Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5Mtmkpc5lrA2clwAqNkBHZffpM.cer
File:                     c5Mtmkpc5lrA2clwAqNkBHZffpM.cer (raw, json)
Hash identifier:          x4VzLoPymrNVsMbTSlnTm8XTh+u9FcxoR0AdX/Hjs9o=
Subject key identifier:   73:93:2D:9A:4A:5C:E6:5A:C0:D9:C9:70:02:A3:64:04:76:5F:7E:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF506FE7A3291B3EE768E9391DEE174
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/1df64f-d061-4094-a36a-05ba8a97a439/1/c5Mtmkpc5lrA2clwAqNkBHZffpM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/1df64f-d061-4094-a36a-05ba8a97a439/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207654

Validation:               Failed, certificate revoked on Tue 11 Apr 2023 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:06:fe:7a:32:91:b3:ee:76:8e:93:91:de:e1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73932d9a4a5ce65ac0d9c97002a36404765f7e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a7:2f:00:d6:c8:f6:2d:b3:d0:4a:1e:02:ad:
                    82:96:1b:f3:74:80:f4:91:05:d7:b4:a8:6d:66:4e:
                    f0:b8:81:8b:00:c1:5a:70:14:c4:0a:ba:24:6c:e8:
                    c8:bb:a1:e8:14:49:70:2c:85:5e:a6:26:64:f5:23:
                    97:ae:cb:3b:09:02:09:7b:70:e6:0f:e1:bd:11:eb:
                    aa:f4:07:b4:89:97:e8:d6:90:35:e3:a0:ae:64:14:
                    d5:54:cb:d3:67:0b:f4:47:75:80:ea:35:1b:ca:d1:
                    db:34:f3:6e:bc:19:f3:ac:8c:e6:28:3c:ab:52:a7:
                    d5:7e:d7:b4:50:e4:46:2a:2b:a9:22:7e:57:db:32:
                    b7:cb:8f:a9:53:92:4c:78:a1:a7:43:bb:e5:fc:93:
                    99:fe:27:8e:6d:3a:8c:2b:f2:0f:ee:09:b7:2f:6f:
                    4a:4c:90:ab:fd:af:ee:46:6e:42:5b:55:ad:31:a8:
                    8a:8c:60:a9:a2:e8:49:25:58:a7:54:8d:7a:a0:99:
                    52:f6:2f:cb:84:59:8c:d6:8c:3c:10:ce:1d:5a:d5:
                    19:40:35:d5:d6:f8:6b:81:22:f5:c0:a0:a8:38:8b:
                    ce:fe:cc:b5:7a:55:0f:47:15:16:d7:0d:a2:6a:89:
                    c2:df:f2:47:86:84:d3:a0:60:c2:d1:5b:fa:27:fa:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:2D:9A:4A:5C:E6:5A:C0:D9:C9:70:02:A3:64:04:76:5F:7E:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1df64f-d061-4094-a36a-05ba8a97a439/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1df64f-d061-4094-a36a-05ba8a97a439/1/c5Mtmkpc5lrA2clwAqNkBHZffpM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207654

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:fe:62:50:2b:fc:ef:43:ce:1b:36:18:4a:f0:46:4d:56:
         d5:23:ee:e5:e3:08:a2:83:be:a2:f4:b1:48:70:29:b6:fc:45:
         ab:79:9c:66:0d:6f:6a:94:7f:e9:9d:08:de:5a:15:04:ef:cd:
         6b:7a:f2:47:e4:c7:99:ad:d2:cd:a5:ad:53:6f:c2:83:5f:cd:
         83:1c:b8:3c:e0:e3:5e:07:a8:0c:29:2c:40:98:d8:0a:c9:42:
         a5:fe:db:be:07:c6:41:90:28:b5:16:82:08:d0:64:a0:3f:0c:
         f3:89:a6:97:6e:de:b3:1c:09:db:d8:68:d7:b6:e4:27:15:b9:
         bd:ee:8f:5c:8c:b6:78:c9:c7:9d:54:a7:a0:d7:d3:e1:af:40:
         a1:ac:64:6a:de:84:39:96:b7:97:98:6b:ed:9e:da:f8:ec:35:
         91:51:ab:e1:80:59:53:60:85:b3:60:51:32:b7:97:79:b8:0e:
         33:19:f3:c7:54:43:55:6f:fd:de:7a:bd:96:3a:87:95:81:60:
         fe:ae:7f:3b:79:4e:9f:c6:a0:fd:64:8e:16:ad:66:c5:37:d4:
         b1:48:26:6f:74:a7:68:c1:04:fe:72:fe:f8:10:da:84:b4:0b:
         07:41:8d:b9:3b:cb:7b:ec:35:85:1c:fa:3c:76:11:7b:08:11:
         3a:dd:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----