Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJt4eFLCUqFnEzoiOdNLeP2vDL8.cer
File:                     FJt4eFLCUqFnEzoiOdNLeP2vDL8.cer (raw, json)
Hash identifier:          s+VBgq8BUN9LXduQOpE8O+bEz9PwWDJmejxbuTHYewc=
Subject key identifier:   14:9B:78:78:52:C2:52:A1:67:13:3A:22:39:D3:4B:78:FD:AF:0C:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3707AB5300F9F770793007B99D9BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/3e19cd-aa32-467b-866f-7077d2ea0838/1/FJt4eFLCUqFnEzoiOdNLeP2vDL8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/3e19cd-aa32-467b-866f-7077d2ea0838/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:33:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48643

Validation:               Failed, certificate revoked on Mon 02 Oct 2023 12:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:70:7a:b5:30:0f:9f:77:07:93:00:7b:99:d9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:33:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=149b787852c252a167133a2239d34b78fdaf0cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:2b:01:0f:c8:15:9e:c2:d3:e1:1b:2f:36:
                    91:df:d2:f4:95:a4:25:af:93:e6:99:b9:b1:a8:dc:
                    61:ae:6a:81:52:65:95:cb:0e:c5:cd:df:7a:55:91:
                    fa:ee:4b:2b:21:dd:3f:13:78:62:3a:3b:16:44:9f:
                    16:53:0b:1b:92:e3:54:67:a3:0b:76:52:26:a6:7e:
                    fe:29:9a:5f:3c:c4:d9:76:2d:88:e3:54:77:01:98:
                    00:2c:fb:1f:3a:0a:62:26:60:9a:2f:78:85:e9:cd:
                    c3:f0:66:ce:d4:2b:f6:1c:48:ae:06:cb:68:9e:14:
                    f1:a5:50:d5:35:96:81:c6:ff:ba:83:80:4f:6a:a3:
                    31:8b:f6:5d:97:7a:a4:ec:d8:5a:df:1f:e0:25:52:
                    13:3b:9f:e5:28:90:4d:49:fc:07:fd:cb:a2:de:b6:
                    3d:29:2d:a5:7b:87:d7:96:f1:8a:10:64:94:1e:fd:
                    c6:34:ce:e0:36:31:84:f3:d1:c7:9b:18:c7:33:c6:
                    e6:5b:33:02:51:7f:cc:23:f3:fd:10:1e:95:e4:b7:
                    c2:80:60:d7:3a:8c:39:ee:7d:f0:5a:fb:8c:e6:b1:
                    74:76:66:fa:a7:e0:56:05:16:76:ae:91:53:88:65:
                    76:3a:0f:5d:15:69:8d:e4:25:b1:8c:ee:9b:63:70:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:78:78:52:C2:52:A1:67:13:3A:22:39:D3:4B:78:FD:AF:0C:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3e19cd-aa32-467b-866f-7077d2ea0838/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3e19cd-aa32-467b-866f-7077d2ea0838/1/FJt4eFLCUqFnEzoiOdNLeP2vDL8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48643

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:bc:36:93:4b:3e:7f:16:12:1c:97:3e:b8:72:68:76:e7:
         3d:43:47:c8:79:56:4d:8c:d9:39:e5:86:24:35:6a:e4:cc:07:
         e4:a8:2d:31:d0:83:74:dd:87:cc:15:a4:a6:47:6f:35:d2:9b:
         91:70:c2:3a:2e:1c:ba:fa:0d:66:e5:e8:fc:95:14:95:52:fd:
         2d:bc:cc:33:7f:72:c0:71:80:8d:68:d8:9b:e2:27:57:08:3f:
         1a:b0:d5:b1:d0:a1:4d:6a:a8:df:b9:74:73:03:d1:d3:52:8d:
         d9:c0:dc:7c:a4:93:d4:1a:d1:bb:bf:15:97:8c:8f:0f:fd:a2:
         2c:5c:7e:9b:8d:13:79:7d:6c:38:5c:77:bb:75:08:c9:a2:5c:
         01:62:ab:70:79:d7:13:e9:6e:e5:eb:34:01:e0:a4:22:95:fe:
         7c:35:88:5d:9c:9c:4f:9a:76:1a:c0:34:10:ab:0b:a9:1d:57:
         7a:4b:0d:72:70:c6:1b:45:f2:65:d1:3d:41:67:ab:03:9d:8f:
         71:6c:ba:72:a9:9e:04:44:a5:63:d5:f6:df:35:fc:a4:ae:62:
         09:7e:9a:98:8a:e5:e8:42:bc:50:a7:19:dc:fa:22:1d:63:f3:
         2e:9a:f4:17:39:8a:d7:d1:4e:49:04:7d:9d:0c:79:d3:5d:9a:
         4d:db:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----