Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
File:                     hcMT6ZZeqns66b1cvzVm1EpRCX0.cer (raw, json)
Hash identifier:          M8f8E18VJSyrYZgycPbpZ1rPDmLKiimPd4X/JSMlTCk=
Subject key identifier:   85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C6D53FBDD5D342C3ABCD4B32D49F684ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 15 Dec 2023 11:54:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.40.84.0/23

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 14:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:53:fb:dd:5d:34:2c:3a:bc:d4:b3:2d:49:f6:84:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 15 11:54:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:a4:6f:8f:78:10:18:c8:e2:3f:1c:e2:ef:
                    90:cc:b9:90:89:ce:5c:1a:8a:14:8b:3a:12:93:dc:
                    f6:41:fa:20:96:25:48:da:be:4c:4e:b2:a8:d3:97:
                    0d:9f:50:2c:b9:7d:04:dc:4a:95:61:b3:2a:f2:4f:
                    cb:82:7d:b6:a7:31:6a:84:59:97:82:b1:95:c0:67:
                    2a:68:d2:db:6f:24:10:6a:9d:54:50:df:ed:15:5a:
                    33:1c:39:a8:4c:ab:07:fc:85:10:d4:a3:43:db:b9:
                    cd:d1:12:49:e2:9f:98:2b:ed:0b:72:a3:37:d2:03:
                    ed:29:5e:52:18:34:c8:f9:05:91:f7:c2:2a:bf:a2:
                    17:36:35:d4:b5:d3:0b:b1:c9:12:52:c7:4f:8c:19:
                    49:a6:cf:e7:2b:9d:87:bf:ec:00:b0:bb:6f:6b:b7:
                    f7:68:78:14:65:37:5c:75:9f:30:84:71:46:b5:59:
                    f7:3a:a6:a5:7f:42:19:23:39:b7:b3:9a:1f:48:20:
                    a2:77:6d:3a:22:31:d6:48:df:a4:74:76:74:1f:8d:
                    91:55:97:9f:b0:14:77:b5:ab:fc:7f:7a:8a:e7:d7:
                    b8:69:0c:63:9f:c5:4b:84:51:36:d9:c9:a2:4e:36:
                    18:da:f9:a3:30:08:90:3c:3e:5f:80:57:52:dc:c2:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:cd:b2:95:93:b7:27:95:9b:88:e9:92:9d:09:63:b8:3e:
         e5:47:85:37:b0:da:7c:55:29:fc:19:e6:4a:7d:84:85:9b:80:
         0f:9d:0d:5f:dd:df:bd:6d:7e:48:cd:9f:63:7d:26:30:2e:28:
         0b:02:ec:02:f6:12:36:45:c8:aa:e8:40:f8:37:73:a1:d9:5b:
         59:b9:32:c5:19:f8:f1:24:6d:0c:5c:73:66:1f:49:14:f6:f1:
         50:b4:4a:75:7b:e0:d0:10:c4:85:bf:ca:21:0c:a2:b4:6d:d8:
         1e:5d:2e:7b:b3:69:99:2e:da:25:5b:f9:03:17:1d:f1:88:c2:
         45:f8:17:55:fb:bd:3b:19:ef:0d:94:9c:4c:07:24:a9:32:83:
         a5:10:95:39:5b:29:fa:2b:25:4c:69:6e:56:87:37:3d:fb:9c:
         08:52:c1:6f:b2:c1:9f:8f:eb:23:d0:4e:d8:09:3c:47:3d:27:
         87:d7:45:37:e5:9d:65:da:06:f7:a0:03:ab:09:d2:1e:35:71:
         61:27:fa:bd:e9:14:41:38:3c:6c:ca:e2:f2:b0:65:e2:ba:fa:
         95:e7:10:b2:13:8a:d0:e5:ae:67:ad:1f:e6:83:59:0b:5e:54:
         2f:88:a4:96:50:62:40:c8:f9:8a:94:39:4f:7b:20:ba:83:2e:
         89:c4:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----