Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TKEI3MhfpIWNQ0QRjSsLVNuXB4Q.cer
File:                     TKEI3MhfpIWNQ0QRjSsLVNuXB4Q.cer (raw, json)
Hash identifier:          aGTalXxvg9fElw2Uq7pmWItaWlSqFdTulhtAgtBJ8W0=
Subject key identifier:   4C:A1:08:DC:C8:5F:A4:85:8D:43:44:11:8D:2B:0B:54:DB:97:07:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD1373E9C3FED7B5D96F8BB8C14126D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/a32b78-2043-4e67-aa10-a05180c1cbfb/1/TKEI3MhfpIWNQ0QRjSsLVNuXB4Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/a32b78-2043-4e67-aa10-a05180c1cbfb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 44242

Validation:               Failed, certificate revoked on Tue 19 Sep 2023 09:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:37:3e:9c:3f:ed:7b:5d:96:f8:bb:8c:14:12:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ca108dcc85fa4858d4344118d2b0b54db970784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:30:d7:e5:36:23:1e:63:fa:78:95:5e:93:
                    3d:db:1f:43:a8:fc:5d:cc:1a:a4:c2:60:2e:c3:10:
                    2a:e6:97:f2:fb:e1:c0:0b:91:e6:b4:18:fd:3f:35:
                    a4:9e:5f:90:40:74:e2:a8:bb:f4:a9:e6:a8:4c:67:
                    0d:84:8e:6c:4f:4f:5f:58:d4:d4:d0:12:c6:1d:ac:
                    39:26:28:8c:c7:e2:78:d7:2e:77:f9:d1:3e:77:20:
                    61:20:f0:0b:dd:3a:fc:c6:e3:96:05:74:be:39:cd:
                    73:21:1c:1b:6e:f8:de:35:e6:c2:d6:99:34:3d:fc:
                    44:6a:98:32:63:03:a9:17:b6:35:54:91:f7:49:34:
                    f7:cb:76:28:86:39:0c:33:db:58:e8:41:30:91:26:
                    be:20:66:2b:25:45:37:bd:01:44:0d:83:7f:40:51:
                    bf:d9:be:88:88:60:7d:9c:ba:04:53:ab:7c:f5:25:
                    7c:8e:cc:a4:1b:af:79:f1:32:a3:3e:24:6c:2f:55:
                    e0:77:62:5b:bd:fd:79:29:bf:c6:91:92:24:65:4b:
                    cb:f6:0e:59:97:e1:82:55:64:f0:94:91:51:d6:6b:
                    fb:4c:ee:39:23:fd:27:e0:48:f5:8c:c2:6d:43:1d:
                    91:9b:6d:00:d5:7a:59:aa:5c:5d:5d:80:d8:fa:68:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:08:DC:C8:5F:A4:85:8D:43:44:11:8D:2B:0B:54:DB:97:07:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a32b78-2043-4e67-aa10-a05180c1cbfb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a32b78-2043-4e67-aa10-a05180c1cbfb/1/TKEI3MhfpIWNQ0QRjSsLVNuXB4Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44242

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:e7:98:8a:b7:f0:47:4f:4e:94:b1:f0:8a:74:f6:6b:bc:
         25:76:87:27:60:19:0d:0d:b5:78:a8:90:12:8b:4e:fa:e8:ca:
         b0:6b:8a:04:39:70:fc:cf:8f:9a:1c:34:e5:11:3d:c7:55:c0:
         93:e0:34:2f:40:4d:62:90:a3:34:2f:d5:a8:6c:70:22:98:6c:
         45:60:68:6b:09:7d:af:74:9f:ef:cf:77:de:a3:4e:a2:43:92:
         97:11:aa:c5:6e:56:fb:58:15:94:7c:c7:58:b1:e9:5d:09:11:
         b3:5a:f4:08:01:e6:bb:af:1b:e2:33:a9:b0:57:fc:98:67:36:
         96:fa:67:7f:e5:b8:1f:1c:9b:77:20:f7:b0:db:a5:9d:01:68:
         e9:7a:77:dd:0e:35:71:90:c0:e6:27:5c:5f:e9:88:cb:ec:dc:
         8b:cc:3e:67:2c:02:78:d6:0b:bc:3f:32:6e:b5:3b:0a:23:e7:
         e7:b9:0f:c6:51:cf:da:b8:ac:92:13:27:1a:e2:3e:b2:84:77:
         86:c6:0f:84:f5:12:8d:a8:3a:69:37:a0:f8:db:bd:f5:ed:0a:
         ea:7b:e0:e9:76:25:80:6f:fb:e5:9f:df:8e:bd:c9:81:9a:25:
         63:5e:7f:60:6e:a6:f5:51:2b:a8:8a:35:c5:96:43:ba:14:6a:
         75:fe:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----