Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
File:                     nhiu6P5wNU916m2r-J7Y-UtqHlg.cer (raw, json)
Hash identifier:          sECwtwqt+uG+JLcBQf0Ux4891M4XsXr742QDcB0TOl0=
Subject key identifier:   9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC348C07BDABF476113682FEDCD47A665
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:29:34 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 59950
                          IP: 212.6.48.0/23
                          IP: 2a03:19a0::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 13:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:c0:7b:da:bf:47:61:13:68:2f:ed:cd:47:a6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:75:f0:14:3f:5c:d8:3a:20:f0:ce:e2:2a:
                    a2:75:51:85:c3:b9:d9:31:47:cf:80:60:ce:af:2d:
                    e2:52:9b:41:87:65:6b:48:d2:cf:cb:eb:74:9d:6f:
                    c9:85:5a:f9:f1:5c:5e:1f:6c:66:f0:b0:a9:52:b3:
                    d5:91:c4:56:5a:49:8f:1e:d1:50:ad:38:71:b6:9a:
                    e7:c3:a5:89:c4:c9:66:ee:10:a7:84:f7:49:b4:cb:
                    23:86:a0:1b:38:f9:99:6e:18:36:19:73:84:fd:56:
                    d6:b7:99:e8:4e:f5:22:52:7a:2d:a7:94:42:35:bd:
                    52:28:37:d3:ec:3c:7f:20:18:5a:89:ac:7f:75:47:
                    13:39:75:dd:d0:08:42:0f:10:a5:4f:27:2d:c1:e8:
                    b9:db:66:e1:f7:9d:d4:81:99:13:8a:6a:56:f0:8a:
                    fe:08:95:92:12:9f:f4:0d:c3:13:94:11:cd:7b:b7:
                    1f:ba:76:38:12:96:e9:ee:7a:8d:28:3c:38:11:78:
                    d7:d7:10:da:61:2a:39:ee:7b:61:da:b8:d8:50:d7:
                    2e:c6:70:46:4b:01:e0:aa:ae:71:ac:a9:94:6d:d8:
                    5e:f3:ff:79:e9:af:3d:35:47:30:c3:88:80:2f:47:
                    e8:d5:74:be:e9:16:3c:42:36:8e:02:22:31:37:6d:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.48.0/23
                IPv6:
                  2a03:19a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59950

    Signature Algorithm: sha256WithRSAEncryption
         38:74:4b:aa:35:b8:e1:69:a9:43:62:44:f2:63:07:55:9b:e4:
         cf:93:3f:82:3a:51:75:58:fc:01:1d:42:e1:15:3a:ef:53:d1:
         1d:ab:95:1d:0e:c6:bd:15:13:e6:5a:17:5b:ce:b8:19:54:aa:
         4c:5e:a5:22:66:f8:57:cf:a2:49:fe:3a:b2:6b:67:fc:f4:63:
         8b:56:c3:90:dd:4b:65:1d:c8:26:51:f5:b2:72:1c:03:f8:06:
         45:8e:39:44:c3:4a:b7:4d:58:ef:06:21:36:58:a2:7a:a1:57:
         a6:f6:58:9b:2a:43:77:2f:01:87:6f:f7:ec:0e:7c:ef:e2:4a:
         1f:4f:e0:45:08:fb:27:76:a7:47:f7:9e:da:a2:af:0a:2f:ee:
         12:9b:23:98:21:1b:98:20:3d:4c:23:cc:ea:da:19:0e:57:79:
         17:06:a2:29:8d:24:a2:ce:df:22:69:64:43:ad:fb:ce:cf:56:
         41:d5:fd:32:22:c8:a2:22:ca:7f:4a:7c:27:87:55:67:f2:3f:
         d7:25:73:0d:cd:b7:2a:45:9c:96:b9:cf:e2:ab:03:94:3a:bc:
         87:90:02:b5:8e:fc:12:af:13:f2:38:46:ec:1b:21:63:e6:9e:
         c6:2f:6e:f8:db:b5:c5:f7:a0:f9:64:d4:1a:c9:15:70:b8:e1:
         d3:20:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----