Certificate

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/341D743D3FAE2A128809D163FBC4532FD1037CE6.cer
File:                     341D743D3FAE2A128809D163FBC4532FD1037CE6.cer (raw, json)
Hash identifier:          q2Ft/ynNOxcn75QOs8XXYoHx1xAfXxqIYK5NjEMQCKg=
Subject key identifier:   34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       43A6B9941F391289A416211DE745C0ED67D1FB90
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 13 Jan 2024 06:23:13 +0000
Certificate not after:    Sat 11 Jan 2025 06:28:13 +0000
Subordinate resources:    IP: 2a13:df87:2a00::/39

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 20:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a6:b9:94:1f:39:12:89:a4:16:21:1d:e7:45:c0:ed:67:d1:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 13 06:23:13 2024 GMT
            Not After : Jan 11 06:28:13 2025 GMT
        Subject: CN=341D743D3FAE2A128809D163FBC4532FD1037CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:59:67:e3:db:e2:c2:84:23:ea:99:31:cd:
                    80:8d:26:e8:ea:4b:12:48:88:63:81:44:27:cf:4d:
                    3f:62:27:a5:f2:0e:a4:d7:ae:ee:51:32:88:f9:76:
                    f5:c4:50:0e:4f:2a:76:89:33:6a:c2:92:d7:70:c0:
                    5e:c9:7c:72:c2:13:97:f6:f0:65:4f:bb:37:60:3e:
                    9b:88:da:83:63:43:0d:72:7c:ca:59:ca:54:c5:a8:
                    81:8b:83:62:03:68:7a:1c:b9:d6:ae:4d:02:03:d0:
                    df:77:b3:a9:af:63:77:c1:40:e0:59:6e:67:be:38:
                    6c:de:7f:9d:3a:9a:fb:f8:77:40:67:4a:30:9b:3d:
                    a0:f7:1c:32:ed:ee:cf:66:40:32:90:d2:9e:96:e9:
                    b6:ca:c3:ff:08:66:e4:9d:0e:c8:a7:14:32:ef:32:
                    7e:28:50:58:71:ff:de:ab:ab:84:1f:8a:c0:b9:f9:
                    c7:92:4b:0b:94:bb:ab:20:4e:60:2a:e1:28:d9:cf:
                    81:25:86:15:ae:c9:d4:5e:90:1f:9d:e6:54:69:1c:
                    97:7c:f7:9a:14:b1:6a:34:05:41:03:5b:d5:75:3b:
                    65:27:4a:f9:02:00:c0:e9:7f:8e:a5:61:71:65:0f:
                    c8:33:87:6e:36:f6:1e:22:ed:aa:b2:a2:3e:97:ee:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:d6:c5:19:05:8a:9f:6d:a1:e1:9f:8d:3d:f7:cd:27:51:
         7b:4e:fc:db:b4:b6:dc:15:ed:56:4f:89:b4:a7:10:ad:ba:da:
         c0:93:79:e2:be:15:87:3c:53:28:54:86:22:3f:47:36:c3:af:
         e7:9c:c6:47:15:bb:3e:96:27:5e:7a:16:7a:85:0f:85:62:8d:
         0d:6c:82:17:37:9c:8a:80:45:33:cd:4c:bc:fa:05:95:84:96:
         63:a9:94:b9:a0:e0:df:16:42:e2:df:ea:6c:e7:0f:94:2e:43:
         7d:c4:b0:06:fc:52:f6:38:7f:98:5c:67:7a:da:0e:ad:f0:d0:
         82:65:57:d4:64:9d:dd:e2:da:d8:89:c3:51:e6:f8:67:06:7a:
         07:96:55:f7:92:06:f1:48:55:3f:e5:99:37:ab:cd:e1:86:32:
         3b:42:05:4c:2f:61:24:cd:04:e6:20:75:14:07:0c:82:51:15:
         c3:d8:3c:1b:83:65:13:35:a9:60:12:e2:b1:2a:f5:19:6c:ea:
         74:c5:6b:54:10:08:12:05:16:33:45:d8:50:37:1c:73:d9:14:
         59:94:c8:cb:1a:66:da:36:40:ab:62:56:b3:25:a9:0b:24:e6:
         5e:b2:ca:68:db:88:2f:c3:1e:0b:be:d3:47:9d:06:d1:ab:fc:
         90:2b:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----