Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MN2o7CI3DP78_ljEyrK64C2dI9U.cer
File:                     MN2o7CI3DP78_ljEyrK64C2dI9U.cer (raw, json)
Hash identifier:          Eg8DW0NLR9/s4OfeP6+mSdKcd6r7FSkLuZXzWPdrwhQ=
Subject key identifier:   30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E659F144062F2FAA7180C5392432AED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/MN2o7CI3DP78_ljEyrK64C2dI9U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.95.0/24

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 09:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:9f:14:40:62:f2:fa:a7:18:0c:53:92:43:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30dda8ec22370cfefcfe58c4cab2bae02d9d23d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:e8:70:58:d4:c8:03:85:1e:63:06:a2:e9:
                    d8:75:d1:71:d5:07:56:37:81:2b:8a:35:66:d9:e8:
                    a0:de:4a:72:e2:15:25:a6:9b:d6:c1:fc:bd:e1:62:
                    4d:04:bd:4f:ae:ee:2a:14:2e:c3:22:69:b0:9f:93:
                    0a:e6:bb:53:39:98:13:1e:a9:8d:9f:42:fe:7d:87:
                    4a:1c:87:80:4e:e2:1c:3d:10:5b:14:1f:2a:b3:f3:
                    1c:08:d1:f3:05:40:bd:17:78:74:36:66:bd:43:64:
                    98:b3:bd:9f:67:40:37:88:93:4e:ec:7a:38:1d:d2:
                    86:79:41:f1:2a:05:0f:c2:46:8e:7a:d8:e3:26:9b:
                    87:01:e8:14:f3:3c:08:9a:90:41:c7:0a:22:b7:be:
                    d8:68:43:46:fb:2d:00:e2:ad:b2:4d:22:d5:75:d9:
                    96:47:4c:e9:54:8b:59:04:0c:74:dd:90:d0:57:4d:
                    84:6c:67:72:39:0b:01:cd:fe:46:30:12:73:e2:df:
                    23:1f:be:71:be:ae:88:bf:db:55:1f:90:c4:7c:25:
                    39:55:05:7a:af:68:15:7e:a6:4a:1f:c0:dd:87:d5:
                    43:71:e2:cc:89:b7:fd:e8:b2:a8:e6:a3:ba:93:1c:
                    99:a5:f6:26:2e:54:9b:01:f1:f7:81:a3:02:0d:11:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:A8:EC:22:37:0C:FE:FC:FE:58:C4:CA:B2:BA:E0:2D:9D:23:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/95f38c-438e-4f5e-a7c4-4134e29f22f4/1/MN2o7CI3DP78_ljEyrK64C2dI9U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:ec:57:05:45:d6:82:e1:b9:4a:f0:e2:d1:51:eb:e7:c3:
         10:a9:a5:c2:c9:d2:58:e1:98:dc:41:5a:f4:fd:c8:38:12:6d:
         c3:b5:6b:df:ff:d9:26:a5:69:77:12:d8:d8:09:be:ad:f7:a2:
         da:5b:1a:0f:fa:36:af:1e:d7:bf:b7:db:f2:d3:ae:85:aa:6b:
         5d:37:9d:5e:c3:b4:1e:7b:2d:00:95:40:1f:46:90:2f:79:09:
         1f:79:17:cf:16:4c:19:d3:3e:9e:ee:98:43:3c:bb:1c:8b:e8:
         e1:41:df:a6:64:e8:1c:b3:4e:dd:c7:19:28:76:4a:d8:01:43:
         0a:8c:c3:84:86:f6:44:67:a9:48:e8:3f:fd:c5:58:fe:5b:63:
         53:4a:4b:85:e4:04:3b:14:ca:b2:b8:3f:0f:79:70:42:09:f2:
         8c:7a:aa:d2:70:ea:9c:55:a8:32:6b:63:fb:a1:ed:11:0e:42:
         a5:18:75:28:a3:5f:ad:4f:58:3f:c0:1a:c8:7e:34:ec:3e:a7:
         ce:5c:65:44:ab:89:28:88:fb:70:5b:20:5d:d6:01:dd:03:c1:
         ea:cf:b1:e7:3d:67:03:5c:a5:e6:c4:0c:cc:ca:53:cb:ff:8b:
         9d:ee:1b:61:fd:c9:8a:af:71:98:52:4e:16:d3:b6:67:eb:8f:
         82:fb:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----