Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jjYT33LRE5KLlkC5A9f7CmOsQ9s.cer
File:                     jjYT33LRE5KLlkC5A9f7CmOsQ9s.cer (raw, json)
Hash identifier:          qubHVCpv6uBSZo46Yu1kA9K9kTTJrVOG1wZJv2Z594k=
Subject key identifier:   8E:36:13:DF:72:D1:13:92:8B:96:40:B9:03:D7:FB:0A:63:AC:43:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01917B0F6707E23C1DA07E2184986A6D4852
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dc9557f7-896a-491e-ae04-4e09b1c8f134/0/8E3613DF72D113928B9640B903D7FB0A63AC43DB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dc9557f7-896a-491e-ae04-4e09b1c8f134/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 17:08:12 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214393

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 18:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:7b:0f:67:07:e2:3c:1d:a0:7e:21:84:98:6a:6d:48:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 22 17:08:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8e3613df72d113928b9640b903d7fb0a63ac43db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:b1:9d:60:77:3b:2e:be:7d:f5:1d:ca:b7:
                    36:49:3f:0f:84:90:25:2b:ff:06:62:47:54:ab:77:
                    93:7b:d6:53:2d:d3:8d:d2:c6:4d:32:41:7a:78:02:
                    44:96:d8:b4:f5:e6:df:ca:62:81:17:cc:eb:82:c2:
                    67:d3:a2:02:b9:f7:78:ed:c3:3b:0e:92:80:35:74:
                    3f:31:9a:60:81:7e:87:e7:52:2c:c0:19:f9:94:2e:
                    11:46:74:f6:82:e6:c6:2b:83:17:2f:45:1c:a7:df:
                    1a:0f:7d:c0:54:bc:9a:27:e9:92:b8:b9:62:d4:6a:
                    cb:69:51:9f:a6:45:4c:f3:ce:ef:17:8f:84:43:7e:
                    37:81:c7:c1:d7:65:d3:53:e0:b4:ce:5e:1e:d7:bd:
                    f8:08:82:ff:87:42:4a:e5:02:ca:b1:b0:cb:2d:58:
                    5e:fa:0d:d8:ba:fb:c8:5c:d2:a2:d8:83:8c:f6:83:
                    e2:4a:79:35:d5:96:95:ef:ef:f5:e0:b9:e4:c3:f1:
                    7a:99:03:4d:56:f1:43:b9:c6:74:9f:ce:2d:ad:62:
                    05:8f:f6:e3:9b:98:cc:41:8a:23:09:54:55:81:f0:
                    3a:db:54:a0:0c:af:d3:b5:d1:ed:9f:60:a9:2b:b1:
                    49:bc:28:e2:cf:d9:7a:b0:6b:1b:c4:75:65:9b:ec:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:13:DF:72:D1:13:92:8B:96:40:B9:03:D7:FB:0A:63:AC:43:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dc9557f7-896a-491e-ae04-4e09b1c8f134/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dc9557f7-896a-491e-ae04-4e09b1c8f134/0/8E3613DF72D113928B9640B903D7FB0A63AC43DB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214393

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:2e:9f:74:ed:1d:7c:be:6b:49:aa:85:39:ef:b2:5e:62:
         fe:84:6c:53:dc:43:f8:ce:d0:a5:56:f6:37:ce:f3:43:5f:1d:
         5c:fe:bd:c2:23:17:8e:c1:0a:9b:d1:da:2a:d5:9c:ff:ec:a4:
         ff:7e:bc:22:33:89:f9:b6:8e:9b:8a:40:d3:fd:e4:13:d5:24:
         ae:ba:39:0b:86:bd:d9:4f:f9:3f:09:50:87:d7:82:9a:d0:8e:
         e7:52:26:c3:93:ae:31:c3:66:dd:8d:58:87:d5:c5:08:84:2f:
         cf:25:44:71:ce:77:0f:b2:25:6f:52:9d:60:d9:4a:58:1b:4e:
         a0:9a:c0:23:ea:0a:65:1c:fe:c9:c9:11:64:26:da:f8:9f:b5:
         e9:f2:67:a5:0f:1b:b6:75:12:bf:bf:2d:a7:30:c0:9b:8d:c0:
         67:53:fe:8f:0d:a7:bf:4c:40:99:82:df:98:87:3c:37:24:de:
         08:78:e3:78:29:8a:d9:0d:a9:d7:27:df:7b:c5:ae:f9:b6:5e:
         25:3b:8a:c1:d6:31:0a:f6:a1:1f:39:e1:c0:5d:8f:52:cf:8f:
         c5:7d:59:a0:15:d1:ea:15:b4:4e:6c:97:28:0b:6c:0b:02:60:
         4d:98:46:e4:d8:aa:17:c7:38:ca:c6:cb:7e:35:b8:34:67:92:
         b1:7f:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----