Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
File:                     1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer (raw, json)
Hash identifier:          YrfJssCgwV+sDjw7aoSU2dhOUY/1If2/vce7smlUGnE=
Subject key identifier:   FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187D781474FD15F7D153D2DCE6A28499D18
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 May 2023 13:29:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.109.200.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d7:81:47:4f:d1:5f:7d:15:3d:2d:ce:6a:28:49:9d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 13:29:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fae8907c5de93e22e975390db5621669314c4e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:85:b0:47:1f:dc:fb:03:23:ef:39:b2:01:
                    05:84:8d:da:f5:a6:9b:92:49:83:7f:83:4d:62:f1:
                    d3:92:2b:18:cc:d1:05:b2:51:e9:d2:44:06:67:67:
                    f8:71:63:e4:a4:ed:e6:bc:16:dc:1d:e0:fe:15:e4:
                    d1:95:f4:12:4a:a9:e1:69:c5:8f:dc:be:9c:26:b6:
                    19:dc:1a:3a:0c:e9:e0:95:2e:b7:0c:49:a4:9d:ba:
                    59:62:90:d2:9c:5c:46:bd:df:01:60:08:bf:27:36:
                    76:77:0b:67:14:01:af:35:e8:a3:78:6f:cc:a8:6a:
                    72:1e:bb:a0:e1:51:63:a2:60:88:a7:5e:6f:85:70:
                    1f:81:e5:70:30:da:89:3a:8a:e5:6c:a0:53:a9:1f:
                    5e:ec:ad:f4:61:03:f4:e1:62:41:73:65:06:f0:81:
                    66:ac:90:13:60:8b:69:31:4a:fe:8e:39:fe:94:58:
                    d1:f2:0e:82:1f:9e:a1:e4:76:66:32:a0:c2:39:9b:
                    d9:14:77:14:cb:ed:6c:cd:87:09:58:bd:86:77:5a:
                    56:5d:ef:45:8e:f3:34:96:73:7e:b6:c0:dd:4a:8b:
                    ca:6d:af:0c:43:f0:fa:59:f8:71:e4:d9:aa:5e:00:
                    4a:c8:a9:e6:b6:16:e0:6a:e4:e8:0f:37:2a:66:a4:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:0c:04:55:cb:c6:fd:62:a7:53:b8:bc:24:37:1c:6d:f7:
         09:aa:e0:53:e1:62:06:99:50:3f:bd:c7:78:5f:da:bc:bc:4e:
         57:b4:8d:f7:04:b0:00:a2:7b:8d:fb:ea:0e:86:8b:51:aa:70:
         90:44:09:f2:09:fe:b9:79:00:f3:30:f2:cc:26:02:23:16:bd:
         88:50:38:b5:ea:d7:4b:19:82:b7:40:dd:b0:e4:69:a3:e7:3d:
         93:32:26:44:1d:4f:78:54:fc:1f:20:66:94:58:fe:b7:26:71:
         3a:de:d5:20:92:94:d3:7f:4e:e8:c5:c0:8e:f2:54:de:dc:47:
         f1:f7:89:06:d7:77:17:90:66:9e:8f:6a:5e:2e:ad:b4:25:89:
         cd:8b:14:2a:d4:4c:fc:1f:68:4d:c9:13:a8:04:b4:87:df:f8:
         85:e8:ed:ea:30:f3:8a:69:3c:2f:db:40:75:c1:10:b3:b0:3d:
         27:31:13:49:55:79:40:8a:ca:8c:2f:af:17:a2:b3:26:77:26:
         e4:83:67:19:fc:ad:2f:30:21:ed:86:00:21:71:71:c1:51:76:
         db:10:bb:de:34:a3:d0:06:07:87:f8:6e:d4:b8:65:7a:2c:23:
         12:35:72:88:73:4b:cb:46:51:11:ae:1c:c4:3e:9f:0c:d0:d6:
         7d:af:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----