Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/whXWyD-NXcTCCQ1XjRnxnvJoUHM.cer
File:                     whXWyD-NXcTCCQ1XjRnxnvJoUHM.cer (raw, json)
Hash identifier:          M2Q/9K3y3/UHj4o82v/Gi56cGKfmfogKpvs5FLRNuTo=
Subject key identifier:   C2:15:D6:C8:3F:8D:5D:C4:C2:09:0D:57:8D:19:F1:9E:F2:68:50:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01906910FD79BAAECF804CDA4483904B5464
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/19/C215D6C83F8D5DC4C2090D578D19F19EF2685073.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/19/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 30 Jun 2024 12:13:59 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 207885

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 18:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:10:fd:79:ba:ae:cf:80:4c:da:44:83:90:4b:54:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 30 12:13:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c215d6c83f8d5dc4c2090d578d19f19ef2685073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:85:e8:3f:ad:27:93:f1:3f:63:8e:c8:2d:
                    7a:d6:ea:cf:ce:bf:37:76:d9:6d:b8:fe:ef:26:b8:
                    c1:74:ad:6a:83:6a:8b:fa:50:4b:ee:ad:bd:89:7a:
                    87:3a:2d:9d:72:f0:a0:53:d4:70:1f:44:fa:e8:9a:
                    ce:8c:29:ab:20:b6:14:69:5a:f1:56:ea:86:03:41:
                    80:0c:fa:14:aa:d4:3d:ed:c0:38:3e:a1:38:46:b5:
                    b7:32:1a:b3:b6:38:6c:ea:2c:12:3b:c7:ff:c5:3e:
                    53:e0:49:49:e5:4f:0a:57:c8:e8:78:56:69:48:af:
                    eb:41:7d:6a:c8:07:77:30:23:1d:b9:2f:16:9c:2c:
                    61:80:fc:84:9c:b4:38:ab:79:df:ba:5d:05:07:ac:
                    a0:6b:4a:49:71:f9:d0:5c:0b:16:0b:36:79:fc:09:
                    0a:8a:9b:51:53:db:20:44:91:0f:00:e4:69:16:84:
                    80:24:8e:2c:a6:58:05:ca:1c:b7:b9:78:23:a5:fe:
                    e9:10:c7:02:aa:86:82:49:a3:ab:ba:97:01:04:64:
                    a0:9a:4d:0b:8e:8d:45:6d:f2:02:a4:f6:40:14:02:
                    77:0c:fd:fc:e1:a3:11:45:8d:ec:42:d6:d7:c0:49:
                    a6:80:8c:f7:6f:5a:44:49:65:e6:ce:5a:f6:f7:93:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:D6:C8:3F:8D:5D:C4:C2:09:0D:57:8D:19:F1:9E:F2:68:50:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/19/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/19/C215D6C83F8D5DC4C2090D578D19F19EF2685073.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207885

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:02:02:bd:69:77:1e:34:de:5a:95:ad:28:f9:13:a6:35:
         84:d9:11:2d:2b:7f:26:cf:d4:a8:82:82:50:98:53:e3:a9:d4:
         4e:ca:ad:e5:a3:78:8b:d3:a3:04:fc:52:9d:c7:00:e9:f6:23:
         e6:c6:66:f4:e1:2a:2c:4d:96:72:a3:21:35:8e:91:3e:4e:b4:
         5f:91:05:b9:fa:4a:dd:80:eb:4e:08:2a:f0:b7:f9:32:ca:bb:
         e3:81:59:ae:88:0c:2a:d1:5f:e2:5b:3d:b8:ed:b2:a8:e6:2a:
         b3:89:b0:01:b6:d9:27:4f:b9:c5:b0:23:74:70:d1:e8:56:d0:
         45:d1:73:3b:35:ef:dd:56:24:05:b7:b7:3e:6d:03:aa:1f:1b:
         da:5c:d1:8a:c7:c2:4b:6c:07:98:1b:b7:d8:1d:6e:4e:34:04:
         01:75:5e:a1:8d:b3:5a:b6:cf:17:1c:95:d3:06:ce:4c:76:36:
         e3:82:36:2d:84:c2:bb:e4:9d:cd:ea:b5:82:90:ae:5f:93:1b:
         d9:d8:7f:c4:40:c5:74:92:01:7c:45:60:92:00:9c:d6:21:e9:
         6b:3d:8e:8c:41:bc:00:1c:b4:ca:c2:68:42:64:95:73:da:26:
         9c:2b:b8:28:1d:66:28:27:36:91:7a:d1:d2:23:d3:ff:da:cd:
         e1:fe:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----