Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer
File:                     CT2pFG2tXOPxYM6RxHoYLRsUlD0.cer (raw, json)
Hash identifier:          78GxyyHuRmCHM+lc9QvTTCtdfMKWOwtMfqSroAORuXA=
Subject key identifier:   09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B62F67BBB9540923F09B2953770ADF1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/CT2pFG2tXOPxYM6RxHoYLRsUlD0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.143.0/24
                          IP: 2a12:2380::/29

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:62:f6:7b:bb:95:40:92:3f:09:b2:95:37:70:ad:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=093da9146dad5ce3f160ce91c47a182d1b14943d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:c3:37:c0:c3:2e:88:58:93:6d:27:f7:99:
                    97:07:c1:11:67:52:06:c0:1b:01:75:d9:db:5d:43:
                    6a:c1:a9:29:a3:5f:95:17:5c:17:69:04:d3:99:8d:
                    12:8f:51:c0:77:f4:f4:55:dd:ea:45:0e:04:b4:df:
                    a2:d9:1b:66:08:05:b1:ed:73:21:d5:ca:af:92:b1:
                    08:6f:4d:46:0f:36:f5:ba:7b:82:e0:b7:17:b8:bd:
                    86:52:e7:d7:d6:c1:fe:84:07:38:20:f4:33:db:45:
                    df:85:35:da:86:5c:f3:21:26:d4:a0:68:0d:bb:cf:
                    aa:55:2f:4a:ad:f1:91:cf:c6:8e:ff:f4:8b:9d:7b:
                    12:a6:61:07:6a:57:72:16:aa:e1:30:26:1f:62:da:
                    2f:df:ef:a3:59:ec:d4:7e:c8:aa:c4:74:75:ac:82:
                    f3:1e:5a:4f:0b:00:d7:47:ca:a8:0d:9b:f4:ab:1d:
                    23:f6:fd:00:4c:26:87:03:a1:8c:92:1c:81:21:31:
                    d6:6b:fd:cf:b2:eb:8c:e0:04:06:68:4d:22:00:e2:
                    d0:12:ef:67:6a:2a:d9:40:e2:af:5b:a0:56:11:ab:
                    f0:d4:28:00:fe:f9:ec:87:ab:ca:f6:99:cc:39:91:
                    6f:55:cc:dd:b0:cc:93:34:f4:d5:b2:b2:85:dc:f9:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3D:A9:14:6D:AD:5C:E3:F1:60:CE:91:C4:7A:18:2D:1B:14:94:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d36edc-e05a-4e91-8459-b10bbe281e65/1/CT2pFG2tXOPxYM6RxHoYLRsUlD0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.143.0/24
                IPv6:
                  2a12:2380::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:5a:5c:6f:8e:cd:36:a5:4b:06:a6:69:44:24:ae:f3:27:64:
         2c:86:2a:9b:a5:5d:10:1f:99:03:ca:49:5a:77:82:e3:2e:24:
         13:ed:a8:4f:cb:b5:a3:34:b7:1f:4b:32:e0:b9:fd:9f:56:bb:
         fd:68:f0:31:a9:a6:d6:37:94:09:9e:84:a4:0b:23:64:dc:a2:
         8b:49:f4:5b:ea:a4:23:20:ef:2c:35:67:e9:ee:11:c2:49:6d:
         96:e7:df:71:78:23:f6:05:96:b1:40:ae:ad:a9:da:4d:e2:e4:
         eb:af:71:12:59:5e:a3:d1:22:c9:72:f1:79:72:75:fe:84:36:
         eb:60:d4:a6:d8:db:d7:3e:cb:5d:e8:75:09:94:45:92:3e:29:
         6b:71:e3:40:66:a6:a6:37:80:14:2d:14:f6:c8:70:82:0f:98:
         64:d7:81:7f:f5:22:f4:89:4d:97:38:eb:83:0d:aa:9c:8c:ae:
         7a:12:c2:bc:06:7f:ef:2a:6f:48:6d:e5:1b:ce:cd:33:bd:06:
         e2:4e:44:15:a8:eb:ab:c6:87:32:46:fa:d7:28:10:b7:d5:19:
         cf:74:f1:01:2d:f4:f7:1d:f3:c4:cd:0f:f0:79:ba:31:9e:e5:
         8a:cf:23:cf:5d:c3:f8:42:6b:d5:d8:f6:f2:0c:27:b1:85:d4:
         4e:d9:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----