Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.cer
File:                     rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.cer (raw, json)
Hash identifier:          chowinhhF8q7zOdbpot6ZzhfGtCPdjdS1HWG5Z+a8pA=
Subject key identifier:   AC:23:77:7E:2A:B0:F7:72:69:7B:92:63:E1:55:5B:5D:FC:DB:75:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F2210C3DEACE89726DCAE58992A74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209417

Validation:               Failed, certificate revoked on Tue 04 Jul 2023 19:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:22:10:c3:de:ac:e8:97:26:dc:ae:58:99:2a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac23777e2ab0f772697b9263e1555b5dfcdb759d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:5c:84:18:a1:1a:f9:f4:e6:5c:91:bf:65:
                    06:ef:04:d3:ff:26:0e:d9:6a:b6:47:ca:38:53:79:
                    9d:73:95:cf:a2:4a:a0:d7:45:a2:36:31:89:b3:d2:
                    83:e2:97:0c:20:86:30:3a:71:55:18:4d:b9:d7:0a:
                    ab:b0:6c:10:34:c4:c8:78:48:a7:26:af:d5:08:3c:
                    6e:37:da:ca:0e:22:bf:11:09:86:9c:a9:4e:e2:4a:
                    f9:0f:a1:8b:6d:1e:bb:21:b4:3d:8c:56:39:98:31:
                    6c:27:c9:a8:dc:d4:7d:4d:06:c7:02:93:7a:32:43:
                    af:fc:71:cf:44:03:16:db:b2:2f:62:94:f6:a4:c1:
                    5c:b4:67:7a:64:a8:f5:e6:b9:cd:34:76:bb:44:0f:
                    ee:fd:0a:a8:52:44:12:7f:a8:0b:c5:7b:3a:28:1c:
                    11:d9:83:e5:f0:1e:50:b9:f1:22:36:08:d2:4e:f5:
                    bb:66:ff:03:e8:29:4b:ec:73:45:10:aa:c1:6f:0c:
                    f9:15:d2:fe:fc:5f:8c:66:a6:45:d5:f7:5e:34:85:
                    a0:dd:02:84:3b:72:a8:21:d3:76:2a:e6:57:86:0b:
                    be:c4:e2:07:e0:0e:28:69:7b:f6:f4:d4:ff:cf:f3:
                    8f:1c:84:58:5c:c0:95:b6:1b:d4:d3:9f:c7:95:a8:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:77:7E:2A:B0:F7:72:69:7B:92:63:E1:55:5B:5D:FC:DB:75:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209417

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:ab:76:92:94:b1:75:67:14:ce:aa:84:c8:4d:ea:97:e5:
         05:6c:b6:e4:5c:37:58:f6:13:04:71:9d:79:f8:de:ff:e3:a7:
         37:05:24:02:0f:fd:48:a2:63:64:d6:26:0c:ca:73:c2:70:75:
         4b:d2:90:3f:cc:05:de:d1:ff:58:43:8e:e5:57:72:ae:84:21:
         f6:64:19:e7:21:74:49:16:34:0a:59:50:9d:af:ae:ec:93:b9:
         d1:e9:95:6c:f0:5e:15:5e:fb:d4:30:d8:dd:b1:85:65:97:dc:
         25:1a:50:63:a5:86:fb:bb:ac:3c:9e:46:31:a3:61:b0:f4:a6:
         19:da:5f:96:fa:24:c7:6c:26:5f:cc:c3:80:d7:84:ab:a7:aa:
         54:19:75:a7:81:93:32:71:84:6b:5f:3d:e6:f9:0f:94:7c:ff:
         73:37:80:57:8c:97:d5:8d:aa:2d:04:d8:fe:38:5c:73:b3:e5:
         83:f0:98:31:89:07:15:0c:f3:43:4c:6d:e2:3d:cb:ec:a7:62:
         50:3a:63:81:93:f3:b9:b5:82:6b:b5:9e:65:7c:68:7d:e0:b3:
         64:76:78:4b:5d:4c:4a:3d:cb:2f:1d:a5:8c:86:48:ef:9c:07:
         20:d7:40:b2:47:0b:0d:2f:f4:79:63:47:ed:de:8a:b3:84:09:
         a0:43:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----