Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mcUPURDZUADeXL8BE7KtbZnLiBQ.cer
File:                     mcUPURDZUADeXL8BE7KtbZnLiBQ.cer (raw, json)
Hash identifier:          sVroyDEfmXsmujjd9v3LAzUvQYpoJ+bnSclURyTPJpk=
Subject key identifier:   99:C5:0F:51:10:D9:50:00:DE:5C:BF:01:13:B2:AD:6D:99:CB:88:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC64B3FCA47598726E03E10D79F3D2888
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/mcUPURDZUADeXL8BE7KtbZnLiBQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 18:31:09 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 195.234.28.0/24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 07:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:3f:ca:47:59:87:26:e0:3e:10:d7:9f:3d:28:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:31:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=99c50f5110d95000de5cbf0113b2ad6d99cb8814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:1f:9b:3c:d8:31:13:cc:51:c7:08:af:4b:
                    07:4e:58:79:fc:40:c2:ab:6e:dd:7b:0e:3b:8a:0d:
                    40:e9:bb:44:00:a5:f1:54:37:2d:4c:bf:8a:47:04:
                    a0:9a:8f:4d:cc:a3:d0:ed:5d:49:c3:c7:00:6e:65:
                    bf:ff:88:42:59:5e:96:c7:a0:da:f4:6b:e7:4d:c7:
                    eb:f2:b2:20:52:35:ed:40:b7:4a:f1:13:0b:5c:74:
                    d5:8b:e1:80:c9:52:5d:4a:0a:13:05:c5:70:86:36:
                    1b:1c:bb:24:cb:84:bf:cc:a5:3c:33:68:fd:b6:f5:
                    e3:a4:63:a5:12:46:2c:90:1a:e2:10:49:2b:ab:58:
                    43:b5:6f:af:c7:19:4b:e6:aa:0b:66:11:da:77:cb:
                    0a:10:ec:a9:7d:e9:8a:23:2e:76:f6:92:48:d4:5b:
                    96:19:08:71:26:6e:59:46:0a:ca:6e:d9:cb:ce:a8:
                    95:1e:d8:db:de:9c:f4:31:65:10:a0:0e:b9:16:4e:
                    62:a5:d2:c9:79:d9:8e:4d:16:69:36:26:df:83:d4:
                    04:9c:f7:bf:5e:63:d5:14:f5:ed:34:b1:a6:d8:d7:
                    4a:2b:8f:dc:18:08:ad:4c:aa:2f:98:3c:2d:d8:85:
                    e2:66:22:41:c6:d8:f4:a7:50:11:ce:89:a1:c4:27:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:0F:51:10:D9:50:00:DE:5C:BF:01:13:B2:AD:6D:99:CB:88:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/mcUPURDZUADeXL8BE7KtbZnLiBQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:f1:41:08:41:9f:d2:dd:7a:64:eb:8c:17:f0:7f:17:8b:
         62:7c:ea:98:1e:fd:97:d6:fc:f1:f5:5d:e4:19:0c:63:ad:3b:
         8c:26:70:63:89:c2:f8:aa:54:dd:25:b7:24:11:b8:96:16:5b:
         23:88:ee:17:cd:ef:4c:0e:64:7f:d8:1b:aa:28:1d:99:e6:5c:
         a6:e5:ed:da:23:15:ba:e6:17:a4:8b:4b:03:bf:8a:70:12:29:
         15:89:40:52:c2:07:da:98:0a:e2:f4:21:f8:bb:e6:dc:8e:18:
         2d:ef:38:c6:04:78:e3:ea:f4:1b:f2:95:60:88:bc:a1:f0:a6:
         37:6a:14:87:d3:a3:4c:5d:ba:a8:cb:e7:b5:6b:ee:27:f2:75:
         9f:65:71:a8:42:62:e9:13:c6:14:c8:86:23:0b:d6:94:de:2c:
         f5:c2:7b:af:d0:cd:3e:17:94:45:b9:0f:c5:b0:03:45:71:a6:
         98:f0:d2:ab:e3:ff:3b:0c:7a:ac:f1:4d:bc:ad:8d:cf:d2:c6:
         69:91:b8:3e:7e:18:44:da:ab:f2:47:9c:03:4a:8b:81:0e:77:
         ce:57:78:7c:bc:19:3a:ee:70:17:07:21:74:32:84:8e:a9:4e:
         32:33:07:23:38:dc:4c:1a:f7:fa:99:f0:28:93:de:d4:a8:a7:
         a2:55:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----