Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sYzpP1J9erJrGBxHvv3R31cn91A.cer
File:                     sYzpP1J9erJrGBxHvv3R31cn91A.cer (raw, json)
Hash identifier:          0oOMnLzgrXYPFcL4UWrvz2ua7HzeBuspVau05Dgljqs=
Subject key identifier:   B1:8C:E9:3F:52:7D:7A:B2:6B:18:1C:47:BE:FD:D1:DF:57:27:F7:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018845726B0D21BDA99DE0D9C2DC3DCE8F0B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/Pong/0/B18CE93F527D7AB26B181C47BEFDD1DF5727F750.mft
caRepository:             rsync://rpki.co/repo/Pong/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:51:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200160

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:72:6b:0d:21:bd:a9:9d:e0:d9:c2:dc:3d:ce:8f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:51:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b18ce93f527d7ab26b181c47befdd1df5727f750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:4a:f9:d2:40:cc:b2:73:54:0a:27:a3:d0:
                    4b:ba:da:9d:0f:c9:46:83:1f:18:c8:1c:f2:40:df:
                    f6:5f:34:22:9d:d6:28:37:21:28:03:e6:f3:ee:f5:
                    90:03:13:17:ea:66:8d:2b:48:f8:7a:f3:6e:e0:05:
                    5d:6c:69:4d:c7:d6:c8:59:a6:cf:63:f8:bb:05:74:
                    71:9c:e6:6e:e8:20:eb:d6:00:bb:ce:3d:d5:97:bf:
                    0c:7e:33:ff:9d:67:01:1b:32:d8:cc:d6:59:90:76:
                    20:87:95:95:80:5e:8a:95:de:9e:0c:26:c3:ad:15:
                    de:d4:f8:fe:47:de:c9:70:1c:cf:fc:04:d7:ec:a1:
                    0d:aa:83:94:db:ca:00:04:74:7a:f4:4b:45:de:d8:
                    a9:7d:03:be:37:9f:40:78:92:37:42:83:6f:5e:65:
                    a8:1d:38:8d:a0:28:22:7b:b9:29:37:2c:08:8a:82:
                    e3:08:53:7f:b8:f3:36:09:e8:f3:82:5e:23:b2:b3:
                    ef:fd:90:f9:b8:2e:50:73:2a:73:58:48:94:c1:a9:
                    36:18:61:71:2f:2e:a4:c7:0b:37:33:e1:26:de:77:
                    5a:66:5b:7d:91:b0:db:fe:b2:ef:97:00:79:49:c9:
                    de:0c:96:31:a3:a6:2d:5b:c2:d4:63:18:e2:82:58:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:E9:3F:52:7D:7A:B2:6B:18:1C:47:BE:FD:D1:DF:57:27:F7:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Pong/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/Pong/0/B18CE93F527D7AB26B181C47BEFDD1DF5727F750.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200160

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:e1:61:7b:cd:da:13:8f:ac:f3:b6:a6:cb:39:da:7f:e9:
         f1:92:f0:01:95:a6:01:5d:72:ad:f8:7d:b4:4c:97:1c:a1:31:
         ff:42:fa:1a:85:9a:5e:cc:ae:ca:bc:e7:c9:ce:6c:cf:13:fa:
         38:21:a5:74:8e:1d:88:11:47:fa:db:6b:f4:a6:65:0e:03:43:
         65:9c:eb:76:a5:e6:bb:cc:06:8e:92:8c:fa:0b:6c:de:0f:1e:
         c2:a3:23:e8:ed:e3:c0:2e:4f:c4:57:be:90:53:0d:e3:82:31:
         88:97:3f:2d:98:43:70:6e:59:30:3d:57:df:90:3c:95:9f:54:
         2e:df:5d:bb:7a:92:6c:8c:c7:b6:47:5f:15:2b:8a:87:5e:60:
         ed:f6:66:ab:1a:33:68:f4:6d:75:e5:d9:15:0b:79:38:4e:85:
         d3:7d:1d:3a:8d:45:73:1e:42:54:82:5d:72:50:3b:86:9a:90:
         ad:57:7e:2c:af:91:3e:bc:63:ab:f7:80:43:ce:31:5f:fd:5c:
         a4:bf:7a:35:4b:27:ef:b6:c4:5d:27:9b:51:36:49:dd:4d:0f:
         e9:31:81:ae:42:1c:a8:d8:14:d1:a7:94:a3:ce:1d:4b:ce:45:
         d9:0e:64:17:93:11:67:12:78:cd:19:03:fd:ca:10:1c:f6:00:
         b0:57:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----