Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
File:                     mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer (raw, json)
Hash identifier:          CH3JcXb56rjXJo5ztG9iYnOf1bka6UvpMlDvIB0Q6WE=
Subject key identifier:   99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC492B04A13EECDB0E273868743F8E18C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:29:56 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.5.147.0/24
                          IP: 2a14:2700::/29

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 09:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:b0:4a:13:ee:cd:b0:e2:73:86:87:43:f8:e1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=99fea9717c280ec879335273f022e6b0537455c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:aa:74:96:e0:5f:df:a5:d4:f7:30:1a:55:
                    1c:4f:61:20:09:c3:61:c8:e0:5f:0b:66:03:31:b3:
                    ef:d6:16:8c:19:dc:fc:ab:64:0a:a0:6c:69:4a:ab:
                    81:a2:f2:74:0c:a6:b0:c9:3d:68:94:d1:95:c3:3a:
                    e3:79:e4:fb:2f:3a:d7:be:bc:da:14:ba:6a:a0:6a:
                    3f:4a:2b:57:67:8b:75:47:f8:fb:8a:2d:e3:2a:f1:
                    ce:cd:85:35:4c:c3:26:b4:90:8a:35:7d:fd:1e:d5:
                    1f:a2:38:4c:c1:9e:d8:e7:59:ab:97:7b:8e:3f:e9:
                    59:c4:9d:ac:ac:40:bb:8b:32:a9:59:c2:23:b2:26:
                    23:f0:b6:3d:52:b7:87:d7:12:16:fb:d5:cd:5f:35:
                    0a:52:7b:3d:03:a2:84:43:47:87:70:f2:55:dd:e2:
                    5c:db:00:73:d9:1b:02:97:0a:55:04:06:92:2d:c4:
                    f6:67:39:b7:ae:69:45:ba:71:cb:bf:9e:96:b1:92:
                    40:2d:07:a0:c1:0a:ea:3e:19:9d:77:2c:32:9e:92:
                    42:36:54:01:f9:31:00:db:72:b1:e5:5d:2c:8f:05:
                    a8:a2:e4:e7:22:7f:79:95:ec:5a:c6:4f:5b:85:cb:
                    10:f4:0d:29:dc:c8:20:fc:50:19:18:fb:91:60:3a:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.147.0/24
                IPv6:
                  2a14:2700::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:f4:51:81:b8:5a:bd:1f:1f:79:ed:a1:4a:fa:2d:b6:7a:
         5c:7c:6c:41:b4:cc:3b:c1:ca:da:4d:4e:51:8e:4f:ed:18:d2:
         6d:c4:c4:3f:2e:88:84:ce:8b:3e:e1:04:db:ee:57:e2:67:37:
         dc:39:1b:c4:77:e4:7d:00:7b:53:b4:1c:e3:bf:dd:8d:23:85:
         bb:82:e7:29:b2:28:47:fa:41:ed:58:77:b0:00:bc:51:4c:95:
         9b:73:a0:c7:ac:dc:0c:00:c1:bf:02:e5:e9:0e:d2:e0:26:17:
         d2:a6:45:0d:d6:a8:6c:c6:48:14:ef:76:28:18:e9:52:84:74:
         f0:87:6f:95:82:76:2c:83:ff:a5:09:0c:50:8c:6f:2d:57:a8:
         1c:dd:55:c5:6f:2d:9d:58:5e:6e:13:f2:50:44:a6:88:20:b1:
         16:31:b1:fa:52:8c:89:3b:5b:a8:31:61:99:c4:b8:ad:de:0a:
         b5:0e:64:55:bd:14:35:ce:d2:07:42:8e:23:cd:da:be:db:4c:
         4d:b6:96:33:58:0c:8e:61:44:65:f6:4e:31:a4:93:5a:8f:7c:
         23:04:75:06:ac:d3:14:6a:f4:e7:5c:29:7d:ea:7a:d8:52:a5:
         ac:58:c7:60:29:8a:92:ad:33:0f:17:79:26:ce:18:e5:6a:2a:
         8e:75:c0:8f
-----BEGIN CERTIFICATE-----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