Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
File:                     Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer (raw, json)
Hash identifier:          nmFJVq4fmg8flqAOQQX8aKh3eczpkeaTDLIXZEreMYw=
Subject key identifier:   4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFAA3246D9E799EDF5E4380C8EB94C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:16:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 151.216.32.0/21

Validation:               Failed, certificate revoked on Thu 12 Jan 2023 13:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fa:a3:24:6d:9e:79:9e:df:5e:43:80:c8:eb:94:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:16:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:6d:55:f9:ee:65:1a:26:25:fa:36:ee:1a:
                    a9:f3:4c:19:01:44:7e:ce:ca:f1:a9:ea:54:50:20:
                    e0:b5:00:aa:22:1e:58:7c:00:69:87:b0:eb:53:7e:
                    23:a5:53:be:eb:e0:74:59:b4:ec:81:06:ae:89:52:
                    f2:87:02:e9:67:ba:b7:50:eb:0c:32:98:2a:ad:4e:
                    8c:31:9b:0f:ec:82:1b:3f:30:34:87:cc:70:9c:f7:
                    16:a3:fd:de:0c:67:6e:39:ad:20:5c:ea:e1:97:51:
                    5a:23:9b:71:3e:f7:08:ea:aa:c9:2a:64:d8:4a:fb:
                    37:16:21:0b:36:13:8a:48:05:b7:8e:b4:d8:76:b7:
                    3e:91:e3:f0:6c:25:72:8f:52:d7:b6:9b:8e:8b:be:
                    54:92:58:00:d8:9d:4d:37:86:b7:c8:f1:72:69:f8:
                    e8:24:28:5a:21:4f:b8:55:9f:30:d9:1f:e0:e1:11:
                    cc:ba:78:b3:0e:2d:30:72:59:dc:cb:da:51:f8:92:
                    e4:00:d8:b4:b1:7a:a6:91:58:1c:30:dc:02:c8:3d:
                    c0:31:b3:40:1d:f8:09:f5:02:7e:6b:f0:6f:5d:de:
                    4b:8c:c2:c7:2a:ce:1f:b4:d1:1d:69:d8:ee:c5:7e:
                    a1:e0:b7:de:a6:c5:9b:a0:0c:d3:50:c7:e3:8f:75:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:b0:d9:1e:1f:94:57:20:1d:72:2d:d9:1a:42:4f:ef:15:
         52:61:f8:a1:ca:e2:bf:e4:39:1d:bc:c0:f5:41:1c:6f:4d:46:
         3a:91:76:ee:8c:a2:24:75:20:78:bb:1c:2b:e3:63:9d:23:ce:
         7d:d6:d9:b2:fc:18:0d:29:58:09:08:5a:77:ec:c5:9e:73:82:
         3e:72:5d:7c:1b:42:66:84:f4:b5:3a:fc:23:35:9a:5c:a7:8f:
         6d:af:37:5e:ff:c4:3c:71:5c:01:4c:ba:67:bd:3a:20:74:3b:
         0f:ba:5a:ee:61:89:ed:8a:8f:86:70:d8:3a:9b:ff:55:5d:47:
         40:cc:be:4f:a0:f8:37:25:4b:21:fe:9d:13:bb:7d:5d:7b:2b:
         70:3b:7f:30:f8:66:c7:6d:ce:26:7c:30:c9:a1:a2:52:02:4f:
         99:92:82:35:ac:61:ce:38:69:bf:8f:33:f3:ba:d9:47:b5:79:
         79:ac:94:ce:c0:c6:df:fe:94:ce:a9:4c:6d:f2:aa:53:58:c5:
         7a:fe:5b:34:0b:db:8c:d4:1c:c8:2a:45:32:a4:06:b1:5e:18:
         d4:04:ce:38:64:df:97:43:0c:25:96:bf:9f:80:c5:bd:15:cb:
         49:14:71:44:b0:f1:59:f8:a9:61:1f:0e:e8:4f:d6:23:4b:03:
         6a:ce:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----