Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer
File:                     vMAb-OmLp7Kw4RqOD7xLOaEbhnM.cer (raw, json)
Hash identifier:          dm1/D6vyju3NVizSKJtHixBv9K6ylnRMBfBJHihXOQw=
Subject key identifier:   BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC5DC36ADA4DE0E1A47643E1A2135F37C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 16:29:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.218.64.0/22

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 05:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:36:ad:a4:de:0e:1a:47:64:3e:1a:21:35:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bcc01bf8e98ba7b2b0e11a8e0fbc4b39a11b8673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:67:a3:4b:45:04:5a:c9:00:6a:92:f5:b7:
                    49:6c:f2:0d:a8:06:9b:1c:10:89:30:46:c6:ef:9c:
                    4b:d5:2a:af:9b:56:d1:34:0c:2e:c6:ab:81:16:b6:
                    fc:f4:5b:72:04:f9:f1:1b:80:84:db:7d:0d:2c:41:
                    4a:91:7e:75:60:9c:6a:55:69:4b:7e:a5:11:03:0c:
                    2a:3b:b0:1d:1d:ac:81:5b:83:e0:64:87:4b:3e:e7:
                    55:ea:fc:83:be:f6:a2:84:8e:15:bc:b7:3d:cc:74:
                    de:4a:38:aa:50:59:d0:3b:e6:0e:d6:44:b0:db:a5:
                    29:85:5b:ae:a0:8f:30:2d:97:23:22:d9:2b:87:ea:
                    bd:d0:31:7f:71:13:7f:9f:f8:0e:98:60:5f:af:95:
                    a8:df:6b:42:8a:77:7a:75:8e:03:c0:7e:fa:60:97:
                    60:cd:ec:d1:c2:f3:de:8e:ba:a7:8a:f5:bf:19:f3:
                    ec:2b:43:6a:98:ef:cf:44:28:40:2d:4d:b5:9f:a5:
                    b8:a3:48:b4:06:82:97:92:fe:27:ce:93:6a:ce:16:
                    29:01:23:1d:0a:5f:4d:62:dd:ce:17:0e:f0:03:5b:
                    f5:74:0c:1b:1d:d6:ae:58:d8:15:47:18:85:8a:e0:
                    5b:8b:f9:9d:6f:02:ff:6d:66:47:a4:bf:f0:23:21:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:1B:F8:E9:8B:A7:B2:B0:E1:1A:8E:0F:BC:4B:39:A1:1B:86:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a28ef5-14c4-4341-8f19-9106bfbfe74d/1/vMAb-OmLp7Kw4RqOD7xLOaEbhnM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:69:e5:8c:3d:a8:9d:3e:fa:6f:16:e6:a6:4c:a1:af:28:
         62:a3:f7:36:f1:73:e9:3b:62:c4:18:e5:c8:ea:37:9f:99:c9:
         88:9f:d5:51:cb:cc:03:b7:dc:f6:72:71:e3:42:a7:a3:a9:b1:
         e5:ae:3d:70:a0:4f:9b:41:c8:36:fd:a0:e9:d2:de:cc:01:80:
         72:d8:65:89:ce:3f:e3:60:76:8c:83:81:74:81:f7:bf:71:28:
         de:a5:87:18:36:4f:03:f3:45:b7:ed:3d:8d:e3:60:83:ec:a2:
         f2:59:cf:34:79:2e:8e:5a:49:ce:46:0c:ab:5c:a8:14:02:ab:
         99:6e:a4:97:04:32:99:2b:e8:ed:ed:95:80:d4:1e:0e:cf:73:
         b0:bb:43:2b:df:df:87:6c:30:10:cb:63:03:da:66:28:93:34:
         b4:16:9c:ed:64:2c:82:13:8a:7f:8e:3e:b1:54:f0:0b:99:77:
         27:f4:6e:ed:12:08:96:27:da:2c:65:54:d4:70:87:10:35:4f:
         bf:dc:7a:b5:0d:5f:9f:0b:91:d0:14:0f:72:66:d0:9b:65:37:
         93:89:84:c4:a6:75:d9:c7:35:df:65:68:41:8b:4d:ed:ab:07:
         86:34:39:82:49:8a:2f:6a:09:54:40:1c:36:ef:fe:80:ac:68:
         5d:1c:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----