Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pNc7jt9X7hcnaXNKNeawmMrhL_s.cer
File:                     pNc7jt9X7hcnaXNKNeawmMrhL_s.cer (raw, json)
Hash identifier:          WZkytC8osnK7pw1xC47ZeD+shrnKXrEMqTbi4rpe4fA=
Subject key identifier:   A4:D7:3B:8E:DF:57:EE:17:27:69:73:4A:35:E6:B0:98:CA:E1:2F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD19791556D550621BC0F4DD37C586
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.72.0/24

Validation:               Failed, certificate revoked on Thu 28 Dec 2023 09:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:19:79:15:56:d5:50:62:1b:c0:f4:dd:37:c5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4d73b8edf57ee172769734a35e6b098cae12ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:22:3a:35:ed:f4:6b:b0:9f:1c:f1:8a:eb:
                    09:f7:7e:f8:a1:69:c9:f3:64:d1:5f:25:c0:2d:61:
                    bc:f3:71:fc:16:3a:64:6b:db:39:5e:83:a4:6a:e8:
                    7c:b9:e2:d8:a0:df:af:75:2c:a0:84:46:86:eb:77:
                    7c:af:6a:52:0e:75:25:85:0a:74:43:f4:50:32:22:
                    5d:25:cb:d3:df:9b:e8:89:11:49:db:84:4e:ad:38:
                    c8:bd:13:dd:0d:13:ee:9f:23:ae:6d:45:b7:44:72:
                    9a:bc:33:41:b2:be:b9:54:0a:43:50:1e:5b:1c:61:
                    10:dd:bc:26:23:11:e9:69:60:32:de:71:5d:dd:3c:
                    51:49:12:fd:19:93:16:f3:24:dd:d0:53:18:a5:f3:
                    42:5c:51:4c:67:a4:7d:43:fa:c8:a3:88:24:ed:17:
                    e5:cd:b7:60:08:d4:b1:3e:f3:39:a8:0e:9d:87:7b:
                    2f:8d:75:d8:d5:b2:5d:a4:9a:cd:50:dd:95:b9:51:
                    38:9a:08:1a:64:80:c3:00:44:9a:6d:e9:2a:90:0f:
                    5f:e5:b9:6d:0e:6d:57:c1:28:f8:e2:3a:7b:04:5b:
                    a3:56:49:20:ea:7a:a4:56:4d:6f:7a:1b:09:9c:af:
                    74:ba:79:11:ea:c2:1c:e4:65:10:78:8e:7f:31:f0:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D7:3B:8E:DF:57:EE:17:27:69:73:4A:35:E6:B0:98:CA:E1:2F:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3ca17b-fad9-4904-81ea-c0859dd0929f/1/pNc7jt9X7hcnaXNKNeawmMrhL_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:95:c8:cb:98:28:d7:62:34:f9:9a:97:c8:2c:40:6a:c3:
         df:6a:8c:51:e1:06:b6:d7:e8:1b:45:ed:bb:cc:bf:f7:f2:c9:
         00:f0:d9:d5:c2:77:3c:28:fa:97:44:9b:f3:52:f3:cc:c8:f1:
         30:48:ad:8d:42:73:a9:d7:bf:04:b8:4e:d9:c6:3d:5d:22:7b:
         1f:c3:5b:f2:79:94:f3:55:52:85:91:3e:0e:a9:5f:fb:fd:66:
         5a:31:e2:b6:43:34:49:cc:a8:88:52:e6:cd:d7:e6:b3:1d:8b:
         f4:c3:5f:aa:3b:58:48:00:2d:ca:05:d9:38:e3:d8:2d:01:d1:
         3c:94:29:0e:47:55:54:0b:15:7a:46:44:62:f6:5f:dd:e9:0b:
         a9:e2:a9:37:a4:ce:35:16:05:02:c8:54:a9:68:ae:5e:3c:56:
         71:17:00:e8:67:df:59:12:2b:41:f5:a0:37:7a:bf:11:3a:85:
         c2:d2:35:62:50:b5:be:a5:85:2a:6e:77:d0:66:5b:93:c3:23:
         dd:bf:1c:a2:0b:70:47:af:66:5e:9b:4b:16:08:d0:7b:1e:e2:
         d1:24:da:2f:92:11:40:4f:30:1c:f8:c6:37:ee:c4:a6:07:e4:
         ed:40:3f:f1:7c:fc:50:fd:75:5f:02:d9:78:f5:67:a2:89:34:
         30:da:bf:80
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVsrRl5FVbVUGIbwPTdN8WGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDkzMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGQ3M2I4ZWRmNTdlZTE3Mjc2OTczNGEzNWU2YjA5OGNhZTEyZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ4iOjXt9GuwnxzxiusJ9374oWnJ
82TRXyXALWG883H8Fjpka9s5XoOkauh8ueLYoN+vdSyghEaG63d8r2pSDnUlhQp0
Q/RQMiJdJcvT35voiRFJ24ROrTjIvRPdDRPunyOubUW3RHKavDNBsr65VApDUB5b
HGEQ3bwmIxHpaWAy3nFd3TxRSRL9GZMW8yTd0FMYpfNCXFFMZ6R9Q/rIo4gk7Rfl
zbdgCNSxPvM5qA6dh3svjXXY1bJdpJrNUN2VuVE4mggaZIDDAESabekqkA9f5blt
Dm1XwSj44jp7BFujVkkg6nqkVk1vehsJnK90unkR6sIc5GUQeI5/MfDMuQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKTXO47fV+4XJ2lzSjXmsJjK4S/7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzNjYTE3
Yi1mYWQ5LTQ5MDQtODFlYS1jMDg1OWRkMDkyOWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvM2NhMTdi
LWZhZDktNDkwNC04MWVhLWMwODU5ZGQwOTI5Zi8xL3BOYzdqdDlYN2hjbmFYTktO
ZWF3bU1yaExfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAstRIMA0GCSqGSIb3DQEBCwUAA4IBAQCNqJXI
y5go12I0+ZqXyCxAasPfaoxR4Qa21+gbRe27zL/38skA8NnVwnc8KPqXRJvzUvPM
yPEwSK2NQnOp178EuE7Zxj1dInsfw1vyeZTzVVKFkT4OqV/7/WZaMeK2QzRJzKiI
UubN1+azHYv0w1+qO1hIAC3KBdk449gtAdE8lCkOR1VUCxV6RkRi9l/d6Qup4qk3
pM41FgUCyFSpaK5ePFZxFwDoZ99ZEitB9aA3er8ROoXC0jViULW+pYUqbnfQZluT
wyPdvxyiC3BHr2Zem0sWCNB7HuLRJNovkhFATzAc+MY37sSmB+TtQD/xfPxQ/XVf
Atl49WeiiTQw2r+A
-----END CERTIFICATE-----