Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
File:                     1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer (raw, json)
Hash identifier:          TT1dxd9P5CEhoxQItfswHhEQasP/cTqtzVh+ExHwjFs=
Subject key identifier:   F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC86F9018CCAEC06AAB3EE63C584D7571
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 04:30:03 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 194.26.218.0/24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:90:18:cc:ae:c0:6a:ab:3e:e6:3c:58:4d:75:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:dc:23:37:45:a2:03:e0:8e:93:87:0e:4c:
                    d2:c1:14:a2:70:49:d2:5a:03:45:f7:d6:80:e9:e4:
                    a1:ee:ee:f3:3f:db:ef:34:d1:7c:0e:57:11:10:fb:
                    60:cd:f4:4e:0f:36:00:8c:05:7a:8c:4f:1a:22:0e:
                    50:89:c2:d7:28:29:82:11:64:d4:6c:3d:92:18:54:
                    a2:93:d8:67:d0:6c:ca:ec:6e:22:a4:c4:b2:1e:bc:
                    77:1d:af:74:9f:4c:46:9d:fa:0f:99:a2:68:3c:51:
                    2a:1d:05:fc:27:b4:16:f9:6b:8c:86:9b:82:c9:18:
                    8c:e1:12:11:d0:88:b8:25:5a:60:c6:65:61:ca:ab:
                    ff:b9:26:3d:16:01:20:02:a1:54:13:28:6d:d9:c6:
                    9f:71:e7:21:fa:57:80:fd:3e:75:16:ff:99:c3:e7:
                    6d:1f:a6:04:2c:d0:b3:d0:8b:25:aa:07:9e:a9:78:
                    b9:cb:3c:f6:5d:b4:03:37:e0:78:16:b3:f1:d4:6b:
                    24:e9:1c:58:d5:ed:95:0c:91:35:3c:d6:f2:ab:c3:
                    07:06:2f:74:b3:f5:82:f3:ec:24:18:4f:7c:a1:04:
                    c6:cf:b7:f7:6b:88:6b:e9:7e:e6:e4:fb:25:38:89:
                    eb:96:c1:97:d9:c0:f7:3b:0a:4f:eb:5b:8e:df:ae:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:93:36:0d:3a:66:56:ea:1b:2e:d6:7d:95:b0:58:11:2b:
         0f:fb:20:f2:23:a7:19:0c:89:8f:c6:d3:55:56:60:45:04:70:
         b1:05:4b:98:d8:3a:5f:43:b0:40:66:85:42:1f:d7:57:f3:02:
         a7:8e:61:3e:d0:63:68:24:3d:0d:50:9a:d3:25:e6:ff:62:2f:
         b8:df:86:43:4b:2f:76:33:3c:01:c6:7d:42:07:da:be:ce:62:
         d7:20:c2:f6:f4:a1:b6:cc:e2:ad:34:8f:8d:7f:10:da:eb:65:
         72:c1:f6:e4:90:78:2e:c9:bf:b6:93:f5:fb:69:3a:7d:83:c1:
         bf:87:c7:80:12:ed:d8:b9:8f:83:12:04:d8:0c:1e:4c:80:1e:
         34:b2:82:6e:b6:a6:c5:cd:9b:92:c2:d4:9b:2d:a9:08:c9:07:
         aa:3c:32:59:93:cb:9f:9b:69:82:83:13:d4:73:42:80:1c:9a:
         3d:a4:7c:b0:9c:24:8c:23:4a:1c:f9:3e:20:c2:9d:a9:15:06:
         c7:00:41:c8:64:49:c8:9b:81:37:ba:b8:d7:d8:8f:13:8e:02:
         ac:63:5f:f9:9e:9b:9e:9f:27:ca:60:29:a0:13:3a:60:7f:0c:
         19:07:8c:0c:b1:a1:ac:db:30:15:fd:62:f3:c8:ca:6c:4f:2a:
         54:f9:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----