Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fmkfnA25g79mdR8JkEd4G1c6Nus.cer
File:                     fmkfnA25g79mdR8JkEd4G1c6Nus.cer (raw, json)
Hash identifier:          e5/5Bh8O/L3Cn2bcMffekDfb3gAeSXA8AtrkNRHHOFU=
Subject key identifier:   7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF52A523D31063F0E50ACE6D23C6531
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:32:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.3.28.0/24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 07:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f5:2a:52:3d:31:06:3f:0e:50:ac:e6:d2:3c:65:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e691f9c0db983bf66751f099047781b573a36eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:fd:cd:bd:d4:6e:87:ac:db:ae:b0:bc:95:
                    d9:7e:ba:7b:23:5e:ce:66:bd:c2:d1:09:26:28:87:
                    c0:7c:12:ea:e0:c8:b2:01:ca:66:62:04:d4:62:76:
                    f8:b3:2d:f6:24:e4:be:c5:fe:0c:ff:ed:17:a4:ec:
                    cb:76:86:c0:e2:ca:c6:e0:b8:36:3c:68:b3:4c:4a:
                    32:ae:1b:e5:a1:ac:41:e0:f0:fa:d0:ee:2b:0f:02:
                    0c:e8:ee:15:a0:85:27:38:8e:e0:9f:66:0b:53:c7:
                    fc:16:16:98:51:30:c5:b8:07:6f:0e:9f:8d:ef:da:
                    c7:2c:31:6c:99:39:62:b8:33:a2:18:0a:32:cd:fc:
                    bc:4f:0f:a7:63:d3:e9:c6:01:f8:c1:e1:68:6b:8e:
                    5d:b8:b8:b0:83:fb:d0:29:e0:66:65:44:7d:ea:47:
                    fe:5e:00:56:bf:ff:69:49:89:03:dd:dc:65:17:e8:
                    2f:22:4d:4e:8f:52:2c:58:67:de:9d:18:38:33:5a:
                    ab:13:7f:7b:78:ef:e5:a1:1e:bd:37:82:29:ec:9a:
                    d2:13:e3:59:50:34:f6:58:83:9f:9b:53:75:be:e1:
                    07:7c:44:ff:3d:67:79:6b:f0:5f:fd:28:0b:25:ad:
                    4d:50:3f:54:f3:e9:bd:cb:b7:84:75:b9:fa:9c:9a:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:1F:9C:0D:B9:83:BF:66:75:1F:09:90:47:78:1B:57:3A:36:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7c065e-6822-4179-92e7-18dc4082e5b2/1/fmkfnA25g79mdR8JkEd4G1c6Nus.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:48:f4:78:e1:68:82:4d:95:71:f7:68:53:4c:76:cc:a1:05:
         ec:85:6b:9e:75:8a:5f:e0:16:e4:82:fd:5e:23:ff:2f:31:58:
         1d:1f:d2:9f:50:5c:e1:98:0d:7b:b7:17:af:e3:e2:27:6b:75:
         53:23:7e:d4:c9:c3:ac:a7:f4:0d:a8:5c:01:ac:1b:25:c3:a2:
         2d:e9:95:b7:15:43:ae:80:38:aa:2d:0b:48:ca:91:76:98:cb:
         76:c5:4f:bb:bf:67:35:a2:74:84:57:40:2e:e5:c9:bd:d4:ba:
         c7:13:44:56:e2:95:ab:dd:68:94:ee:ef:fd:37:5e:e3:a5:78:
         f1:df:76:58:a0:ba:1b:26:0c:0f:ef:c9:26:7a:47:bb:14:3d:
         48:cf:d1:38:d0:6a:23:37:da:fa:5a:e4:ee:b0:06:97:61:3e:
         4b:83:dc:6d:18:86:2c:1b:9b:cb:a6:25:d9:4d:bc:56:d4:d9:
         2c:c5:f7:25:16:56:60:09:d3:18:47:b2:c5:1e:50:40:3f:b4:
         97:44:6c:05:8d:28:7c:30:e9:b9:2d:90:80:55:75:66:9d:b0:
         e6:4f:92:b6:5a:06:69:d5:c9:5c:12:54:1c:1f:83:c5:0e:4c:
         f1:8c:4c:4d:8b:d6:f3:a3:79:e8:a1:96:ab:bf:14:a3:12:a4:
         af:f7:11:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----