Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTRL8ZJD6PqAlwTeq3k9oFFTBB4.cer
File:                     mTRL8ZJD6PqAlwTeq3k9oFFTBB4.cer (raw, json)
Hash identifier:          euujkawVs6EiZTja7GYKmjbou9DDc+4IdUx9Za1zzOs=
Subject key identifier:   99:34:4B:F1:92:43:E8:FA:80:97:04:DE:AB:79:3D:A0:51:53:04:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187222C8BA9635E0528E51B66B84ED093A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/185/99344BF19243E8FA809704DEAB793DA05153041E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/185
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 08:25:57 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.62.0/24

Validation:               Failed, certificate revoked on Thu 31 Aug 2023 12:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:2c:8b:a9:63:5e:05:28:e5:1b:66:b8:4e:d0:93:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 08:25:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99344bf19243e8fa809704deab793da05153041e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:0f:56:b4:de:41:dd:67:f6:fa:39:3c:51:
                    71:0e:f0:c1:7e:6a:c3:1d:54:60:d0:23:3a:1d:4f:
                    b1:a0:ba:2f:41:48:83:1c:5e:ba:eb:48:9f:bb:cd:
                    9c:a5:3e:11:81:64:b2:68:80:0a:2c:2d:39:f6:16:
                    0b:0a:d6:eb:6b:63:76:b7:9e:d6:62:8f:83:3c:cc:
                    16:14:90:10:d5:08:c9:74:45:bc:bb:6f:55:75:45:
                    a8:cc:bc:e8:6a:74:9a:80:1a:de:49:08:6a:93:cc:
                    7b:a9:f7:ef:d7:63:4c:66:f3:16:91:a3:37:d4:69:
                    7c:be:3c:7f:92:39:bd:24:85:62:32:b4:28:b5:70:
                    24:81:29:7b:e4:2f:62:e1:55:88:4f:e8:bf:b9:60:
                    c5:c5:4f:21:7d:a5:3b:b7:c7:5f:49:b6:4f:0b:76:
                    04:4c:07:1b:88:af:fc:30:83:d2:05:57:9a:4b:51:
                    6d:a9:c6:14:b4:d6:bf:4b:92:12:a9:43:6c:85:2b:
                    8f:30:d0:e4:45:a9:34:bf:76:70:77:0f:10:0b:3e:
                    ce:a9:93:4b:59:18:8e:e4:09:ad:77:3a:1f:5f:61:
                    ff:ac:28:9a:15:07:57:e5:b0:f3:16:68:a5:21:90:
                    9a:2b:0a:a5:f9:f6:f0:32:0d:d4:99:67:5f:5a:a1:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:4B:F1:92:43:E8:FA:80:97:04:DE:AB:79:3D:A0:51:53:04:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/185
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/185/99344BF19243E8FA809704DEAB793DA05153041E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:63:f9:11:1c:42:54:d7:d1:2a:1e:67:92:a1:2c:b7:f5:5d:
         54:b8:66:cc:cc:b8:21:d6:d0:5f:aa:02:0e:a4:1a:1b:27:02:
         4e:4c:46:48:8f:12:8b:d3:54:91:de:0e:6a:40:c8:12:ec:3c:
         fe:77:b7:eb:16:b6:d3:bb:17:0c:73:e1:3e:84:a7:16:b6:d2:
         03:11:73:70:8e:b5:b0:d4:2b:95:f5:67:4e:14:23:80:f2:d0:
         76:66:11:3f:88:e1:0f:03:1c:76:53:80:bd:d4:58:76:13:83:
         a8:f8:d2:d0:50:d2:15:d4:d0:1b:2d:c2:35:4c:56:34:6f:a4:
         cc:d4:7c:4f:9b:71:85:6b:8a:d4:a0:ea:ba:5e:93:cd:39:79:
         bd:b4:89:5f:be:5d:aa:8e:36:03:2f:f2:01:6a:5a:fa:5f:f6:
         10:12:f1:eb:64:88:e4:6e:e4:a4:45:79:3b:bf:c5:95:6c:48:
         de:25:ef:5e:9a:ee:76:0d:45:e0:57:c2:fc:a7:e3:95:ed:d4:
         26:f9:37:90:1d:51:15:e2:dd:de:e9:1e:97:12:ff:ce:d0:c0:
         b5:d4:1a:59:b8:6e:39:70:b6:f5:72:86:34:19:f7:94:b6:db:
         df:d8:42:a4:a7:e6:7e:1b:c0:8a:41:1e:60:2f:e3:26:2b:49:
         fe:ad:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----