Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4hb4Nbqrmep5fOiapA-hJmvAE_s.cer
File:                     4hb4Nbqrmep5fOiapA-hJmvAE_s.cer (raw, json)
Hash identifier:          K30prZAU/gUnxbwOdvxnYIBvjGi+xwcP0e0GU3mpBfY=
Subject key identifier:   E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED40F33EBD48BC4D3DDAFC6690C48CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.170.0/24
                          IP: 2a11:c540::/29

Validation:               Failed, certificate revoked on Tue 31 Oct 2023 08:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:0f:33:eb:d4:8b:c4:d3:dd:af:c6:69:0c:48:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e216f835baab99ea797ce89aa40fa1266bc013fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:79:ad:74:d6:81:ef:ae:24:ed:77:ae:01:
                    b3:fc:6c:36:ca:f5:7e:d7:8a:3e:00:46:e7:df:6a:
                    fd:97:e1:73:85:13:eb:28:de:39:7f:87:20:0f:d8:
                    1d:c4:50:c8:3a:26:aa:65:95:28:27:24:77:74:87:
                    42:57:09:33:b4:05:87:77:c2:f8:42:f6:a2:b6:dc:
                    af:69:69:e2:7e:c6:5e:c8:4b:df:86:7f:96:cc:74:
                    7d:1c:84:68:ee:0e:91:aa:ff:d6:8f:e6:2c:a5:40:
                    9d:9f:51:97:06:49:52:5f:92:bd:ec:15:bf:42:7d:
                    35:d1:66:bd:85:5c:fe:73:56:ed:94:15:40:b1:f3:
                    2c:28:f8:73:a1:2c:29:12:c4:30:68:69:d0:0b:a0:
                    a4:b8:15:78:02:3c:ad:cb:fb:c0:84:00:6a:69:10:
                    43:15:d0:ca:b0:04:47:17:d3:a5:82:0c:31:8b:5d:
                    ec:89:00:5d:9b:6c:3f:b8:5b:a8:9e:1e:67:c7:9f:
                    d8:87:8a:54:12:ec:31:1a:19:80:93:f0:3d:b0:66:
                    e7:51:40:81:f8:d0:7f:0f:b5:29:a7:19:3e:cf:ca:
                    81:62:04:ba:c9:01:38:ac:3e:f5:b2:ca:34:d7:82:
                    62:55:b9:5e:c2:51:28:75:0a:23:60:bd:01:8c:47:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.170.0/24
                IPv6:
                  2a11:c540::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:61:44:74:f4:78:8a:ab:a8:f9:ff:52:af:04:58:07:9a:24:
         7c:ed:d7:f2:9d:ec:fb:2a:6f:ae:05:f3:d4:11:e6:4d:04:c8:
         d1:fe:0c:45:42:61:a8:b7:25:67:ba:f1:44:f4:4d:cc:e9:37:
         58:11:df:57:8b:52:64:10:72:37:68:bc:92:82:2d:8a:1d:89:
         fc:05:f4:30:40:d1:c0:4a:29:c7:6d:aa:41:3a:4e:55:aa:48:
         62:ab:61:81:1a:03:78:93:46:b9:2f:0c:af:9f:68:ca:47:8a:
         27:84:e2:ed:93:d6:76:43:ff:de:3c:80:24:32:83:3f:ad:a6:
         52:80:16:8f:33:37:de:5f:b9:e0:6c:fc:0e:7f:73:80:28:1a:
         80:73:60:bb:56:f9:ac:82:a1:f0:d4:ac:5c:4d:37:c6:21:b4:
         14:6e:2f:c3:4e:0c:bd:6e:96:25:de:4f:d9:14:6a:06:eb:37:
         6e:d4:78:7d:d3:80:41:ab:cf:d7:29:05:22:76:4c:f5:63:16:
         fe:00:e1:c3:8f:6b:0e:d2:c7:ba:31:0d:8e:67:08:9f:27:a8:
         77:05:46:f9:41:50:1d:e0:2c:bd:66:97:d6:08:2d:d9:8e:0f:
         b5:40:1d:a8:ec:e3:09:cb:d7:b2:68:2a:36:7d:98:9e:b5:70:
         05:f2:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----