Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/seK12tbsNKBDI31IVHfsK_NKE4g.cer
File:                     seK12tbsNKBDI31IVHfsK_NKE4g.cer (raw, json)
Hash identifier:          xNzuSsKH0QyjkFpBycI2PtfyDJdOVncIBVDaI89XzGU=
Subject key identifier:   B1:E2:B5:DA:D6:EC:34:A0:43:23:7D:48:54:77:EC:2B:F3:4A:13:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0186CEBD7E4BB3CEA47A9AED982E79D06883
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 11 Mar 2023 03:36:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199518

Validation:               Failed, certificate revoked on Mon 13 Mar 2023 06:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ce:bd:7e:4b:b3:ce:a4:7a:9a:ed:98:2e:79:d0:68:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 03:36:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1e2b5dad6ec34a043237d485477ec2bf34a1388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:39:92:dd:3f:00:b3:25:f7:4b:b5:e5:6e:
                    5e:fd:ec:b5:2b:6b:1b:8d:23:86:3e:57:6a:19:18:
                    7f:7f:28:79:fc:08:86:17:6e:b2:dd:36:67:6f:47:
                    34:69:46:75:b6:e1:45:98:03:09:6e:11:72:70:c0:
                    d9:66:8c:25:f0:d8:c2:09:29:9b:d7:4c:32:01:d9:
                    76:15:2e:0e:9c:21:2e:4e:21:59:65:da:34:3e:cc:
                    2b:a7:76:f8:57:bb:0d:98:be:58:b3:de:f3:3f:b2:
                    d7:36:94:f2:b9:14:78:dc:54:64:af:e9:64:76:9c:
                    ef:ff:49:40:25:b9:fb:08:4a:54:31:9a:72:d6:39:
                    df:0b:76:b8:cb:e8:29:8a:c6:e3:ae:79:64:f4:0b:
                    50:c0:f7:3e:33:9a:7f:ee:43:ba:41:b1:27:57:63:
                    ed:e3:ea:87:fd:06:68:dc:21:93:27:45:dc:40:76:
                    d7:03:3a:19:b4:8d:a4:00:20:e8:bd:e4:40:f5:ba:
                    3c:6d:07:c2:68:d2:b5:42:01:15:00:24:78:4b:41:
                    d0:65:66:27:0a:bb:cd:d8:d2:46:17:93:0a:eb:ad:
                    2d:34:75:6c:c2:ce:9a:70:7e:90:c0:68:5f:dd:a6:
                    a6:98:fe:a1:eb:50:7a:32:cb:f1:c6:47:f0:76:22:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:B5:DA:D6:EC:34:A0:43:23:7D:48:54:77:EC:2B:F3:4A:13:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1fa7c2-fc52-4ab7-aa55-da9c79cbedf7/1/seK12tbsNKBDI31IVHfsK_NKE4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199518

    Signature Algorithm: sha256WithRSAEncryption
         26:83:9f:b6:f0:5e:fd:a9:ca:84:db:39:dd:99:6e:5c:4b:e3:
         7b:fb:5b:32:27:77:23:5a:35:f3:38:f5:a2:3a:d9:e3:d3:cd:
         a3:6d:cc:2d:eb:4f:9e:be:a9:f7:21:bc:38:16:aa:8b:54:c4:
         61:b7:bc:b7:f8:5b:25:54:a1:56:96:61:4b:ae:3d:6a:fe:06:
         07:b4:62:d5:35:87:c9:d2:d4:94:4b:b2:46:8c:52:ef:75:b4:
         fa:95:e3:6b:48:fe:e8:a4:b9:9b:8f:17:1b:d4:f9:c3:b3:34:
         15:55:72:35:34:fa:c8:8c:8c:a7:c0:af:97:d3:cd:ac:f3:fe:
         58:5d:51:ed:76:40:b3:4a:a3:cc:bf:91:a6:69:22:5e:76:8a:
         2f:2d:51:f5:ac:d6:18:96:d2:8c:9a:99:c0:73:39:db:e2:a3:
         99:91:24:05:5d:bb:d2:bf:01:c6:eb:19:3e:2b:5c:a3:04:e0:
         6b:f5:ce:65:53:15:9b:38:f3:4d:91:14:87:d2:9a:a7:b1:c3:
         eb:b2:58:f8:19:4c:eb:83:0d:db:5e:e8:de:36:56:1e:28:78:
         6d:45:f3:f4:0f:14:63:fe:20:08:9d:de:19:95:0e:a6:fa:2d:
         69:25:18:04:9b:b8:fa:7d:63:22:41:5a:60:06:80:65:b2:78:
         1b:42:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----