Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer
File:                     tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer (raw, json)
Hash identifier:          IOZ6NkFCbelgSFBzAOfs4gek8dp0MfXMyJnmb/L4QNQ=
Subject key identifier:   B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC710C6AD026487573F4625FF03C30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.3.42.0/24

Validation:               Failed, certificate revoked on Tue 19 Dec 2023 12:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:71:0c:6a:d0:26:48:75:73:f4:62:5f:f0:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b66de49fecb37d78018b6501cc287795b8c45564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:7c:2f:25:f5:51:4e:03:94:1c:ab:7a:ad:
                    d6:a3:55:38:4f:ea:bc:b0:8f:e0:4e:b7:3b:5b:3c:
                    d8:96:c8:a2:7d:b7:a4:1a:1a:61:02:88:f8:35:ad:
                    5c:c1:00:ae:ec:12:b6:56:2e:0e:9e:2e:85:72:6b:
                    35:ab:19:7a:7c:51:87:29:33:b3:9d:0d:dc:88:b9:
                    8e:0d:1d:be:4f:20:6e:5b:c3:54:5d:8f:62:6a:c9:
                    db:31:ab:cf:9f:2d:a1:58:4a:dc:8e:bd:78:67:40:
                    0e:a8:e9:55:bf:c7:c8:67:1d:18:42:e4:d6:d6:1a:
                    17:f9:0f:ac:dd:fd:7b:f7:9f:9f:e7:2a:36:ed:9c:
                    89:7f:da:e6:ac:ee:d0:ed:81:b8:f3:4c:0e:24:97:
                    32:09:bb:e9:ea:29:83:bf:f0:95:6a:39:e3:89:77:
                    76:a5:fc:b6:46:0c:b5:46:69:2d:15:df:41:c3:4e:
                    49:e4:ea:62:1b:d8:da:67:4c:82:97:29:a4:96:1e:
                    ec:cf:59:ed:3e:66:cb:0a:ec:04:e4:cf:88:13:68:
                    5a:c5:f0:ff:79:45:ee:9f:fc:f6:56:49:6f:85:65:
                    81:2b:52:f7:11:9a:f6:a7:9e:77:ba:3e:54:e8:d2:
                    74:c9:82:34:35:68:6e:e8:94:33:7c:9e:96:90:ed:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:da:98:1c:96:93:7b:e8:6e:45:90:43:b5:12:6b:39:63:
         ba:da:a0:ad:40:56:b3:d2:28:6c:8d:4e:6c:30:ff:fb:9c:f4:
         d7:bf:2e:28:5c:15:ea:aa:a6:28:12:6e:4a:af:66:ca:ea:b0:
         d1:0c:6b:c9:42:c4:e8:32:01:77:96:94:a9:fd:10:9a:57:0e:
         45:c3:26:0e:89:3c:e8:71:59:d6:17:d4:af:55:0e:fd:26:e1:
         f9:d7:37:f7:66:38:f6:ec:5d:60:5d:6b:89:25:cc:fa:b1:b1:
         86:4d:a1:28:6a:e2:f3:22:df:c9:12:ae:e0:49:55:37:5a:ab:
         6a:aa:6f:a0:43:9c:7c:6d:8c:b8:14:e9:53:18:16:b4:b7:b8:
         dd:56:00:9c:86:2c:3a:85:46:9c:a2:b8:9a:02:0c:25:9c:31:
         7f:bd:7a:f5:bf:2a:98:a4:59:ed:dc:5f:70:32:d3:87:9b:54:
         c1:82:09:5d:e5:1a:9c:4e:58:75:dc:27:ae:62:13:43:91:03:
         38:64:f7:11:c0:e1:b5:be:f7:52:3f:d6:f1:54:11:96:9e:5e:
         38:d6:3b:a6:5c:16:3f:05:6c:e4:7c:7c:c5:c1:04:bd:5f:97:
         ae:e6:53:ad:ac:51:cb:ba:81:9a:fb:70:c9:c8:62:c9:d7:9c:
         d7:83:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----