Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mgZrmsKIgHCCg1YSr7JGWxdbu4g.cer
File:                     mgZrmsKIgHCCg1YSr7JGWxdbu4g.cer (raw, json)
Hash identifier:          YbSIayD3f0deFg2QOTmalEqA5KLd6/IzdnvpHR9G/10=
Subject key identifier:   9A:06:6B:9A:C2:88:80:70:82:83:56:12:AF:B2:46:5B:17:5B:BB:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D898985293EDC6189A10A5EF79809BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/mgZrmsKIgHCCg1YSr7JGWxdbu4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 213.217.31.0/24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 12:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:89:85:29:3e:dc:61:89:a1:0a:5e:f7:98:09:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a066b9ac288807082835612afb2465b175bbb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:63:d2:5e:3a:7a:cf:bd:93:89:24:94:72:
                    f1:ec:8f:87:99:3f:03:6d:7a:0f:cc:86:af:b5:c5:
                    1c:f9:13:08:7a:83:ca:f4:c7:b7:3f:83:01:51:26:
                    55:62:b9:cf:40:36:6a:96:e1:aa:38:d9:fe:fd:a3:
                    f4:90:b8:70:6e:37:8c:59:b8:e8:f7:b6:b2:6a:a0:
                    96:14:58:1b:55:23:a7:e9:22:c2:c0:67:9e:d3:fe:
                    eb:82:60:65:cb:af:df:c3:74:b6:2f:b4:5d:dc:93:
                    03:72:a5:bd:11:1b:b8:b0:b4:34:4a:bd:63:28:e9:
                    17:4e:55:e4:8a:6b:56:18:49:1d:b4:ff:58:a2:56:
                    21:f8:1d:10:45:1b:a4:2a:33:4a:b1:dd:8b:f5:3b:
                    79:03:5a:88:14:bd:52:84:1b:c2:dc:0d:82:85:b5:
                    89:18:49:1d:0b:e1:36:fa:65:5f:6a:67:d9:66:ef:
                    89:f3:67:c5:34:a8:63:97:a0:8b:6b:64:ca:71:64:
                    3b:f5:3a:fa:d1:8f:0d:10:f3:b0:47:b6:45:53:dd:
                    36:d3:27:8a:88:fb:d1:de:1b:41:c2:54:6c:7b:25:
                    6f:54:f3:03:a3:53:eb:11:d2:b3:6e:13:70:c2:50:
                    d0:4d:83:9c:f0:48:fb:be:b9:d5:0f:5a:62:31:23:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:6B:9A:C2:88:80:70:82:83:56:12:AF:B2:46:5B:17:5B:BB:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5502d7-38b9-40b0-ae9c-2bf49e9c4676/1/mgZrmsKIgHCCg1YSr7JGWxdbu4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:16:6d:e4:72:ba:0f:ec:13:04:d3:7d:c7:e8:62:2d:b4:
         17:c6:75:29:18:a7:b1:fd:37:91:e3:19:19:5f:11:8d:af:93:
         3c:da:14:cc:e3:dc:d3:d9:25:e6:d7:d2:5e:13:3e:1a:d4:1b:
         c9:03:ca:80:6c:87:69:5e:8b:18:34:51:e7:db:46:d7:24:6e:
         98:25:21:9d:bd:86:7b:31:74:04:d4:36:77:a6:c8:0e:a8:5d:
         85:54:5f:04:f7:99:fa:33:d6:c4:b6:ae:d0:4a:07:aa:9e:63:
         1c:d4:d7:f3:e8:39:f1:d9:02:04:28:2b:21:db:32:5f:c0:9f:
         f3:82:b7:b1:3b:36:7b:7b:6c:e7:96:d0:61:10:70:a4:d6:ba:
         a7:16:88:f8:8e:ba:dd:eb:f7:72:a6:84:4b:f6:e8:2f:cb:e6:
         ef:d9:93:55:77:b9:a1:82:97:3b:38:cf:ee:a0:4b:94:13:bf:
         18:1b:c7:95:e7:99:df:a4:8a:9f:0d:f6:21:a0:99:52:14:0c:
         8a:bb:01:f0:5d:a7:bd:cc:1b:8f:55:b5:1f:95:f1:95:1f:fb:
         01:f8:78:25:a8:d3:07:ac:75:eb:5b:bb:13:57:92:fb:a8:23:
         fb:58:4f:ed:b1:7d:98:be:63:b9:6f:fb:fa:3c:b4:36:d4:46:
         79:82:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----