Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
File:                     Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer (raw, json)
Hash identifier:          RXVyjPc/N+yz9LcDOVsNBXjrnbyHLWhKyMrvOFcpLgw=
Subject key identifier:   32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1AA35276056B6D3CF1061361EEFF25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:32:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.104.133.0/24
                          IP: 2a11:5d40::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1a:a3:52:76:05:6b:6d:3c:f1:06:13:61:ee:ff:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:32:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:f3:c7:10:fb:28:2c:e9:9d:42:0f:d8:41:
                    d4:b0:1d:7f:9e:3f:1c:79:9c:fe:42:a8:05:c5:8c:
                    e2:2a:e4:28:d0:e2:7b:8d:04:cd:97:44:00:fd:36:
                    fa:d0:c2:11:b2:9e:03:79:71:7f:74:c8:19:98:a1:
                    8c:75:96:ac:fa:a9:0b:51:27:42:b8:2d:91:05:b1:
                    3e:95:e3:24:1a:80:5a:3f:e2:01:07:f2:26:eb:e4:
                    bc:55:c5:fe:6f:c7:f5:64:61:96:a8:1b:c4:8d:29:
                    a9:4d:d5:28:f4:19:24:3d:a4:de:cb:d2:5b:74:bc:
                    3b:7c:a9:f6:7a:e0:d7:01:b4:07:3d:77:71:df:d0:
                    7a:80:fb:b0:dc:17:d2:c2:5d:7d:3f:3e:28:dc:63:
                    98:03:ef:8e:8d:15:a4:02:e6:ee:91:b6:9d:2b:bb:
                    fd:1e:8f:1e:03:01:d5:18:04:b5:91:b7:67:23:36:
                    8e:f6:69:a0:4d:63:b8:44:f4:7c:84:e8:e5:b3:bc:
                    2b:a3:23:e1:87:0d:95:dc:e9:52:5f:bb:91:64:d0:
                    05:d8:a4:73:58:18:b3:a5:38:63:28:38:f5:c0:0c:
                    1d:da:bf:34:6b:01:56:01:b5:49:40:3e:92:3e:e2:
                    5e:5f:ff:a8:79:2c:9c:53:64:2a:c8:c8:33:25:9f:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.133.0/24
                IPv6:
                  2a11:5d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:47:2f:ba:7a:c5:41:2e:11:73:1a:98:20:43:cb:51:6f:
         d3:81:61:f3:a1:e1:8c:f1:b7:16:ed:65:bc:d0:01:d8:f7:be:
         d4:91:a4:fe:6b:db:8e:f0:54:d7:0d:87:f8:32:77:d3:6b:62:
         23:f4:ea:ea:2f:c6:f3:5b:f9:60:b1:cf:df:e3:19:cc:49:25:
         d5:e5:18:0d:c4:20:73:27:9f:1f:cc:6a:97:5b:d7:87:f2:ea:
         d6:c0:d8:be:a1:03:b6:63:31:2a:1f:53:8d:dc:97:5c:27:28:
         55:a2:95:33:86:94:21:e8:bc:60:6c:20:76:22:b7:d2:3f:02:
         b5:e9:1d:a2:ad:c3:18:8f:23:a6:0f:45:8d:77:8a:4f:7e:5a:
         22:55:ec:96:49:2b:04:3d:6c:db:73:44:89:b2:95:5c:95:c5:
         79:5a:11:be:17:5a:20:29:e3:b8:21:6b:ed:04:8f:1a:ce:e1:
         6f:84:28:e0:52:ab:7c:96:48:9c:e0:0a:61:11:c9:70:39:10:
         05:39:a2:51:f6:e4:c6:47:f9:32:d3:f8:da:06:78:f4:44:97:
         85:87:61:4a:0c:bb:f6:2c:f8:8c:17:b0:4a:61:97:76:28:43:
         c9:f6:e8:a1:72:e0:63:be:12:54:9f:ae:af:f0:14:01:9d:b3:
         84:8f:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----