Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer
File:                     vFNeOPTHWl2wWP9WRsLtNB8-iaQ.cer (raw, json)
Hash identifier:          33ro8LdbsRgy05BGYph9/4wRzNONxqcnDugzD4zlRTw=
Subject key identifier:   BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89309B7B4788AAF1BCABB53D5A2169
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.52.14.0/24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 13:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:30:9b:7b:47:88:aa:f1:bc:ab:b5:3d:5a:21:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc535e38f4c75a5db058ff5646c2ed341f3e89a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:07:df:00:79:33:3c:5b:ef:6b:51:e2:c2:
                    cb:1a:41:38:ed:4d:f6:d1:9b:1e:de:a1:90:77:6e:
                    f3:d3:70:5f:29:67:da:2d:b3:7c:cb:9a:50:07:d8:
                    d6:6b:79:94:1e:f5:23:a1:b3:fd:21:27:82:a3:0a:
                    7b:c9:25:92:8f:9c:86:ef:7b:a9:25:7c:50:60:1b:
                    77:26:bb:3c:4e:ba:3e:e6:7b:05:c8:f3:cf:06:4e:
                    c8:4b:56:bd:e2:44:3b:ae:ed:72:9d:4d:9c:f4:9a:
                    35:2e:a2:66:3e:d8:1d:88:98:b9:26:2c:6b:74:d2:
                    9a:5c:e8:cf:38:de:2b:8c:1d:31:de:80:9d:a8:71:
                    89:a4:67:42:6b:97:b6:cb:a8:04:e2:f1:9e:26:8a:
                    10:19:be:cf:2a:78:f5:9e:41:cf:b1:10:c9:d7:87:
                    87:a2:aa:e1:e2:83:57:49:7b:33:de:b4:6a:52:1a:
                    a1:63:f9:0c:e1:4d:4c:31:8c:48:ef:44:f7:05:fd:
                    9a:55:26:5e:d1:1c:3d:13:17:63:09:f5:09:50:99:
                    d4:8e:fe:75:b3:c1:38:82:fd:67:8b:26:7d:8b:7d:
                    97:d9:30:61:47:f9:03:e1:ff:37:67:48:75:fb:75:
                    fe:2d:db:3f:32:b7:a4:dd:49:8b:23:c8:f2:68:1a:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:5E:38:F4:C7:5A:5D:B0:58:FF:56:46:C2:ED:34:1F:3E:89:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/dcd34b-c2c0-45a2-82df-b986b343bd4f/1/vFNeOPTHWl2wWP9WRsLtNB8-iaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:45:16:64:cc:29:46:a1:8f:71:2d:86:cf:c8:de:04:12:60:
         65:f3:dd:eb:a5:9b:22:11:dc:49:b2:16:b8:d2:4f:fc:98:51:
         8d:f0:c8:2f:64:d2:cc:ab:64:9d:20:2a:39:80:04:a9:38:c9:
         fa:46:7d:51:c6:35:d6:61:4c:ea:d8:8c:61:b1:b9:e9:0c:f8:
         5b:20:b3:40:98:14:a1:ab:8d:75:da:b4:f3:ae:5d:0f:bc:ad:
         61:da:06:13:70:c0:b2:88:b7:8d:01:f1:db:d4:a6:eb:71:e4:
         0e:4a:2f:fc:9c:f8:30:69:df:35:37:90:da:48:d3:0b:f3:de:
         94:cb:62:14:6b:2b:19:f8:82:39:5b:40:31:18:4a:2c:f9:f2:
         22:ad:49:7a:98:32:7d:15:b8:a7:26:44:bf:51:dd:73:b0:ce:
         8b:2d:1c:a7:b3:a9:89:90:3e:49:d7:da:a1:61:68:f5:1e:e7:
         a5:f4:8c:a7:ae:65:8f:bf:3b:ca:4d:8e:e4:a4:de:a8:20:32:
         3e:51:ff:af:28:62:41:15:e8:7c:aa:bb:f9:65:8f:23:81:eb:
         58:93:35:db:6b:5c:1c:c4:c1:97:dc:3b:9c:6e:f2:49:94:6b:
         f3:56:44:ef:45:b1:a5:0f:e2:fc:d2:c0:f4:d4:10:8f:03:39:
         7b:a3:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----