Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
File:                     l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer (raw, json)
Hash identifier:          eK1PWWHWyTuTOCdGCX/QHJBgJ+OK2ELl7/75I7xfKx0=
Subject key identifier:   97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C8C6AC2BA9FE9E47470D64854A632A4A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 21 Dec 2023 12:47:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a10:acc0::/29

Validation:               Failed, certificate revoked on Thu 21 Dec 2023 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8c:6a:c2:ba:9f:e9:e4:74:70:d6:48:54:a6:32:a4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 21 12:47:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97743d346356469b4b6939463c96df2b8a39065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:06:20:9f:10:63:58:5b:66:3b:17:28:95:
                    0f:df:6b:19:6b:6b:cd:cb:24:bb:e7:75:61:b8:a8:
                    ff:55:c5:5e:e0:7e:94:58:f4:ac:ad:5a:c6:65:23:
                    73:f6:07:39:2c:98:95:1f:57:74:57:17:d8:62:ca:
                    8d:fd:b9:b1:7f:49:63:76:00:b8:45:4b:58:55:b1:
                    d3:73:fa:6b:b0:f5:7a:b9:bb:52:23:b5:e2:4f:31:
                    b3:53:b1:fe:c1:22:53:a4:8d:65:fd:c2:d2:03:e1:
                    de:82:ae:26:38:dc:7b:9d:0a:88:1e:6c:7a:e2:85:
                    5d:2f:da:ef:3f:4b:61:b0:f6:00:70:ed:ff:fc:88:
                    c1:4b:23:22:45:d0:e5:b5:28:28:5d:05:ec:44:bf:
                    58:2b:7f:e5:02:2c:cd:11:b2:28:5a:7c:4d:9a:78:
                    5b:4a:11:c4:21:19:53:ec:24:77:93:35:aa:98:ac:
                    b0:b9:e3:1e:dc:e3:a3:4e:5b:c1:4c:bf:18:1b:2c:
                    46:7f:a0:97:73:da:fa:3c:57:56:d8:da:e3:1b:f0:
                    8b:0f:28:da:0a:20:7b:39:1b:64:b5:9d:4e:89:fc:
                    c7:91:0f:42:18:80:3d:e8:2a:52:84:f0:b7:bd:a3:
                    3c:83:fb:f6:d1:ca:7c:4f:33:ef:1e:35:c0:84:7d:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:acc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:18:6c:7a:2a:0b:49:35:5b:d0:97:86:bd:7e:f3:46:57:e6:
         3c:3e:4b:66:d2:8f:19:19:bd:b1:0c:03:48:a1:c5:ab:1f:05:
         e8:05:fe:ed:95:e8:6e:07:68:f7:e0:ef:3e:a5:e0:f7:fd:c2:
         63:0b:e8:1c:62:72:5a:57:29:f5:f7:75:78:6e:cb:0f:c6:f7:
         cb:9f:1c:e8:f1:4a:67:f1:d8:75:c1:d0:65:90:0f:5a:9e:63:
         57:3b:7b:23:8c:bb:27:3c:12:88:12:72:95:5f:54:17:bd:48:
         d2:86:a6:a9:e6:20:db:83:fb:70:02:f4:a7:38:7b:3e:37:0f:
         03:43:3a:1e:66:88:23:91:75:8d:96:09:95:d9:f2:b3:fb:b1:
         aa:52:5f:6a:1d:93:6b:1c:fb:50:6c:1b:75:c2:45:9e:35:98:
         7d:0b:33:f4:13:b5:43:2c:05:b4:0d:68:44:fd:59:95:1c:10:
         c7:6d:b2:e1:4e:27:cb:d2:34:fe:97:e5:c2:af:18:a6:c4:b1:
         72:d6:e8:d2:f8:a5:d9:b1:0b:2f:fa:5b:0b:e4:f8:c8:e8:11:
         52:0a:b6:3c:45:83:7b:e4:f1:d4:24:6e:9a:3d:31:11:3f:55:
         c8:ff:57:40:e5:ac:61:e5:6b:f9:75:43:7a:58:aa:d6:9e:e0:
         f3:05:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----