Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akN8AXMdEHyizu2CE6Jz_d1MZKU.cer
File:                     akN8AXMdEHyizu2CE6Jz_d1MZKU.cer (raw, json)
Hash identifier:          I3DwJ1EZu+bNzlQgKp0okeNqmRihcooCHtqtVU7LkZc=
Subject key identifier:   6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018872204B116355E1AE57599D8CD4E8705B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/akN8AXMdEHyizu2CE6Jz_d1MZKU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 31 May 2023 14:04:59 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a04:e880::/29

Validation:               Failed, certificate revoked on Thu 01 Jun 2023 13:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:72:20:4b:11:63:55:e1:ae:57:59:9d:8c:d4:e8:70:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 31 14:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a437c01731d107ca2ceed8213a273fddd4c64a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:f0:f1:9a:6b:38:b4:c5:f2:87:e2:a5:59:
                    2b:b4:7b:60:31:18:45:81:5a:c4:a2:32:2d:59:5b:
                    9b:50:e6:da:c8:a1:f9:bd:17:02:ab:6f:65:eb:c9:
                    d6:19:29:70:7d:72:67:d6:b3:94:ab:75:5e:fe:2c:
                    ec:d1:ac:1e:1a:6b:cb:2b:84:d7:9b:d8:d3:d4:f4:
                    d8:ac:00:61:9d:1e:a9:50:bc:1d:fd:9f:82:e4:d5:
                    15:cc:ec:8a:4d:d2:ae:e1:bf:30:5d:d0:33:50:26:
                    5c:97:1a:cb:b4:d9:41:ae:c4:1e:af:8f:78:3c:cd:
                    aa:45:cb:fe:04:54:b4:14:3a:2a:2c:91:16:33:1c:
                    4f:22:76:f8:9c:79:48:11:c5:91:a8:cd:be:53:f1:
                    81:a5:a3:0a:da:87:a6:c4:0b:7b:7f:ec:e1:1a:7b:
                    38:90:47:4a:58:60:3b:f6:c4:de:47:4a:51:00:2d:
                    df:b3:22:81:c3:b9:c0:f4:4a:00:12:38:d6:ac:c1:
                    1d:59:6a:4a:ac:14:4f:d2:ab:70:07:15:3c:3e:0d:
                    ee:99:3b:90:b9:d8:f3:00:41:d9:66:28:c4:e2:bc:
                    a9:46:87:53:84:9e:b7:50:02:7a:ea:e9:c9:c8:0f:
                    00:8f:81:56:8c:bb:84:d4:80:b1:57:8f:d9:c5:49:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/akN8AXMdEHyizu2CE6Jz_d1MZKU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:e880::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:ac:ee:a0:69:b9:9b:9a:31:eb:95:62:58:60:70:6d:23:fc:
         54:c8:cd:d2:12:2e:e1:c2:ec:aa:55:ad:0b:8a:d9:46:89:31:
         7c:b6:16:6f:db:94:d7:a0:ff:24:cc:79:fb:f4:22:49:50:0e:
         1c:4f:4e:12:59:75:b8:33:d6:de:be:09:f4:ec:3c:1a:89:f0:
         dc:4a:e0:b0:05:47:e6:16:1c:58:f3:f1:a3:b3:37:4b:67:fb:
         7f:7e:d3:c7:2a:d1:be:d3:2e:02:a4:cc:93:2c:bd:1c:05:a7:
         24:4b:21:a0:04:eb:77:27:14:bf:8c:3b:66:f7:43:5b:1a:d2:
         5e:f7:21:09:15:d0:a8:a5:e6:b0:b2:0c:a4:34:4a:3d:4d:87:
         9e:2a:3f:61:40:17:27:7e:8a:71:71:a6:ea:7a:da:a8:f5:b1:
         84:f1:bc:5d:78:15:e5:1e:2b:29:22:bd:3c:2b:e1:ab:7f:eb:
         4a:ac:d5:f2:9f:8e:c8:5d:db:bc:63:4c:a1:df:eb:c6:84:30:
         c8:8c:70:5f:5d:2d:ce:98:f0:a3:b3:ec:1f:1c:3e:68:48:fc:
         ac:d6:40:70:38:e1:b6:44:b6:67:ea:22:8a:1c:28:bc:9b:b2:
         76:b3:23:32:89:74:e5:78:8e:24:16:42:3b:84:fd:fb:14:d7:
         b1:c3:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----