Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rK3FVAD85bOUIHAIo6JxbLXYIWw.cer
File:                     rK3FVAD85bOUIHAIo6JxbLXYIWw.cer (raw, json)
Hash identifier:          3wJgghciK46WY+2Ye9qBpqAwZNyblmcIcptg55o/lJk=
Subject key identifier:   AC:AD:C5:54:00:FC:E5:B3:94:20:70:08:A3:A2:71:6C:B5:D8:21:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89A5BE24B086FC224F92F76E5FFBFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 202685

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 15:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:a5:be:24:b0:86:fc:22:4f:92:f7:6e:5f:fb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acadc55400fce5b394207008a3a2716cb5d8216c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:f9:cd:e6:7f:e8:d4:92:8e:75:16:05:c0:
                    2d:6c:9a:e3:2a:c2:bd:93:75:af:bf:db:c6:2c:11:
                    ee:d9:e2:6e:e7:1f:97:15:84:13:37:bc:09:41:41:
                    dc:e4:d7:da:be:63:cc:f6:ea:59:f7:f6:49:02:5b:
                    e2:41:a3:63:9a:1e:d1:97:d3:ae:ff:2b:f6:b7:7f:
                    e2:d9:ac:f3:54:ad:57:ea:ca:ed:46:ed:6e:50:43:
                    dc:20:c5:35:87:c2:82:d0:da:52:27:3d:1c:ff:bf:
                    03:9f:7c:04:e7:c2:4d:fe:77:26:03:27:89:bf:fe:
                    9b:48:fb:96:86:ff:ec:90:1d:ec:8b:5f:e6:a4:bc:
                    7b:56:f0:5c:99:ad:e0:a2:73:fe:51:e6:5e:7d:fb:
                    a8:7e:77:0d:51:89:c4:ba:02:79:f4:ee:fa:0f:37:
                    62:b8:4a:44:04:8e:8f:93:76:68:09:3b:79:25:ae:
                    35:cc:99:06:93:c3:0e:54:8f:ee:f0:4c:6e:2e:99:
                    d5:6a:b7:ac:f3:14:8c:0c:84:a7:f3:24:69:07:c4:
                    ae:c4:b6:2a:60:93:c1:3d:59:97:b0:98:d1:6a:3e:
                    25:66:56:0f:e9:ea:8d:1d:68:53:95:97:1c:28:31:
                    44:e3:c8:72:39:ab:82:26:62:fc:ae:95:d9:05:74:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:C5:54:00:FC:E5:B3:94:20:70:08:A3:A2:71:6C:B5:D8:21:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202685

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:0e:81:d5:c3:f4:4f:9b:70:45:16:fd:9b:31:38:cd:bf:
         2f:9e:10:dc:43:74:68:94:5e:42:9d:00:fa:06:00:e7:d4:38:
         b8:3a:0e:39:32:aa:a4:39:98:66:a0:24:75:f7:da:43:d2:1d:
         57:6c:d9:f8:eb:08:44:4d:a1:0b:b7:dd:85:ef:ab:09:06:4b:
         6a:6a:79:22:56:a8:42:6b:ce:a2:31:bb:bf:0b:8d:bf:52:b6:
         c8:07:7f:9d:28:80:05:3a:95:6e:94:76:d5:16:8e:2c:7f:9f:
         d5:8a:0b:80:d9:c4:e2:ce:bc:6e:0c:af:bd:a3:ec:e3:6b:19:
         2c:2a:4d:96:73:98:ed:b4:e0:da:00:b6:8c:6c:55:5b:95:77:
         74:54:23:87:23:39:15:5f:65:7d:3a:70:a1:32:d2:bc:5b:c1:
         e4:ce:6b:54:c9:50:f6:e3:78:22:a5:2c:05:34:8d:ab:d3:d9:
         73:b5:ef:36:a9:7f:56:47:0f:c9:aa:85:a2:88:57:4d:9d:9d:
         5b:77:ec:45:11:40:60:1a:9f:26:8d:fa:15:c0:c1:df:d1:00:
         f8:ee:c5:27:33:aa:2d:8b:a5:61:36:bc:6b:a1:04:90:92:60:
         e1:67:36:04:52:2b:df:fe:11:08:db:07:21:56:94:cf:ca:8e:
         c8:c1:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----