Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
File:                     grPc3zGvbvDJNOrySIStmVFu3XY.cer (raw, json)
Hash identifier:          RMRNFYsv4OAGTuRK4wY6McfUx5uUgTB4E5pl0mWKpLg=
Subject key identifier:   82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD07A62B66762257B8335F0933B8F8C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:31:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 144.57.0.0/16

Validation:               Failed, certificate revoked on Tue 29 Aug 2023 09:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d0:7a:62:b6:67:62:25:7b:83:35:f0:93:3b:8f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:31:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:42:94:f9:27:ed:bd:0e:ac:b2:0d:a7:ae:
                    6b:b3:3f:e4:a7:ca:72:85:d8:a3:91:1f:5d:bf:37:
                    d5:86:78:df:3e:c0:55:41:0b:12:e7:f9:e1:d9:24:
                    c9:6e:76:43:92:d0:c5:27:b8:38:f3:73:5c:04:f8:
                    86:d8:bd:de:33:8b:64:f4:8a:30:93:54:a8:c9:6f:
                    30:3d:9c:0f:b2:d3:3c:d8:92:33:21:e9:81:49:8c:
                    80:d6:fc:9a:34:ca:21:6e:7a:f6:50:a6:55:72:70:
                    87:5f:a0:c2:ca:ef:49:f0:1f:5e:43:c5:89:10:c9:
                    70:31:9a:45:b6:08:43:92:29:c6:28:b9:76:8b:53:
                    cd:6f:f5:79:f7:a4:7b:5d:1e:3c:8c:35:f8:88:5c:
                    8e:47:67:1c:d0:03:07:c0:02:22:96:78:5f:e3:73:
                    82:3f:27:38:09:58:28:78:b3:62:24:bb:f7:db:36:
                    44:eb:ec:14:4f:47:05:51:b5:e5:76:0e:95:c4:e2:
                    c1:4b:21:b1:fe:45:78:60:00:3d:d0:6c:00:57:c8:
                    d4:10:f8:1c:23:cf:3d:c1:f2:f1:9b:a2:26:39:d7:
                    3c:e5:68:7e:09:4c:01:c7:97:75:ba:1d:2a:f1:00:
                    b0:6d:4e:42:c0:fa:24:8c:1c:02:9b:c4:3f:9a:1b:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:00:28:ef:e6:68:83:c0:7e:33:de:7e:97:9e:06:24:44:9c:
         5b:c8:42:aa:c9:82:24:2e:05:c7:0a:c5:a4:41:60:8e:f4:49:
         7a:02:9a:47:12:a4:17:da:b2:91:4b:4d:ac:f0:aa:14:85:a0:
         8e:03:52:6d:88:2a:3b:60:31:b3:dc:89:dd:1f:61:21:37:fc:
         47:69:c6:61:fa:2d:da:62:88:35:a6:65:4d:5f:0b:57:d9:e3:
         07:83:e0:00:54:c4:41:45:66:f2:26:6f:da:53:0f:74:90:c4:
         95:4b:f8:c1:b2:87:21:c0:a6:44:98:a8:89:8d:8c:d2:4b:9a:
         bf:69:8d:46:e7:02:cc:df:96:be:d4:df:6a:8c:17:49:25:57:
         8d:a4:b2:46:53:e6:52:3c:86:fe:1e:0e:2c:64:d8:e1:cd:16:
         fb:81:5b:60:82:e7:25:67:8a:bc:66:da:a2:32:ce:38:8c:1e:
         ef:05:2e:e2:95:2c:95:3b:9c:12:e7:12:dc:50:85:bc:b8:67:
         43:12:71:5c:f8:ca:3c:60:84:b6:e7:04:01:84:da:c4:dd:35:
         86:d0:1f:31:0e:45:05:3a:15:a0:e8:ef:48:62:8d:9c:2e:e2:
         91:22:94:c7:81:f8:b5:2e:33:4e:f9:5a:bd:95:2a:15:b5:79:
         38:2f:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----