Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88XmOnb8i-eWOp76miR-PyX_Qoc.cer
File:                     88XmOnb8i-eWOp76miR-PyX_Qoc.cer (raw, json)
Hash identifier:          RfnZ4u7hQSVJ18gmr2O8ii4k3oj8xurv3vlsw1n5tbs=
Subject key identifier:   F3:C5:E6:3A:76:FC:8B:E7:96:3A:9E:FA:9A:24:7E:3F:25:FF:42:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89A077204A48E2E34FFCCFB0EBA861
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:27b4::/48

Validation:               Failed, certificate revoked on Fri 28 Apr 2023 13:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:a0:77:20:4a:48:e2:e3:4f:fc:cf:b0:eb:a8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3c5e63a76fc8be7963a9efa9a247e3f25ff4287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:d0:1e:10:38:57:f0:b5:f0:9c:72:f1:32:
                    03:8f:cf:26:5b:82:1c:43:77:d8:15:cc:f6:d7:20:
                    65:86:88:44:39:44:9c:ae:b2:43:17:56:65:60:0c:
                    55:87:ff:e6:7a:47:cf:f4:f0:cb:5b:be:78:99:bc:
                    62:9c:e1:f9:d6:cb:f2:c3:b7:2d:7f:7b:82:89:a5:
                    62:c3:d0:95:ce:17:96:a4:4f:03:be:84:dc:dd:0b:
                    8c:76:75:74:e6:45:57:c4:cc:31:cc:26:9b:73:9b:
                    d2:34:29:b1:f0:56:fa:70:e9:cb:aa:51:ac:df:f9:
                    f2:58:77:37:7c:d6:99:df:ca:9f:79:a2:80:ba:b2:
                    2c:42:1a:67:d2:bd:df:ec:e3:f5:6a:e7:c3:ea:f8:
                    9a:b3:94:6d:1d:bd:24:f5:20:ca:79:83:58:8c:7d:
                    53:1d:c1:5b:2f:b5:4f:6f:96:df:e9:19:97:67:13:
                    09:4a:03:bd:22:af:63:01:c0:3e:cb:51:72:ed:fe:
                    39:bc:e9:f2:c7:e3:75:0f:7a:8f:18:51:9c:0e:75:
                    5a:21:25:8e:e4:08:63:d6:7b:0e:dd:7e:09:c8:6a:
                    43:92:c1:7f:01:62:35:bb:41:11:2e:3a:c7:12:b7:
                    79:4d:26:c9:29:91:cd:44:5a:07:9a:96:95:51:e7:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C5:E6:3A:76:FC:8B:E7:96:3A:9E:FA:9A:24:7E:3F:25:FF:42:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:27b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:91:f4:af:c3:b7:82:02:f8:aa:73:00:e4:15:7c:3f:dd:
         84:4a:59:d1:3a:9a:ca:a9:33:b9:c2:9a:00:2c:4b:af:26:cb:
         64:6c:be:72:a2:33:c1:07:df:c1:99:22:40:19:8e:89:61:45:
         15:50:dc:b0:9d:c9:ef:37:2a:80:80:5c:0d:01:de:4c:0b:0a:
         cd:70:42:2d:52:cd:f5:ad:11:3c:23:22:a5:06:ea:b4:39:cb:
         12:8e:d8:bd:59:7d:47:5b:94:1f:c5:5d:87:d6:0b:a5:b2:cc:
         5e:92:1e:4c:a2:75:62:61:b5:1b:3e:dc:57:55:9e:01:fc:31:
         ad:dc:c1:4d:31:de:ef:7e:8a:d3:d2:e2:fb:1b:36:df:ce:dd:
         f6:1c:2c:3b:8e:f2:41:ff:ef:a1:41:a2:ab:98:4f:4f:49:8e:
         a4:f5:41:8e:8a:d8:14:2a:d4:be:5e:2d:e8:46:c5:61:87:9f:
         df:e6:45:95:a4:8e:46:0d:45:41:d5:58:cd:6f:67:a9:ff:47:
         bc:f9:a6:9e:9b:e5:22:e9:25:c0:3e:e6:db:53:55:5b:0a:88:
         55:90:0c:89:5c:ec:e9:98:e3:8c:3b:11:34:81:5c:53:66:08:
         5d:a3:86:6c:a2:96:8f:62:89:73:10:a5:e1:03:d0:d3:c4:e5:
         13:d6:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----