQWYHhaORAULPrde9CLd6OKjxP2S9pxPdkQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIhe50l2CBr5nh17dAbYqPX2wPe5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2YwNGU4
YS1hMDkxLTQxYmUtOGEyNy1mZjlkMjRiNDIxOWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvZjA0ZThh
LWEwOTEtNDFiZS04YTI3LWZmOWQyNGI0MjE5ZC8xL2lGN25TWFlJR3ZtZUhYdDBC
dGlvOWZiQTk3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNKZDANBgkqhkiG9w0BAQsFAAOCAQEAC5T/vwRm/ZyK
ZxeZMQlJP793OWgQvnW2n5siFmo1n2GE3f8TPWKtGs2FaMK0/Bzk3jtVbCIwrM64
dXYU+9emFk7yXX7hJx6hG73trTrRAPt+Xq/aLvLUeFXUq7406OMpqiu0euzKD6P4
7exbyEtXSEh2Kk5paFyE9kuIQMZTLZlDPIL5mOIaojSW/QbReydEmOwydcsDzBQn
K3RrIJPpF5RfF5PFCP4b4GtptCp03WcKvOcIPrLFzvB2ZQ8/8DqTBRov8qTA+OjV
p/NhGA8jaSeSxzSSJTEm7V2F4oMBv1ps3hEdmF6eUg94hBZ5RPccDg0LSt+KBD5d
otjewAappQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:14:08 2025 by rpki-client