Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
File:                     mvTxImIvw7tvuDt8gmkDbtpiRm8.cer (raw, json)
Hash identifier:          EWV/EM+fDTSow7TzeyIoOX0hQi7chLmyYxCOr65JSzM=
Subject key identifier:   9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019136815FEF3EBAAD5F9E0F7015DDB50F76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 09 Aug 2024 09:38:54 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 208147
Validation:               Failed, certificate revoked on Tue 10 Sep 2024 11:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:36:81:5f:ef:3e:ba:ad:5f:9e:0f:70:15:dd:b5:0f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  9 09:38:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:05:83:27:3e:6f:58:0f:b1:c1:8a:87:17:
                    1f:ea:18:2a:53:db:11:33:2f:37:5a:d5:b4:7e:6d:
                    de:ff:bb:f1:ec:26:38:63:81:5e:e8:46:ba:68:2d:
                    46:0e:0b:77:f5:2e:6a:37:73:68:7a:42:12:5c:9b:
                    67:5f:9b:12:b8:1a:cf:a7:75:77:2d:b6:d2:21:09:
                    cb:09:64:86:14:bc:05:50:95:e2:96:09:bf:5b:ba:
                    72:49:2e:48:9e:bc:89:7f:b2:15:6b:75:9e:20:6f:
                    c8:f6:be:52:20:0e:12:ec:06:e8:54:ef:c3:35:49:
                    04:9b:44:12:ba:76:f7:5d:cc:4f:28:57:ad:85:76:
                    67:72:66:36:77:f2:1c:e2:d2:a1:1a:78:ed:77:87:
                    ec:6f:04:16:78:05:ee:23:ea:12:69:c9:57:ea:eb:
                    b1:3e:31:cc:04:06:50:f6:74:ba:ee:29:6b:cc:8a:
                    86:5a:f5:8a:5b:18:2d:67:80:6c:0a:fe:e6:b3:6a:
                    c5:c8:3d:d0:aa:81:73:11:96:3e:bc:b7:53:0c:41:
                    67:55:70:b0:fe:cc:46:8c:86:86:72:cf:2a:ff:fc:
                    e3:f2:26:ee:85:ab:7c:51:2d:71:b6:95:d4:5c:39:
                    6b:e6:ea:01:34:e7:af:c7:86:9e:f4:fa:e0:4a:db:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208147

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:5d:aa:47:db:52:a2:67:8d:15:86:7d:03:b7:eb:98:7e:
         d5:e3:f1:52:01:6f:8b:08:07:c9:6b:5d:e6:a3:bf:8e:87:e1:
         f6:4f:1e:e8:31:24:a9:a6:fd:f4:a9:4a:5a:88:83:93:8d:40:
         6c:5b:d6:32:ac:1f:71:af:32:59:2c:18:d9:c6:d0:6d:ef:0e:
         be:3c:bc:b8:ec:c0:11:c7:36:a0:af:73:19:2c:95:70:53:01:
         29:cc:e3:f3:24:bb:e6:65:db:f0:8c:e0:19:45:14:fa:ed:b0:
         56:6f:93:57:4c:e8:b3:3d:e7:a7:dc:95:93:0f:9a:1a:04:b2:
         74:ba:76:9f:cd:c1:fd:ec:90:35:c9:ea:53:62:77:42:37:f6:
         19:98:37:42:34:09:8b:ef:32:75:83:65:9b:d2:8a:2b:4e:2c:
         a7:14:cf:e2:61:16:87:cb:31:0d:0e:87:f3:43:4f:85:99:e1:
         3e:bf:0f:4a:31:8b:cf:52:9f:84:f1:33:d8:70:94:b4:79:be:
         de:7e:d1:d8:8e:a2:97:e7:92:5d:b4:ba:75:e3:43:5c:ac:f8:
         3f:3e:8b:bb:82:f4:1d:87:47:df:1a:69:ce:c0:d4:3b:dc:86:
         b6:83:9d:be:0d:98:41:91:d7:bb:f4:d4:bc:14:b9:17:22:88:
         db:8d:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:48:30 2025 by rpki-client