Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zSuhfHdNCbWHtxDdEyVgz0lin-g.cer
File:                     zSuhfHdNCbWHtxDdEyVgz0lin-g.cer (raw, json)
Hash identifier:          YBXXxT+cgPyxNgv+3pM3rSs423r4ApULlRQA4aZdCmQ=
Subject key identifier:   CD:2B:A1:7C:77:4D:09:B5:87:B7:10:DD:13:25:60:CF:49:62:9F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC500790F642A95FE78E89596068705B4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/zSuhfHdNCbWHtxDdEyVgz0lin-g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 12:29:51 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 48063

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:79:0f:64:2a:95:fe:78:e8:95:96:06:87:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cd2ba17c774d09b587b710dd132560cf49629fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:85:5e:7c:e9:4b:0b:db:6e:15:31:86:3d:
                    11:aa:a5:52:1a:48:ff:2e:b2:be:27:91:dd:c6:12:
                    78:3c:90:e6:73:05:25:c7:13:3d:d9:4b:e4:20:78:
                    3d:4d:fd:c3:ff:b9:b3:f3:23:e7:d1:9c:9a:9b:bc:
                    c7:d7:c1:27:11:95:c8:9b:5e:2b:f9:5b:1e:ed:16:
                    af:13:81:9b:c9:c1:42:68:c1:0b:b8:53:c1:16:b1:
                    7a:92:e0:25:2a:e7:a8:3f:a1:3a:4e:7e:f9:de:26:
                    14:44:de:12:1e:40:5f:f8:cc:08:d1:98:76:5b:2b:
                    8f:8a:81:74:af:87:d6:95:06:f0:08:1f:a3:6b:c4:
                    b3:81:02:65:42:b5:bb:2e:12:f8:d1:d5:88:31:d5:
                    72:e1:96:d7:5e:42:09:77:d7:63:08:ea:f1:d8:15:
                    f7:34:d6:e9:f8:f7:8a:03:c0:0f:d8:04:aa:08:07:
                    b6:de:b6:2e:df:bb:c9:15:00:e5:a6:59:7e:98:d0:
                    cb:66:5c:7e:92:4d:fe:3e:dc:92:88:f6:f2:1b:cc:
                    68:6e:9d:71:ee:3b:77:e8:be:c8:f7:f9:1b:b8:ea:
                    55:1f:db:2f:42:cc:cc:ae:ca:9b:1b:8a:c2:0b:b1:
                    82:39:14:53:45:b8:b6:1d:e3:d8:33:71:f3:62:77:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:A1:7C:77:4D:09:B5:87:B7:10:DD:13:25:60:CF:49:62:9F:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/zSuhfHdNCbWHtxDdEyVgz0lin-g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48063

    Signature Algorithm: sha256WithRSAEncryption
         88:56:cd:33:a4:c8:3f:bb:b4:59:db:77:b9:d8:8e:78:c6:d7:
         46:86:95:9c:a6:2f:99:ff:ac:a6:7c:c0:e2:ce:b1:ce:2f:8c:
         7d:64:61:12:b4:a9:a1:7a:61:e0:69:88:21:8a:f1:39:42:84:
         8c:92:35:42:c7:ec:5f:48:11:f6:a0:52:8c:3b:b8:2a:64:c7:
         13:7d:dc:83:eb:48:b9:be:43:ce:7a:82:32:22:d7:bc:b7:68:
         ff:26:14:69:59:0a:a8:ff:c5:01:58:74:7b:e6:ab:99:c7:d4:
         28:39:06:e0:90:e1:40:c7:85:db:09:ad:27:a3:69:36:4e:be:
         06:0a:c3:56:23:31:76:0d:f8:3c:49:23:3e:2b:c7:11:ce:5d:
         79:84:8e:23:79:98:b5:08:fb:87:45:79:af:c4:da:b6:f5:03:
         0b:27:06:b1:5c:f6:97:1f:59:e4:c7:e3:51:c2:93:b8:02:5b:
         83:bd:f4:08:ec:36:d7:d4:89:bb:e9:bb:52:01:72:f5:be:d8:
         8b:68:b2:e6:50:9a:41:8f:70:d0:2f:a1:d9:d1:5f:68:f5:c5:
         a2:94:43:97:56:73:a2:1f:c7:47:90:ec:18:ef:c7:7c:d3:7f:
         4b:b0:de:ed:73:30:47:32:65:25:b9:ad:6a:74:c9:2c:38:82:
         b7:02:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----