Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rPgul8CU2zBZmVzDyUuXYgSC3s0.cer
File:                     rPgul8CU2zBZmVzDyUuXYgSC3s0.cer (raw, json)
Hash identifier:          9WWY8/rC/NwTM8F+3JRIlayEzrdIDGKGneFTlmwazhU=
Subject key identifier:   AC:F8:2E:97:C0:94:DB:30:59:99:5C:C3:C9:4B:97:62:04:82:DE:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187601F6C4714E5783E11F6CCE5EAC90174
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/HYSP/15/ACF82E97C094DB3059995CC3C94B97620482DECD.mft
caRepository:             rsync://rpki.co/repo/HYSP/15
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 09:08:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, certificate revoked on Sat 08 Apr 2023 11:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:60:1f:6c:47:14:e5:78:3e:11:f6:cc:e5:ea:c9:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 09:08:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acf82e97c094db3059995cc3c94b97620482decd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:6c:6c:bc:53:3e:81:6f:54:cb:8d:f4:ef:
                    9d:0e:6a:0a:75:9b:ed:38:69:79:a2:98:fe:db:91:
                    45:8c:f2:84:6c:cf:c1:12:06:06:c0:a3:7b:e1:ff:
                    ec:0e:b5:8c:2a:17:88:a4:b4:a6:f9:0c:69:ed:97:
                    f8:7b:cb:37:76:6d:e5:28:9f:95:cb:82:a4:d7:75:
                    04:4d:81:9e:89:26:17:f3:e3:87:47:4e:c5:ae:8f:
                    fa:2c:3a:5e:a8:14:72:fd:df:ce:f8:dd:1b:66:ed:
                    48:f0:f3:54:61:3a:75:05:40:5c:39:1f:01:6d:ca:
                    6d:3b:8c:0d:d4:eb:de:46:86:b9:04:68:6d:31:31:
                    04:1a:a4:7a:c3:90:77:54:27:64:c7:f0:70:43:a8:
                    4a:7b:4d:47:d5:0a:43:7b:1a:3f:05:d0:7a:dd:f0:
                    cb:2e:02:a1:61:19:f1:ba:f7:be:e5:72:1c:b5:a0:
                    c4:f7:5a:95:32:b2:77:7d:08:db:9e:90:db:93:52:
                    c2:3f:b4:57:a8:38:69:8d:be:1c:dc:a6:79:70:8e:
                    b7:32:ce:0a:e1:90:06:69:66:19:bc:d5:5b:84:e2:
                    ae:73:d1:71:e5:da:6b:87:7b:ab:1e:83:c1:3c:6a:
                    1e:5b:45:2b:16:7b:22:c5:ca:f1:ed:37:03:b3:b5:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:2E:97:C0:94:DB:30:59:99:5C:C3:C9:4B:97:62:04:82:DE:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/15
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/15/ACF82E97C094DB3059995CC3C94B97620482DECD.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:41:8e:69:3c:84:2b:a5:5c:1b:a3:18:57:00:e7:a4:d6:
         87:6f:5d:27:16:5a:37:0f:7b:bb:f6:7b:56:27:36:a4:43:73:
         d0:3d:70:e4:de:9d:5a:58:50:26:de:4a:6b:02:87:16:f4:f2:
         35:c7:71:4a:11:00:01:e8:f1:3b:e0:e0:a8:d7:9a:86:72:cb:
         13:69:c3:0c:ec:4c:28:69:8b:0b:db:6c:c5:ef:9f:7b:ad:b3:
         39:ec:4f:10:a3:74:ff:b7:b8:ae:01:d1:14:8f:93:31:6b:e9:
         e4:25:3e:e0:cc:b4:bb:21:8d:bf:b9:08:2c:4d:0c:ac:f8:4d:
         8d:ec:f9:2f:06:a5:90:de:2d:e2:ff:8e:fa:3c:4b:64:54:60:
         6a:0b:08:65:1b:09:bf:26:f0:3f:22:7c:07:ee:6a:35:48:ba:
         29:e8:da:8c:80:90:e3:2f:d8:a5:07:e3:9e:33:ac:21:1a:81:
         9f:ee:ec:77:e2:fc:35:8b:ce:14:36:89:1f:f2:aa:3f:ce:cd:
         f7:36:43:09:42:c2:f2:ed:31:ac:c1:96:ec:71:b2:7d:9d:c7:
         ab:70:fd:2f:1e:1a:48:07:6e:ff:8e:c9:9a:d2:b5:47:23:de:
         2a:b8:a2:6b:f3:c4:77:68:a7:f1:02:6a:a0:a6:59:36:4a:3f:
         96:fd:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:03 2024 by rpki-client on console-fra.rpki-client.org