Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nnWtb0M-cZRf_VbxOo3itwGV8v0.cer
File:                     nnWtb0M-cZRf_VbxOo3itwGV8v0.cer (raw, json)
Hash identifier:          n2tUvmV/htkoYEZNYY22FiSEX5C5ynsQ/bUX3Yq8Op8=
Subject key identifier:   9E:75:AD:6F:43:3E:71:94:5F:FD:56:F1:3A:8D:E2:B7:01:95:F2:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC424758C96650C76C0C05E24A83E3850
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/545067-ee37-4c26-a7f6-32c2b1272ddd/1/nnWtb0M-cZRf_VbxOo3itwGV8v0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/545067-ee37-4c26-a7f6-32c2b1272ddd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 216265

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 17:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:75:8c:96:65:0c:76:c0:c0:5e:24:a8:3e:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9e75ad6f433e71945ffd56f13a8de2b70195f2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:0c:66:6f:16:2c:29:f9:08:6f:4a:5b:b6:
                    db:64:4e:c5:3d:4c:93:01:bc:32:98:42:f9:0c:77:
                    27:8a:c6:c3:90:97:c1:67:b9:8e:d1:8a:95:31:b1:
                    88:e2:65:ef:e7:07:6a:25:53:58:dc:96:b1:15:eb:
                    0b:aa:ed:b5:03:c9:10:a7:98:ea:52:ac:54:74:9a:
                    55:65:0c:84:b7:36:ce:6f:44:c7:09:63:b4:1d:8e:
                    cf:d0:30:d4:5f:d0:78:b5:e7:49:98:15:35:1f:ba:
                    a8:2d:b4:7f:c8:f9:c7:4c:f4:7c:28:69:5b:56:26:
                    02:40:18:12:d4:23:a7:91:15:a9:e3:4b:c9:6c:2a:
                    6d:84:cf:f2:82:61:4a:d7:81:af:e7:52:9c:8c:78:
                    2f:de:70:0d:d1:6e:12:80:b6:84:2c:c9:dd:97:4d:
                    88:f3:87:be:c1:47:c0:00:94:e4:b6:b7:4a:47:40:
                    4b:20:f8:fc:e9:76:3c:55:8f:6a:f0:20:30:e1:78:
                    11:be:d0:7e:b5:32:1d:88:ce:35:d4:a0:40:33:e1:
                    35:93:9c:10:28:bf:08:3a:0b:72:7e:ed:bd:19:a4:
                    09:e4:a5:86:5d:ad:eb:83:d4:50:0d:93:f3:36:7d:
                    4a:80:2f:ab:80:6c:d0:da:70:b6:b4:93:14:36:b8:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:75:AD:6F:43:3E:71:94:5F:FD:56:F1:3A:8D:E2:B7:01:95:F2:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/545067-ee37-4c26-a7f6-32c2b1272ddd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/545067-ee37-4c26-a7f6-32c2b1272ddd/1/nnWtb0M-cZRf_VbxOo3itwGV8v0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216265

    Signature Algorithm: sha256WithRSAEncryption
         77:79:bc:d5:6f:2e:df:71:e8:b5:ac:83:8f:4c:36:9c:64:39:
         3d:64:8a:29:d7:ac:70:d7:3a:fe:9c:9b:09:77:40:03:95:d2:
         93:8c:ab:71:5a:c6:ca:10:00:2e:74:e7:25:85:17:32:3b:87:
         c4:2c:c4:1a:a9:9c:0c:c6:e6:7a:9a:1a:0a:85:9b:33:af:0f:
         6d:73:53:b8:a5:e2:e9:25:37:ff:18:ff:6e:d7:86:0e:26:e2:
         11:2d:b6:bb:f3:ef:8f:e3:e2:61:84:4a:d2:0f:c1:80:e2:87:
         e8:b9:06:af:43:e7:7b:13:62:88:68:74:48:a5:22:7f:a6:d9:
         b6:d5:b9:dd:3c:0b:7d:bc:2f:f5:58:79:02:d8:36:80:81:0d:
         c2:af:6f:ac:b7:15:f9:1e:64:ea:7c:39:84:2e:73:be:c5:c6:
         35:73:c4:15:0f:6c:9e:81:7b:42:2c:55:3f:1d:be:ed:25:cc:
         50:55:3d:cc:d3:20:8b:7e:7e:fd:a6:39:d4:3f:9d:2f:84:92:
         b9:19:d0:c7:81:f5:58:fb:14:5b:fa:1c:bf:d2:d1:f0:f3:76:
         4e:07:a5:84:4e:29:10:14:60:bb:3f:ba:24:7c:86:9f:bf:33:
         bd:61:8e:84:a8:6c:4e:d3:2b:04:23:76:1a:da:1f:05:8e:99:
         19:9a:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----