Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
File:                     6zF-G-e7b4LLnDSgltwIj1-Pkso.cer (raw, json)
Hash identifier:          niT+KpBivjihMQWbPFO6Z8tkt9wOM9OKD+Cx01qIR+k=
Subject key identifier:   EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B76B0E67921953F3A5D18C9675474
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.165.124.0/22

Validation:               Failed, certificate revoked on Tue 10 Oct 2023 14:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:76:b0:e6:79:21:95:3f:3a:5d:18:c9:67:54:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:32:86:db:81:bf:45:79:8c:26:e1:ba:6b:
                    90:3d:0d:98:52:4f:32:fa:7f:bb:c1:4f:57:71:ed:
                    77:d8:03:a9:cc:4f:6f:34:9a:41:01:6b:20:f2:09:
                    5c:72:5f:42:88:8d:25:8b:a4:7b:40:26:d2:09:89:
                    b5:27:77:d8:95:86:31:9e:f5:94:7b:f2:9e:1a:f8:
                    94:60:09:c5:8f:65:03:24:5d:c8:f1:ed:a4:5c:0b:
                    2c:7c:f5:72:e6:36:70:bc:ea:93:a8:ff:4c:84:a1:
                    c8:64:09:2e:b9:d4:b5:d4:0a:47:12:6d:4d:e5:a6:
                    09:7e:82:51:96:0f:fc:d5:ce:26:63:ee:a7:39:5a:
                    0a:0c:52:ec:21:fb:5a:ca:4b:e5:9b:06:20:3b:fe:
                    67:b2:a6:cc:37:83:b9:fe:8b:47:62:0d:23:10:23:
                    69:10:97:6b:89:f1:eb:44:96:29:67:0d:f4:2f:d1:
                    a2:61:59:4a:f5:ca:48:2a:8d:02:4f:16:b5:14:97:
                    fb:c8:7a:10:a1:6e:6b:e5:a6:75:af:62:5e:6d:47:
                    6c:38:c3:09:3d:38:9a:3c:ec:9a:bb:cb:6d:78:7a:
                    f7:91:ff:25:a6:fd:23:8e:38:3b:b0:ef:e4:72:62:
                    fb:d5:d5:94:23:36:36:7e:71:5e:30:aa:0e:fc:22:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:f4:42:f5:4a:06:cd:38:83:fe:6e:f8:bf:46:2d:e4:c7:7e:
         62:4d:8a:13:45:42:68:eb:6b:38:7b:83:d6:44:57:aa:71:70:
         9b:29:2f:06:49:27:51:32:ce:35:a0:64:3a:23:77:a3:3e:f5:
         71:a3:33:bc:ca:e2:e2:dd:00:29:61:ab:0c:66:0a:ff:c6:bf:
         5a:07:b1:e8:97:3c:dc:cd:4c:b0:26:eb:dd:15:91:56:5d:d7:
         8b:88:f0:3c:b8:f5:73:9c:72:3a:6d:b6:d3:41:85:47:18:a4:
         a4:cf:a0:27:ad:07:be:8b:04:af:4d:36:e9:b3:f0:ef:fc:b8:
         37:cf:19:eb:6d:27:d3:fd:10:fe:25:b4:e6:bb:f2:35:fd:c5:
         80:8c:bb:55:85:06:ab:f2:f4:6f:6b:bb:50:d3:1d:d9:f2:c4:
         13:39:eb:4c:c1:9d:11:36:e3:7a:02:b5:42:60:a8:13:83:b6:
         e1:b9:6f:d3:19:b1:b5:a7:fa:a7:cf:28:d0:a5:fe:e0:d3:75:
         49:e1:8e:ea:bc:37:a5:02:39:f9:ce:b6:a6:d0:c2:20:15:e3:
         d5:9a:f2:92:99:bb:4b:ef:f1:ec:e6:0a:b0:4c:c2:0a:92:4b:
         1e:ab:16:0e:dc:f2:4a:83:d6:b4:34:65:24:ce:69:34:b3:0c:
         77:58:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----