Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
File:                     H3c6E31b-1hp9X2sfzWewoGAR6Q.cer (raw, json)
Hash identifier:          /MjtBQrbKvhB2XnRqsF3oLOaXcigi6LHFRlA+7IXYBA=
Subject key identifier:   1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C91F1599B3C5351371444CFE29781FA8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 22 Dec 2023 14:32:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a13:9240::/29

Validation:               Failed, certificate revoked on Wed 27 Dec 2023 12:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:91:f1:59:9b:3c:53:51:37:14:44:cf:e2:97:81:fa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 22 14:32:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:36:3d:6d:e9:ce:1c:0b:34:54:1b:66:93:06:
                    7e:b6:45:ad:3e:d6:61:73:a7:4c:5b:05:15:6c:a9:
                    61:a6:ce:16:5d:46:de:ca:a1:a7:46:15:70:0f:a8:
                    35:88:39:be:f8:04:04:9c:3c:70:15:42:6a:37:ba:
                    07:e7:a9:16:06:b1:71:1e:b1:07:9f:d0:7c:0d:47:
                    4c:3d:19:69:94:b8:9c:94:b0:c5:40:a8:a0:79:ec:
                    b5:a8:0c:4f:8c:8f:7c:16:79:46:0a:16:45:24:fe:
                    c1:7d:5d:5c:26:00:22:6a:10:33:26:11:2a:5d:66:
                    6a:c6:0c:41:37:0b:71:2c:09:16:ec:3c:33:7a:8a:
                    85:69:10:16:5b:d2:fd:01:fe:77:22:22:73:43:b9:
                    13:d4:b4:e5:db:d1:3a:a2:73:a5:f1:db:06:34:06:
                    97:24:c1:c4:7a:21:a6:57:d3:e2:74:c1:5c:35:8a:
                    e6:92:75:13:fa:24:46:ed:28:09:28:b4:1e:16:49:
                    6f:ae:97:bd:ab:82:0a:8b:f7:6e:77:44:84:86:56:
                    6c:08:3b:55:eb:91:b6:5a:33:6b:21:e5:05:a9:aa:
                    fd:a1:a5:37:53:e2:05:e7:fa:61:4c:ed:8b:d7:8f:
                    6a:a9:35:d2:c1:36:67:86:08:8d:99:31:2f:73:bc:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9240::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:65:57:56:2f:ee:fc:a7:27:6c:de:3c:db:51:99:b8:62:e0:
         a1:e5:48:e5:1d:bf:79:09:ca:cc:d9:4f:40:38:ae:0a:4f:fb:
         5c:13:06:b0:b8:96:e6:ba:91:79:09:10:98:0a:2d:29:8c:c5:
         4c:8c:c5:a7:60:5c:1b:52:03:d7:55:c5:e7:a6:09:b1:f9:c5:
         5e:49:cb:45:14:1c:8b:27:b8:97:e5:4e:d3:f8:31:3a:37:91:
         fd:d7:93:26:72:65:2f:73:89:7a:ea:3e:f5:ff:f2:7a:6c:12:
         5d:56:36:9c:7f:16:cc:83:71:72:f4:b9:15:54:c1:6d:c6:37:
         e2:1c:f8:e6:e8:2d:be:cd:c1:fb:e2:d3:ba:74:8d:e3:32:13:
         7c:cd:cb:ac:43:d7:a8:08:e3:67:1e:8a:94:2d:71:6f:0f:84:
         88:2e:c2:9f:0c:16:fe:5b:ee:7b:9a:a0:1e:f2:7c:39:3c:12:
         2d:79:f4:b2:98:c5:b6:de:26:a9:54:39:31:a6:2f:c0:a4:2e:
         96:d0:ea:24:87:da:eb:3c:1e:05:e4:3d:a4:d3:c2:24:52:bb:
         2b:f4:1a:1a:10:b5:ee:ef:35:28:1b:4c:40:7b:b2:db:6f:63:
         d4:f2:7d:0a:83:0d:1f:f1:38:c6:72:35:1f:ed:72:cb:7b:e0:
         b6:7d:ae:5b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYyR8VmbPFNRNxREz+KXgfqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMjIyMTQzMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc3M2ExMzdkNWJmYjU4NjlmNTdkYWM3ZjM1OWVjMjgxODA0N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DY9benOHAs0VBtmkwZ+tkWtPtZh
c6dMWwUVbKlhps4WXUbeyqGnRhVwD6g1iDm++AQEnDxwFUJqN7oH56kWBrFxHrEH
n9B8DUdMPRlplLiclLDFQKigeey1qAxPjI98FnlGChZFJP7BfV1cJgAiahAzJhEq
XWZqxgxBNwtxLAkW7DwzeoqFaRAWW9L9Af53IiJzQ7kT1LTl29E6onOl8dsGNAaX
JMHEeiGmV9PidMFcNYrmknUT+iRG7SgJKLQeFklvrpe9q4IKi/dud0SEhlZsCDtV
65G2WjNrIeUFqar9oaU3U+IF5/phTO2L149qqTXSwTZnhgiNmTEvc7yBdQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFB93OhN9W/tYafV9rH81nsKBgEekMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2ExMTQ3
Ny03ZDEwLTQ3ZTktOGI1Yy03YjcyNDRlNjlhOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYTExNDc3
LTdkMTAtNDdlOS04YjVjLTdiNzI0NGU2OWE5My8xL0gzYzZFMzFiLTFocDlYMnNm
eldld29HQVI2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhOSQDANBgkqhkiG9w0BAQsFAAOCAQEAlmVX
Vi/u/KcnbN4821GZuGLgoeVI5R2/eQnKzNlPQDiuCk/7XBMGsLiW5rqReQkQmAot
KYzFTIzFp2BcG1ID11XF56YJsfnFXknLRRQciye4l+VO0/gxOjeR/deTJnJlL3OJ
euo+9f/yemwSXVY2nH8WzINxcvS5FVTBbcY34hz45ugtvs3B++LTunSN4zITfM3L
rEPXqAjjZx6KlC1xbw+EiC7CnwwW/lvue5qgHvJ8OTwSLXn0spjFtt4mqVQ5MaYv
wKQultDqJIfa6zweBeQ9pNPCJFK7K/QaGhC17u81KBtMQHuy229j1PJ9CoMNH/E4
xnI1H+1yy3vgtn2uWw==
-----END CERTIFICATE-----