Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MTySvjSc_VOvpeyqCQ-cfpXN0cc.cer
File:                     MTySvjSc_VOvpeyqCQ-cfpXN0cc.cer (raw, json)
Hash identifier:          Mkf1WRrFV2WHrtjVNm4fSJDys7fbcEFuWX9Z5KFxIQQ=
Subject key identifier:   31:3C:92:BE:34:9C:FD:53:AF:A5:EC:AA:09:0F:9C:7E:95:CD:D1:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444B0E2A9B43A8595CD9EBF1D6253DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200897

Validation:               Failed, certificate revoked on Mon 20 Jan 2025 13:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:b0:e2:a9:b4:3a:85:95:cd:9e:bf:1d:62:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=313c92be349cfd53afa5ecaa090f9c7e95cdd1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:90:21:c6:cc:be:35:bc:a6:13:3a:04:d1:
                    98:b5:1b:55:0f:e2:74:55:3f:27:94:7a:ba:2b:ad:
                    56:53:d0:5d:10:96:22:30:d6:60:01:40:c4:0c:b0:
                    0b:76:30:45:b6:58:7f:2e:28:60:28:1f:9c:b7:dc:
                    3b:f6:ab:a9:43:d7:f4:0d:c7:30:09:c0:dd:48:12:
                    7e:c6:40:0a:97:72:a3:15:7e:e2:f4:a4:22:f8:d4:
                    87:06:a2:f5:96:e7:cb:8a:80:18:70:c9:95:f0:fd:
                    c1:f3:c7:60:e4:5b:84:42:0c:63:ab:6d:29:e6:b1:
                    69:6d:50:3b:b8:2f:8f:71:2a:1e:85:14:7e:b6:15:
                    a2:c9:dd:5a:d4:39:fb:b6:d3:5c:b2:70:65:71:25:
                    00:bb:bd:af:7d:00:b8:b1:d8:90:f4:4c:42:86:59:
                    d3:fb:1d:b2:af:48:7c:f0:fd:19:3c:c4:ca:de:7b:
                    4a:86:10:3a:9b:fc:32:9c:ea:a3:01:02:f7:e1:e3:
                    58:0e:e1:18:48:43:33:68:0e:8d:54:cb:25:21:1b:
                    bf:36:13:71:a3:76:4a:f3:d6:9b:c2:79:60:d7:7e:
                    25:bd:53:93:1d:24:ed:50:89:86:cb:d9:4d:89:33:
                    67:a3:43:2a:da:6b:d2:46:55:6b:f2:dc:75:07:d6:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:92:BE:34:9C:FD:53:AF:A5:EC:AA:09:0F:9C:7E:95:CD:D1:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200897

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:a9:53:75:ee:61:14:41:65:e5:26:c5:75:7c:ef:6e:0a:
         42:cb:e8:c8:ef:81:03:1f:13:56:e5:27:1b:da:17:75:5e:45:
         d7:a0:01:5c:91:4a:4c:98:dc:66:2a:f4:49:af:0b:ee:48:89:
         8b:6b:05:08:bb:9c:33:2c:27:3f:6a:51:d0:cd:4e:ce:2c:e3:
         8a:72:98:b0:63:81:6c:63:c7:f3:10:96:2b:89:c1:a9:1f:8d:
         ce:6e:e7:d0:5f:d9:5f:29:e8:5e:20:fe:b6:31:b4:bd:3e:6c:
         b4:96:29:8b:23:fb:ad:73:ee:6b:f7:ed:86:22:1d:58:b9:4f:
         9c:c3:dd:04:95:8d:68:dc:a4:e3:f8:17:fe:8b:15:41:94:88:
         b3:58:7f:e3:d7:c6:b8:d6:78:f7:bb:69:d2:ef:1e:7f:5f:02:
         e1:d3:58:5b:f5:f0:e8:9a:15:a9:89:13:dc:54:c7:bd:d3:e3:
         c9:3a:4a:e0:80:27:a8:91:80:d2:9f:4b:b1:50:de:9c:74:4f:
         2d:5d:4d:9f:79:e1:bc:bb:ae:5b:a7:27:8d:07:45:58:a6:e9:
         12:13:b8:ab:e1:94:f1:36:51:f2:1a:10:b7:d3:e0:ef:46:0c:
         09:c5:86:b6:38:a7:3e:11:3d:17:0a:2f:10:32:ca:cb:0e:ce:
         b8:32:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----