Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kfTaY6Bl9oYMqGaEhrtY2jKge50.cer
File:                     kfTaY6Bl9oYMqGaEhrtY2jKge50.cer (raw, json)
Hash identifier:          UVxV4GJM3hSx52PQd4JzLw7n/vQmWCzn+v0BSIRhv/Y=
Subject key identifier:   91:F4:DA:63:A0:65:F6:86:0C:A8:66:84:86:BB:58:DA:32:A0:7B:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018607029F56A4F254FCAC8660D6F007334E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Jan 2023 08:47:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199994

Validation:               Failed, certificate revoked on Mon 19 Jun 2023 11:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:07:02:9f:56:a4:f2:54:fc:ac:86:60:d6:f0:07:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 31 08:47:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91f4da63a065f6860ca8668486bb58da32a07b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:33:23:ce:36:ba:ed:0b:09:40:d7:49:29:
                    4a:02:35:20:d2:da:19:f8:80:38:f1:ef:76:f3:f7:
                    3a:08:f5:3d:d8:c0:e8:6e:11:83:6a:a9:91:9b:34:
                    1f:ef:08:7a:a2:05:fd:cc:da:70:71:f5:38:dc:44:
                    51:09:40:21:a6:d7:58:f4:69:76:12:04:a3:5c:72:
                    a2:37:31:1a:52:50:f7:1a:24:4b:8d:bc:0a:d3:8c:
                    da:97:28:f1:91:48:dc:4b:df:a9:a5:c2:32:e1:00:
                    84:a7:53:e9:c9:ac:d2:9a:2d:74:9c:b2:b1:ea:88:
                    6b:77:ce:f0:bd:11:4b:7b:0c:9c:4f:ab:64:6c:93:
                    23:5b:65:d8:bb:a3:82:85:e4:8d:d2:d2:f6:44:c6:
                    33:66:64:9c:8a:ee:d0:d9:60:6b:51:23:df:3a:93:
                    8e:ea:36:3c:4e:3b:c0:fc:3a:73:0f:e6:bf:83:ac:
                    09:b1:df:3a:70:79:29:53:92:06:d4:c1:e4:c5:9b:
                    23:d8:24:cd:d3:df:79:60:e6:bc:c6:12:91:69:f3:
                    8f:f8:16:76:65:e8:fd:34:69:c1:36:03:6f:29:dc:
                    b8:6c:30:48:9f:70:ae:85:36:c3:ef:be:08:d7:48:
                    42:b5:85:e3:fa:e3:c5:92:1e:62:67:2b:25:c0:2f:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:DA:63:A0:65:F6:86:0C:A8:66:84:86:BB:58:DA:32:A0:7B:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199994

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:e3:dc:0c:38:8a:b1:2a:d6:c7:d3:a6:cd:db:d1:56:ed:
         a1:c8:c5:5c:35:dc:a2:6d:e2:41:32:b6:ca:a5:3e:88:ee:c1:
         e0:ed:b5:4d:64:bc:ab:44:d5:4b:dc:17:91:fb:c1:8e:95:9d:
         e8:2d:3a:d2:ef:85:85:39:c9:6f:2c:84:5f:f8:c8:51:a2:6d:
         2d:c5:5e:0c:20:e3:fe:9b:52:b0:f3:43:63:d2:a0:74:c2:60:
         7e:85:14:bd:57:85:3a:42:15:75:1d:c1:8a:39:8c:14:9d:15:
         84:b0:8a:d8:09:f5:56:cf:b1:c6:9b:88:93:f0:e5:f2:c9:ab:
         c3:ee:b3:f2:13:c1:9b:72:30:9b:6f:49:79:b4:f7:3d:4d:ee:
         58:0f:4b:cb:d5:e5:62:c1:e0:85:9f:e2:40:f7:cb:d2:d9:30:
         25:33:1f:47:82:22:71:eb:f4:15:00:ee:dd:eb:8d:8d:41:43:
         b5:97:be:d9:93:2b:91:71:70:9a:c6:9b:93:a9:ee:e1:ab:59:
         6d:00:03:07:b1:c3:cc:33:34:39:57:b0:a5:d7:82:e4:8b:1b:
         bf:6e:63:82:da:bd:8a:54:ff:51:df:bf:9e:1b:d5:c6:54:6f:
         15:d6:7a:25:53:1d:e7:04:8e:43:30:c0:0e:6d:67:15:3d:91:
         37:4c:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----