Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7DlLEaG39V3abyD2h_INtj0u7s.cer
File:                     m7DlLEaG39V3abyD2h_INtj0u7s.cer (raw, json)
Hash identifier:          ctnUi+dfjXSAT+kHXRvZAWLT6pOSeKw6nzfG7eqaqNc=
Subject key identifier:   9B:B0:E5:2C:46:86:DF:D5:77:69:BC:83:DA:1F:C8:36:D8:F4:BB:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC801FF7B994C385372261B048B487675
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/a18443-188c-411d-8bc5-3d73746f9f19/1/m7DlLEaG39V3abyD2h_INtj0u7s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/a18443-188c-411d-8bc5-3d73746f9f19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 02:30:23 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 42308

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 07:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:ff:7b:99:4c:38:53:72:26:1b:04:8b:48:76:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:30:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9bb0e52c4686dfd57769bc83da1fc836d8f4bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:d0:6a:d0:9e:58:7b:8d:5d:e7:14:1c:ac:
                    c2:fd:bb:14:a3:9b:49:72:56:28:90:b2:85:7b:1e:
                    13:dc:9b:9f:4a:ad:80:71:56:4b:5e:53:ef:3e:ec:
                    3b:5f:78:92:c4:a7:94:d6:6a:0d:9a:fd:0f:ba:31:
                    9e:cb:54:da:de:ed:8c:bf:bc:ae:cd:4d:3a:14:29:
                    69:ab:1b:0d:f0:c2:ff:b7:cc:9c:22:45:3d:21:16:
                    1b:3b:13:5c:dc:de:49:20:51:4d:7e:65:1b:92:65:
                    da:61:4c:fe:90:54:4f:5b:2c:4b:b0:51:81:47:a4:
                    3c:fc:47:83:58:8c:5d:44:1f:9f:2a:2b:76:f8:8c:
                    24:65:4c:0c:36:05:0c:ca:6b:31:39:ee:df:1e:bf:
                    ea:d6:21:c9:42:47:a3:7e:f9:b2:82:bd:eb:bb:c2:
                    f6:d3:bd:38:d2:e3:19:9b:a1:e7:86:fb:f7:88:44:
                    50:6b:49:d1:b3:e4:73:64:85:68:e1:11:90:76:99:
                    cc:50:c5:b3:60:44:72:d1:16:57:99:72:74:6e:29:
                    b4:17:28:e3:35:43:62:de:ac:f9:83:cb:70:a5:39:
                    ee:47:c7:b6:7b:e7:75:53:ec:1d:80:9c:12:79:03:
                    21:d5:81:cf:b9:84:e6:97:5a:cb:36:85:37:17:be:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B0:E5:2C:46:86:DF:D5:77:69:BC:83:DA:1F:C8:36:D8:F4:BB:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a18443-188c-411d-8bc5-3d73746f9f19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a18443-188c-411d-8bc5-3d73746f9f19/1/m7DlLEaG39V3abyD2h_INtj0u7s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42308

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:59:2f:9f:68:e8:39:cc:17:d2:02:df:15:7b:f5:c8:b2:
         c3:b5:0e:ef:94:b9:6c:8e:41:01:da:4b:4c:4a:d5:fa:e7:4d:
         89:18:f8:bc:d1:f9:81:ea:33:c8:0b:76:c2:0b:f4:e0:73:ee:
         88:4b:0e:a6:ff:a6:69:df:e4:62:96:58:6a:36:6e:34:48:21:
         dd:ef:24:18:ef:42:2b:e0:5f:14:84:3f:68:03:cd:77:c6:2b:
         c7:a9:d0:3c:4f:b6:56:ba:89:cd:47:1a:a6:fb:bf:ce:f6:10:
         ca:bf:56:7d:54:77:bc:27:7d:f3:54:c3:58:8f:82:c8:d3:cf:
         ef:59:de:44:59:c0:7c:61:34:e3:99:25:02:9f:cd:2b:e3:4b:
         36:f3:f2:80:9a:d0:20:a0:7f:74:5c:2b:cd:2e:36:1c:ba:17:
         24:d7:98:2a:c7:ed:8c:e6:90:f7:09:a7:b4:e4:5a:2a:bf:72:
         ba:ef:aa:e6:98:3b:c9:7a:33:db:83:d9:74:0c:cb:24:9a:11:
         e0:b9:6a:10:ab:45:63:52:17:0a:83:b2:33:b4:3e:c4:61:37:
         40:6c:e0:d0:e3:b8:ae:cd:b0:6e:91:79:f3:f1:0e:0d:cf:a4:
         87:71:05:d2:ce:b5:4c:3a:58:97:79:10:95:47:9c:d3:de:dd:
         a5:10:3e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----