Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uml1dABOCzmBlqVij_2dwbFap30.cer
File:                     uml1dABOCzmBlqVij_2dwbFap30.cer (raw, json)
Hash identifier:          BRkgw4qatm8QlbeJ4jkZbbgX30K2qq+vEQmYZrUx+1s=
Subject key identifier:   BA:69:75:74:00:4E:0B:39:81:96:A5:62:8F:FD:9D:C1:B1:5A:A7:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC424BD0E7BDF44BF588DEEC42517C6C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 08:29:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60271
Validation:               Failed, certificate revoked on Wed 10 Apr 2024 10:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:bd:0e:7b:df:44:bf:58:8d:ee:c4:25:17:c6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba697574004e0b398196a5628ffd9dc1b15aa77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:83:1b:00:ad:04:99:01:b3:60:6b:27:ae:
                    b6:6f:c3:12:d4:e1:d8:df:90:38:d0:25:e7:00:96:
                    b3:d9:de:c9:eb:fa:b4:d7:5f:36:43:b2:15:04:dc:
                    85:a1:7e:13:68:dc:5a:4d:64:16:51:7b:89:c5:9d:
                    7a:eb:76:3b:b7:bb:11:8c:f6:6e:75:5e:20:90:c5:
                    68:56:02:e8:25:a8:82:04:9e:a8:1f:ec:10:df:86:
                    14:03:35:1a:a3:17:17:38:62:68:f2:df:93:da:43:
                    b5:45:35:d9:28:3c:ca:dd:1a:df:64:22:b5:57:47:
                    f1:dd:68:76:e6:22:3e:f5:11:b1:52:bb:06:58:1a:
                    94:f9:ab:c7:25:24:cd:ed:bb:c7:bc:b6:8d:17:b9:
                    c7:26:69:57:84:da:78:6c:9d:37:4a:d8:92:48:d8:
                    0b:6c:c9:d0:1a:db:f7:6a:75:52:86:3a:02:31:ed:
                    ff:11:81:9b:6c:dd:51:b5:b9:14:14:71:a3:ff:72:
                    b4:74:ce:99:98:d1:15:51:49:53:72:10:1b:b3:0b:
                    7e:b1:20:65:f3:3c:d8:67:7d:ab:c5:cb:a3:a5:4c:
                    78:b0:14:c8:de:e3:c2:1b:df:7c:e5:cd:b4:94:aa:
                    7b:4f:4c:78:e9:f6:62:48:65:00:c4:4e:9d:30:5e:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:69:75:74:00:4E:0B:39:81:96:A5:62:8F:FD:9D:C1:B1:5A:A7:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60271

    Signature Algorithm: sha256WithRSAEncryption
         72:37:dc:d2:6f:25:88:e2:9b:3c:9e:30:66:87:d4:75:b3:65:
         f6:c5:b9:6d:c4:d3:1d:8a:6a:b9:49:93:96:e3:ed:14:16:57:
         d0:63:38:0e:da:e5:eb:01:91:6c:ef:d9:e3:1f:f8:f6:86:29:
         85:f1:c5:22:96:eb:57:cc:5e:c8:6e:23:c8:a1:73:08:3e:42:
         07:2f:a1:82:59:22:2d:e4:fe:2f:f8:02:4a:13:59:ec:69:31:
         7b:0b:4a:cb:b3:3f:3d:86:38:e3:61:2e:39:49:94:8b:97:08:
         8c:3a:59:31:15:87:d9:03:7b:a8:70:2e:a4:19:e3:cb:a6:d0:
         20:19:4a:c3:aa:44:17:5c:d4:d0:29:df:30:7f:ce:a6:24:83:
         f1:f5:29:f0:5a:9d:98:01:4a:1c:ca:77:a1:32:a9:49:05:15:
         2e:47:6e:96:7f:4e:71:16:c1:bb:82:f8:9b:4f:04:7b:9f:55:
         6f:66:26:bf:88:a9:16:e4:80:35:30:ef:c3:c7:f1:6d:b5:3c:
         31:6b:80:d6:6a:2d:38:1c:27:b8:0d:bc:ac:8b:cb:45:a5:f2:
         3c:fb:66:0b:33:6f:73:25:01:30:5c:cc:dd:65:94:11:e7:ee:
         21:d2:db:3c:22:e9:96:32:a2:4d:51:43:81:26:3c:e5:73:8e:
         3b:1f:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:12 2025 by rpki-client