Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nFnCteAKTaGkAdDqXZ9uGEXgcqs.cer
File:                     nFnCteAKTaGkAdDqXZ9uGEXgcqs.cer (raw, json)
Hash identifier:          dI1ioOtZxvuL3OEIYBgMzxK7J6DRl+IyVEtHwyVXI/8=
Subject key identifier:   9C:59:C2:B5:E0:0A:4D:A1:A4:01:D0:EA:5D:9F:6E:18:45:E0:72:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FDD011A28E91C18F5701A5FE561E86136
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/9C59C2B5E00A4DA1A401D0EA5D9F6E1845E072AB.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 03 Jun 2024 07:29:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58339

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 08:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:dd:01:1a:28:e9:1c:18:f5:70:1a:5f:e5:61:e8:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  3 07:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9c59c2b5e00a4da1a401d0ea5d9f6e1845e072ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:ac:9e:b9:e1:29:8b:6c:f1:61:fe:2e:0f:
                    49:f2:15:f3:e0:d3:9c:e1:3f:9b:0e:0b:48:fd:9d:
                    01:5e:76:65:5e:cd:11:18:11:50:78:2a:98:b7:f9:
                    47:10:f3:86:51:54:fe:e9:b0:4f:ef:d0:c6:c9:95:
                    9d:c2:32:3e:2f:6b:d5:c1:d8:d8:08:d4:ef:57:59:
                    59:5a:b4:a1:11:3b:18:a6:91:d2:51:94:7d:fc:92:
                    a1:07:06:c5:fd:59:d9:64:11:bc:1c:1f:5b:92:1c:
                    c6:7c:9d:07:a9:ff:bd:b0:d2:b9:81:1e:7e:94:32:
                    b2:21:cc:9b:37:5e:6b:70:39:12:70:d5:98:2e:9e:
                    e1:ba:0e:2c:4f:53:01:08:89:7f:4d:5d:53:67:88:
                    61:e3:71:1a:e1:c3:40:76:ad:3e:72:69:05:ce:c9:
                    4c:44:96:9f:54:32:aa:9c:38:83:c4:2e:4f:48:4d:
                    a0:68:a8:1f:3b:6d:21:43:71:03:5b:3a:9e:08:84:
                    f5:cf:d2:30:6a:8b:d1:9c:84:a1:1a:93:ec:3c:83:
                    d6:c8:54:48:68:04:e9:d3:58:42:1a:94:71:42:a6:
                    cb:ec:73:36:c7:1d:58:3d:9f:37:bc:4f:fd:9d:b3:
                    11:aa:12:81:87:b7:62:0d:f7:c7:fa:65:1c:b3:92:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:C2:B5:E0:0A:4D:A1:A4:01:D0:EA:5D:9F:6E:18:45:E0:72:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/9C59C2B5E00A4DA1A401D0EA5D9F6E1845E072AB.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58339

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:a5:a0:a9:fd:4b:df:f7:2a:15:d4:24:9a:c3:77:46:fa:
         1f:a5:bf:20:5e:b1:30:01:e3:a6:fc:53:0a:81:98:dc:cf:6c:
         25:7c:23:e5:5d:52:aa:b0:dc:5a:53:20:d7:23:53:56:bb:dd:
         bd:5a:6a:d2:38:fe:60:d4:0e:11:8f:12:0d:c4:5e:fc:46:dc:
         90:41:00:a5:e0:0a:53:b0:10:3a:f8:83:b6:11:0f:23:cc:32:
         fa:d1:22:f4:21:7c:32:8e:eb:bd:85:0e:2c:e8:62:fe:7e:b8:
         46:11:49:68:1f:08:84:25:09:4c:2a:e0:32:29:ec:79:04:4c:
         72:31:ac:da:40:a3:dd:f2:ae:15:02:74:3b:38:14:15:44:52:
         b1:b5:4f:c7:fc:da:11:f6:5a:8f:d3:01:49:c7:b0:4f:06:35:
         83:fc:10:00:fd:a3:b9:45:7b:a4:a3:29:99:4d:2f:6d:f1:14:
         de:a3:33:b6:ab:64:46:9b:2e:36:07:3f:0a:da:c3:96:19:4f:
         11:27:f3:58:c8:88:99:90:50:f9:ae:25:bf:72:d9:eb:0f:9e:
         70:ba:e2:2e:55:96:e9:ae:48:da:51:32:88:28:42:83:9c:84:
         81:95:59:d3:67:62:ab:53:d3:75:96:70:a9:73:41:b9:b2:55:
         03:44:af:4f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAY/dARoo6RwY9XAaX+Vh6GE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjAzMDcyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzU5YzJiNWUwMGE0ZGExYTQwMWQwZWE1ZDlmNmUxODQ1ZTA3MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P+snrnhKYts8WH+Lg9J8hXz4NOc
4T+bDgtI/Z0BXnZlXs0RGBFQeCqYt/lHEPOGUVT+6bBP79DGyZWdwjI+L2vVwdjY
CNTvV1lZWrShETsYppHSUZR9/JKhBwbF/VnZZBG8HB9bkhzGfJ0Hqf+9sNK5gR5+
lDKyIcybN15rcDkScNWYLp7hug4sT1MBCIl/TV1TZ4hh43Ea4cNAdq0+cmkFzslM
RJafVDKqnDiDxC5PSE2gaKgfO20hQ3EDWzqeCIT1z9IwaovRnIShGpPsPIPWyFRI
aATp01hCGpRxQqbL7HM2xx1YPZ83vE/9nbMRqhKBh7diDffH+mUcs5JOuQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFJxZwrXgCk2hpAHQ6l2fbhhF4HKrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FjZWNm
ZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEyOS8yLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNl
Y2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5LzIvOUM1OUMyQjVFMDBB
NERBMUE0MDFEMEVBNUQ5RjZFMTg0NUUwNzJBQi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA4+Mw
DQYJKoZIhvcNAQELBQADggEBAGnGpaCp/Uvf9yoV1CSaw3dG+h+lvyBesTAB46b8
UwqBmNzPbCV8I+VdUqqw3FpTINcjU1a73b1aatI4/mDUDhGPEg3EXvxG3JBBAKXg
ClOwEDr4g7YRDyPMMvrRIvQhfDKO672FDizoYv5+uEYRSWgfCIQlCUwq4DIp7HkE
THIxrNpAo93yrhUCdDs4FBVEUrG1T8f82hH2Wo/TAUnHsE8GNYP8EAD9o7lFe6Sj
KZlNL23xFN6jM7arZEabLjYHPwraw5YZTxEn81jIiJmQUPmuJb9y2esPnnC64i5V
lumuSNpRMogoQoOchIGVWdNnYqtT03WWcKlzQbmyVQNEr08=
-----END CERTIFICATE-----