Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
File:                     MH5-J2p99YDftwcx1Int5EfgfQY.cer (raw, json)
Hash identifier:          rbemq81f9cs6v/bGhb/PleJp6wsNCL7SowDQXAVrgIE=
Subject key identifier:   30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED3F5CD3B79E839DCC7555E6C13CE62
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:34:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.144.132.0/22

Validation:               Failed, certificate revoked on Thu 23 Mar 2023 13:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d3:f5:cd:3b:79:e8:39:dc:c7:55:5e:6c:13:ce:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:34:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=307e7e276a7df580dfb70731d489ede447e07d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:7e:eb:a1:03:93:d3:82:7f:1b:98:a6:ee:
                    68:0b:fa:46:13:70:bd:25:63:5b:17:2d:d6:e1:73:
                    7a:88:d6:e7:1d:af:bb:45:d5:ad:f9:98:2e:84:bc:
                    8d:26:c8:d7:cd:d1:da:82:6c:bd:c4:6d:ce:9b:71:
                    17:80:d6:ab:d9:a4:01:b3:14:56:cf:e7:33:3a:ed:
                    b4:83:cc:ed:8a:e4:50:b3:10:1a:3b:c5:0c:cc:b3:
                    69:92:d8:10:f9:49:88:4b:7f:83:5b:ea:72:fe:82:
                    b0:a3:16:c8:e1:b7:ba:10:41:49:6c:3b:5f:29:80:
                    c0:bf:a3:07:90:21:ad:b2:dd:2a:7c:a0:11:25:ca:
                    93:01:21:ca:b5:8f:fb:f1:d8:40:ff:b6:c3:bb:cc:
                    ec:05:07:68:7d:b4:5d:34:2b:03:25:e1:51:cc:c9:
                    a1:32:6f:8a:56:91:38:ed:9a:2b:fd:c8:a0:30:9b:
                    62:11:39:0a:78:0d:10:fe:01:95:30:dd:ce:56:f8:
                    69:73:df:d3:d7:9f:0d:bd:b9:05:70:ce:1b:5e:57:
                    1d:06:76:e3:43:27:05:4c:ed:4d:ae:2d:9e:9a:83:
                    28:22:1a:39:15:57:3a:73:c9:97:82:5d:f1:2b:71:
                    16:a2:5c:98:da:ad:05:1f:3b:10:e5:85:f6:5e:61:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:c8:a7:88:74:3f:db:c5:85:ea:df:6a:5b:61:f3:30:94:
         7e:92:f2:dc:69:5e:d7:f0:e2:14:36:49:49:53:7d:3f:c9:0b:
         c3:2d:53:cd:7e:49:38:19:03:72:fe:45:b6:2f:e8:38:89:63:
         66:44:23:72:87:7d:23:0f:91:24:2a:90:94:a7:a0:18:34:f2:
         21:c4:1c:ca:58:1d:a5:06:95:6e:6d:41:ff:24:55:2f:26:26:
         2e:48:11:66:a7:69:51:5f:48:e6:f0:db:17:03:42:6b:43:75:
         c6:31:ff:1d:7b:20:b6:21:08:9e:ff:12:49:aa:c1:58:e4:84:
         a5:eb:da:ae:a8:aa:03:bc:0c:1e:3c:7e:16:18:54:5a:df:2d:
         f7:6e:31:d9:9c:d0:1a:ac:b4:75:5c:53:2c:81:ae:f4:ab:70:
         e6:dc:9c:ae:61:61:13:ae:d9:87:0a:e6:ce:67:c4:7c:e3:34:
         d6:62:e9:f9:bf:4c:de:e7:ef:f3:a4:b6:a1:7f:77:b5:f8:15:
         2b:75:ec:ae:0c:9a:96:0c:80:a9:f4:ab:01:2e:e4:dc:2c:13:
         f5:3c:9c:be:41:36:5d:9c:52:93:71:ed:8c:2e:ed:30:f4:41:
         7a:cb:9c:c8:fa:99:21:c5:2f:e1:a7:cb:55:bb:c8:a6:21:02:
         50:11:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----