Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v5fTK48OLfYRBmYoBQKFJ5r8qC4.cer
File:                     v5fTK48OLfYRBmYoBQKFJ5r8qC4.cer (raw, json)
Hash identifier:          ZGsdM2stoa6vnH2nqjjktD6p1U767GrJS4w9lrmuRVw=
Subject key identifier:   BF:97:D3:2B:8F:0E:2D:F6:11:06:66:28:05:02:85:27:9A:FC:A8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5015044BEF7F0589D67AE64C034BD31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/4af151-a5cd-4be7-acdd-20fd96c4f67b/1/v5fTK48OLfYRBmYoBQKFJ5r8qC4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/4af151-a5cd-4be7-acdd-20fd96c4f67b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:30:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 49195
Validation:               Failed, certificate revoked on Wed 21 Feb 2024 13:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:50:44:be:f7:f0:58:9d:67:ae:64:c0:34:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bf97d32b8f0e2df611066628050285279afca82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:82:c2:28:14:b2:d3:94:35:a7:3c:2f:a0:
                    50:16:de:7c:fc:1b:a0:1f:16:20:09:fc:79:c8:f2:
                    67:ea:22:2f:fd:4a:3b:43:ff:fa:15:a4:ca:45:42:
                    29:e0:0f:67:81:e3:60:b1:98:fe:5d:da:5d:ee:7b:
                    a5:6a:7d:a1:60:ba:f6:f1:be:21:80:5e:05:5a:b1:
                    e2:39:2c:e4:e0:c1:54:4e:aa:93:5d:ca:f3:8e:d7:
                    7e:8d:fb:48:1a:2a:16:ef:ac:82:88:82:5f:ee:19:
                    fb:2f:2a:39:af:15:b0:cd:0e:4b:08:06:85:9a:ba:
                    a2:f3:3a:02:cb:36:fa:fd:08:73:c9:b0:4e:1c:c5:
                    6c:01:3e:52:b5:ec:b8:25:05:cc:e2:1e:df:21:58:
                    e2:2a:02:39:0b:f9:28:82:f3:56:22:0c:7a:60:9a:
                    09:97:1f:8e:ab:e5:5c:6b:30:8d:2d:c4:1c:0e:a7:
                    64:80:8b:29:7e:b0:06:41:74:cd:e1:da:ae:d7:61:
                    9d:d1:17:6b:06:0f:b0:b6:d6:d2:27:6a:6a:7a:45:
                    d3:71:36:88:8a:f6:e2:4f:c7:b7:ad:41:08:c6:ef:
                    19:53:bc:6b:88:9d:ef:19:7c:6b:1a:38:30:82:6c:
                    43:6b:8e:dc:eb:10:c9:ce:f4:a5:b6:dd:ec:41:8b:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:D3:2B:8F:0E:2D:F6:11:06:66:28:05:02:85:27:9A:FC:A8:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4af151-a5cd-4be7-acdd-20fd96c4f67b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4af151-a5cd-4be7-acdd-20fd96c4f67b/1/v5fTK48OLfYRBmYoBQKFJ5r8qC4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49195

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:28:f9:91:04:3a:44:61:f0:aa:f8:d8:b7:bb:97:21:2e:
         4a:b1:7c:46:59:bd:56:d5:bc:08:60:ca:7f:70:11:a3:f6:0d:
         22:d0:50:b0:a5:00:fc:b3:02:7c:49:35:09:29:c5:64:b0:48:
         9e:e5:0a:cc:24:5f:98:05:c5:ae:96:19:ea:57:98:76:01:bd:
         2c:3f:84:e9:d4:c6:af:b6:56:79:7a:40:71:a3:62:e7:64:6d:
         52:b4:2a:21:7b:9f:8b:bc:c0:4f:13:31:da:6c:d0:ff:a9:8b:
         6f:0e:76:fb:74:ac:50:0c:92:1f:3d:61:f6:ef:6b:00:48:12:
         92:98:e0:ef:0f:98:ab:7d:24:dc:18:b5:ed:26:dd:88:58:1f:
         60:99:f5:02:7a:e6:ad:d8:04:81:4e:0a:d6:fa:9b:5a:88:9a:
         4b:f0:9c:b6:c1:cb:f9:1c:41:6a:cf:79:f0:55:c1:23:86:b6:
         04:fb:e5:03:7f:06:0e:81:ab:17:0a:49:37:ec:48:ca:a3:2d:
         f3:95:d1:07:46:4f:f6:38:85:e5:97:bd:ae:a5:c7:c6:3c:8c:
         f3:0e:d8:f1:e4:65:13:d1:8d:01:b9:bf:5e:a2:f4:74:53:22:
         2a:06:b7:9d:d0:71:0f:d9:c3:fd:4d:94:8e:94:96:00:c2:3d:
         99:9d:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:31 2025 by rpki-client