Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNzqe5ltDlav1y57_NWKpH68cus.cer
File:                     iNzqe5ltDlav1y57_NWKpH68cus.cer (raw, json)
Hash identifier:          nRYpvyZ8isbMhyXtwzU11wA+lHDKKmnK7FJ9rZmNu6I=
Subject key identifier:   88:DC:EA:7B:99:6D:0E:56:AF:D7:2E:7B:FC:D5:8A:A4:7E:BC:72:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A7F2EBCF1D63BE09C9FB86AD37402F1D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Muilties/2/88DCEA7B996D0E56AFD72E7BFCD58AA47EBC72EB.mft
caRepository:             rsync://rpki.co/repo/Muilties/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 13:01:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205329
                          IP: 2001:67c:2800::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7f:2e:bc:f1:d6:3b:e0:9c:9f:b8:6a:d3:74:02:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 10 13:01:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88dcea7b996d0e56afd72e7bfcd58aa47ebc72eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:cc:ac:7f:18:8b:16:32:a1:6a:cf:a6:df:
                    0a:5f:b9:2f:0d:ee:b5:df:dd:c7:1d:85:43:5b:59:
                    1f:cb:31:85:37:3c:39:43:0e:eb:c8:ac:c0:b5:65:
                    b8:32:14:cb:da:69:86:8d:08:dc:b9:87:c1:67:41:
                    4e:22:d0:92:0b:f2:e4:90:13:30:50:f4:26:7f:bb:
                    6e:2b:21:da:52:f6:45:c0:8c:dc:22:de:6e:d9:41:
                    79:7b:4b:ed:dd:5d:c7:ca:a8:c7:52:6d:57:e1:8b:
                    cf:28:a9:c2:46:f7:fb:96:1a:65:f4:e0:ab:c1:d8:
                    28:6b:6a:10:b4:6c:04:e0:f3:02:3e:70:de:67:0d:
                    24:57:77:cd:35:b0:19:96:50:b7:f8:4a:f4:22:8e:
                    c6:e9:be:c0:20:fd:07:7a:44:3d:a2:98:df:4b:04:
                    31:e5:92:eb:01:95:9f:82:93:68:96:a7:1e:a1:75:
                    a2:d3:2b:2f:c6:33:58:cf:36:76:7a:1f:b4:45:75:
                    d8:38:62:8c:c6:68:a0:7c:00:86:04:94:8c:27:f5:
                    80:59:0b:17:d9:50:63:8f:c6:0b:b4:f5:79:c3:0f:
                    b9:97:58:84:56:df:af:b4:86:62:ea:05:5b:92:67:
                    5f:06:b5:b5:cf:ce:35:a4:62:ab:75:e7:ca:38:20:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DC:EA:7B:99:6D:0E:56:AF:D7:2E:7B:FC:D5:8A:A4:7E:BC:72:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Muilties/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/Muilties/2/88DCEA7B996D0E56AFD72E7BFCD58AA47EBC72EB.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205329

    Signature Algorithm: sha256WithRSAEncryption
         83:0e:6f:7d:d3:b7:96:9b:db:bb:a4:53:e3:b4:a3:8f:1d:05:
         98:b5:cd:9c:0f:76:43:87:8e:51:73:9b:81:19:56:6f:6f:14:
         b2:82:70:80:dc:4d:d8:a7:e5:27:b6:96:10:62:d0:4f:c2:7e:
         a2:8b:7b:1d:eb:90:21:cb:b4:92:8b:5f:af:e0:6a:30:c6:b1:
         b4:08:7a:c4:ea:ed:c5:62:e5:f2:ce:be:62:6a:e8:96:de:11:
         b1:69:5d:f0:a3:e1:d0:21:71:5f:56:7b:73:e7:13:58:a5:db:
         58:54:5a:14:ca:9f:6e:33:8b:5a:ed:81:d3:dd:8d:4d:3d:57:
         de:37:fc:8c:af:97:fe:bd:1f:79:10:91:a6:5e:33:58:ac:f2:
         db:38:57:b3:66:5a:32:c9:9e:22:86:7d:02:b8:59:d6:42:64:
         9f:74:0c:62:29:4c:be:30:79:ea:64:5c:81:1c:c3:dd:36:5c:
         b2:52:f4:f5:59:e7:a2:e0:c6:a0:0b:27:40:97:18:dc:5c:db:
         e9:84:9c:d3:7f:22:51:c4:16:6f:9b:c1:68:9b:d1:4a:f8:f3:
         ac:6b:c1:d7:20:b4:3c:be:94:e2:50:97:e2:86:10:77:87:45:
         dc:44:51:f8:61:58:13:bd:c2:91:c7:7c:7c:2a:45:e4:d1:a9:
         67:17:8f:ab
-----BEGIN CERTIFICATE-----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