Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TwgBLatx2lX6f3XNwnEXQljv9Xw.cer
File:                     TwgBLatx2lX6f3XNwnEXQljv9Xw.cer (raw, json)
Hash identifier:          ScDmfG0yyLwarmpInhkjvZ+WK05azsEAK0us+iKYA7Q=
Subject key identifier:   4F:08:01:2D:AB:71:DA:55:FA:7F:75:CD:C2:71:17:42:58:EF:F5:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A7F2FA9418A11FFEAF1E73EC01696EA19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Muilties/3/4F08012DAB71DA55FA7F75CDC271174258EFF57C.mft
caRepository:             rsync://rpki.co/repo/Muilties/3/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 13:02:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 202881
                          IP: 2001:67c:2be8::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7f:2f:a9:41:8a:11:ff:ea:f1:e7:3e:c0:16:96:ea:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 10 13:02:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f08012dab71da55fa7f75cdc271174258eff57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:e2:41:8d:c8:fc:29:48:c0:bb:15:50:3a:
                    d4:db:7f:e8:2e:1a:86:4f:36:60:c9:4f:fb:4e:88:
                    c2:6a:62:85:c3:ce:15:a7:62:fa:b6:e0:00:a3:48:
                    46:11:ae:31:f2:39:77:ee:5d:3f:ea:61:a3:91:a0:
                    82:9f:25:d6:40:9a:8d:ff:cf:7a:3c:69:10:e1:d2:
                    7d:ca:49:bb:83:50:64:b2:f1:bb:8d:5c:13:1b:77:
                    a1:1f:57:13:26:3d:27:fd:04:b9:4c:a3:33:0c:c5:
                    62:da:a0:e2:b6:12:14:93:58:c1:2a:35:f9:44:48:
                    c0:e6:2d:bc:ee:7a:a4:4d:23:dc:e8:20:12:cc:fc:
                    76:fd:ba:87:05:85:4c:38:a6:11:3f:8d:24:14:5d:
                    28:57:66:4e:30:81:a1:b1:43:9b:ca:b3:16:77:4b:
                    34:a6:1e:65:2e:00:b7:c8:7b:62:bf:c3:e9:d1:9f:
                    4b:14:04:75:4e:44:e5:ab:f1:2f:c9:11:eb:b9:1d:
                    c9:b4:d6:0a:ba:fc:c1:ff:62:75:8e:63:0e:16:9f:
                    6e:5b:4b:9b:7b:d9:97:78:a2:a0:c8:be:fe:c0:ca:
                    1d:99:0f:74:03:fc:dd:e9:95:a7:f3:ec:49:8b:75:
                    a0:75:15:23:1b:3a:bb:7a:33:68:b1:9b:6a:83:5e:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:01:2D:AB:71:DA:55:FA:7F:75:CD:C2:71:17:42:58:EF:F5:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Muilties/3/
                RPKI Manifest - URI:rsync://rpki.co/repo/Muilties/3/4F08012DAB71DA55FA7F75CDC271174258EFF57C.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2be8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202881

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:ed:d0:90:88:3b:e7:16:43:e9:17:4d:82:04:db:33:75:
         17:8a:cb:da:27:3c:d9:88:79:3d:39:23:0c:78:ad:fe:c1:d0:
         0e:af:75:e0:72:eb:e3:ce:68:49:cb:2c:f5:5d:43:56:db:ec:
         05:dd:67:c8:47:92:46:07:f3:05:1c:55:31:c4:b7:42:83:3c:
         59:22:01:6c:b2:64:14:cf:6d:58:7e:04:6d:a8:86:bd:5d:f9:
         f0:10:60:13:2c:90:1c:20:5b:ed:73:4d:87:29:39:45:91:dd:
         44:3d:cb:c2:0c:31:54:9f:ad:c4:01:0f:18:c4:d0:c1:11:53:
         28:ae:27:7f:10:b7:56:31:46:6b:55:ed:2c:68:63:45:10:08:
         47:26:cb:ed:d9:9a:e0:56:0e:52:f2:12:3b:69:e7:6f:f5:10:
         ef:aa:59:19:ae:56:cb:28:7b:73:45:51:8e:3e:59:8c:83:64:
         bf:92:b9:a1:fa:71:ef:8b:75:9d:c9:ce:36:b1:8e:d3:a1:0e:
         cb:91:68:65:9a:09:9c:1f:1d:ca:99:62:96:04:51:56:6a:3d:
         f4:cd:c0:13:53:c5:4f:6e:d4:91:66:88:47:64:1d:b7:23:33:
         d9:c2:20:a4:de:e1:78:b6:f4:c4:50:1e:1c:6e:f5:b6:0d:23:
         7b:14:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----