Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.cer
File:                     DNA0JFFKe9qMG8zZ9TO4ohlMn-E.cer (raw, json)
Hash identifier:          M/6w+wtQZEaGPlo6P+ji/Uglh9wnvZ7WQgpaYbxeIxg=
Subject key identifier:   0C:D0:34:24:51:4A:7B:DA:8C:1B:CC:D9:F5:33:B8:A2:19:4C:9F:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A425A6C4E2D477B4165587BB54C3BDF2F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 29 Aug 2023 17:32:16 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216398

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 14:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:42:5a:6c:4e:2d:47:7b:41:65:58:7b:b5:4c:3b:df:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 29 17:32:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cd03424514a7bda8c1bccd9f533b8a2194c9fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:30:f9:2f:c8:54:c3:44:aa:16:38:58:81:8b:
                    84:cc:85:c0:8d:91:6a:57:2c:52:25:a0:40:4f:f5:
                    fc:49:5f:28:a9:63:8a:d7:49:20:0e:ca:20:84:db:
                    a8:fa:d5:fa:0c:fe:0c:32:fe:1e:82:72:2f:0a:44:
                    01:d1:13:99:b1:80:34:a2:37:ae:cf:77:cf:66:4a:
                    73:96:d7:71:78:e8:cd:41:5a:cd:b7:d5:ef:66:6e:
                    55:86:43:ae:06:c3:1b:59:57:3b:4d:74:62:e5:3a:
                    f5:68:73:5f:9c:37:fa:c7:83:de:d8:3f:bb:72:be:
                    42:e3:c7:b1:c8:29:b0:c2:83:69:be:b9:d5:66:a1:
                    af:e5:8c:66:5c:e7:ca:06:82:4f:9e:07:2b:bd:00:
                    ff:2e:74:85:08:d4:cb:64:22:e9:4f:2a:66:d5:0a:
                    b7:c0:c4:83:d5:a0:50:34:4b:66:2a:d8:70:ac:ed:
                    83:6e:35:c1:c8:01:84:47:fa:f7:28:98:32:36:f6:
                    21:77:72:a4:20:02:c9:df:b1:8c:99:2e:3d:2c:8c:
                    00:75:e4:4c:44:47:83:8e:2f:7d:89:88:6a:b1:3e:
                    27:b8:0d:e1:16:7b:2c:97:d2:42:73:8f:a1:e4:bf:
                    48:20:0f:28:e1:05:94:d3:df:d6:fa:60:9f:22:5c:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:34:24:51:4A:7B:DA:8C:1B:CC:D9:F5:33:B8:A2:19:4C:9F:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216398

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:df:04:2e:14:8b:e0:98:3a:24:fb:29:4d:01:16:a4:d3:
         71:67:f6:bf:e6:94:c0:7d:1d:c2:72:0b:c8:ce:40:d2:f6:2a:
         f2:de:46:7d:21:ff:cd:4f:ac:47:2b:6b:c2:99:60:3d:58:fe:
         39:84:c3:dd:94:4e:0e:e0:9f:35:2f:41:63:a1:53:09:0e:22:
         f0:9a:ef:2d:c2:39:d9:54:5c:d1:f9:42:7b:76:03:25:58:b1:
         d6:0a:19:da:b3:f6:1d:9d:bf:3c:6c:cc:7b:c1:b2:95:d6:a8:
         e5:86:b7:0a:a3:f2:ef:76:00:0d:41:48:6b:ed:8f:ca:ef:b7:
         a6:64:61:26:3a:09:e8:df:3f:0e:25:17:dd:8d:82:48:7e:9b:
         55:f0:7d:66:1e:3e:25:37:08:50:65:55:6d:cb:cc:b4:9a:dd:
         43:02:a4:60:c6:98:09:ac:39:05:22:05:cf:a8:fd:52:cc:f1:
         f2:79:ba:60:d4:f1:45:b8:c3:37:96:9d:d6:98:87:1c:5c:f4:
         1a:6f:d3:46:73:40:14:5c:5a:03:a2:bd:d2:9a:92:be:04:56:
         f3:3e:5c:08:9c:cb:57:8c:2d:6e:94:7e:43:62:c8:e8:f2:ad:
         e6:76:7f:17:49:14:ee:c0:eb:c1:3b:41:e5:47:0d:07:8e:59:
         3e:3f:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----