Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mh5SMTi6EQaZy66aIjd88zclB8I.cer
File:                     mh5SMTi6EQaZy66aIjd88zclB8I.cer (raw, json)
Hash identifier:          f6HSPu46J5nDmbrrpKFRiUn0rCyQjPXVnOBloFkWaIQ=
Subject key identifier:   9A:1E:52:31:38:BA:11:06:99:CB:AE:9A:22:37:7C:F3:37:25:07:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018576FF303F23C0F09FFAED59F2EF321050
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6d60-6b05-4f17-b560-03da0429a0cf/1/mh5SMTi6EQaZy66aIjd88zclB8I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6d60-6b05-4f17-b560-03da0429a0cf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 03 Jan 2023 09:38:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 42192
                          AS: 43613
                          AS: 48589

Validation:               Failed, certificate revoked on Wed 04 Jan 2023 12:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:76:ff:30:3f:23:c0:f0:9f:fa:ed:59:f2:ef:32:10:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  3 09:38:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a1e523138ba110699cbae9a22377cf3372507c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:11:d8:88:ab:a7:37:e5:01:24:fb:35:b7:
                    fa:30:e0:34:92:64:ae:2d:35:bd:31:85:09:e7:4a:
                    5f:5f:fc:f6:ba:05:f9:3f:8c:54:5b:f1:98:9b:9c:
                    a5:f2:0f:18:84:6f:cd:f4:a5:f4:a4:62:91:1e:85:
                    6c:29:f5:81:c9:4a:02:77:3b:a1:75:10:66:57:03:
                    6f:11:8a:5c:d6:e4:4b:7a:24:15:e5:ee:f5:07:9d:
                    34:57:c3:41:96:81:6a:b9:cc:4a:7d:0b:f5:62:d6:
                    ae:41:9d:8b:86:03:09:17:24:74:5c:04:da:8c:c9:
                    07:46:8e:35:6d:f6:9d:6d:de:55:d6:4e:53:37:8d:
                    f3:83:51:a7:e3:2e:ef:17:2f:a2:7a:0e:ce:98:94:
                    d1:60:92:0e:72:19:3a:29:de:4b:f8:2c:bd:14:64:
                    32:45:28:76:3a:17:e0:f6:87:33:55:b6:49:db:f9:
                    eb:d5:5d:3d:9a:ee:40:e2:5b:87:32:6e:b4:0c:ee:
                    f3:09:5b:85:31:fd:85:c9:3d:e1:4f:b2:3e:e6:07:
                    9c:69:4e:f4:09:48:ad:a0:83:19:2a:ca:ee:80:70:
                    6b:ba:e0:18:b7:d2:e8:fc:66:c2:70:46:df:0f:1d:
                    5e:ee:83:cb:e1:47:19:82:27:1d:20:9b:83:4c:20:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1E:52:31:38:BA:11:06:99:CB:AE:9A:22:37:7C:F3:37:25:07:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6d60-6b05-4f17-b560-03da0429a0cf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6d60-6b05-4f17-b560-03da0429a0cf/1/mh5SMTi6EQaZy66aIjd88zclB8I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42192
                  43613
                  48589

    Signature Algorithm: sha256WithRSAEncryption
         07:79:78:ce:f2:94:ae:90:e1:5d:0a:c1:7d:17:e0:d2:33:c5:
         9e:32:cb:ce:6b:4f:88:08:07:72:e2:d7:01:78:1f:82:a7:d0:
         9a:37:a7:75:14:da:12:2f:00:5f:1f:ba:c7:cd:67:53:33:05:
         fd:4f:bb:b9:d6:ac:ab:d2:18:91:13:43:2c:0f:2f:80:e7:6d:
         6f:4a:97:7f:fc:d5:be:bc:6d:26:75:30:8c:f0:24:ae:86:a5:
         46:0e:5d:1d:db:e7:c3:0c:c0:ad:73:34:08:8a:c1:b2:1c:81:
         94:33:f2:88:b9:4f:9f:f5:a3:b6:84:24:d6:da:de:4f:e6:8e:
         fb:18:19:01:c0:6d:a0:3c:bb:38:a3:3d:9d:ab:62:e7:8e:1b:
         50:4c:1c:78:e9:be:b4:44:69:af:14:43:30:9f:c7:32:07:b6:
         57:4a:f7:af:7e:2a:1b:c5:43:a6:c6:25:c6:7f:73:f2:42:09:
         4f:49:88:74:2a:21:29:33:b7:fb:16:c6:b0:50:d6:fc:c1:8f:
         9d:4f:68:0b:99:93:cb:7f:d7:62:51:da:a3:a7:bc:f1:73:99:
         a6:4d:66:c2:51:d9:2a:0f:21:12:84:a7:24:33:e8:7c:fc:42:
         05:9d:3b:ee:04:bd:de:30:21:fc:2d:ad:22:a4:bf:11:38:99:
         8d:fd:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----