Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ybtXw0kkN_UIS2rxv2OUkwwXrl8.cer
File:                     ybtXw0kkN_UIS2rxv2OUkwwXrl8.cer (raw, json)
Hash identifier:          x2c1atAbsC3ZBdBVreSRzkaH0pgNUlujNe0X897o1/g=
Subject key identifier:   C9:BB:57:C3:49:24:37:F5:08:4B:6A:F1:BF:63:94:93:0C:17:AE:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FA96B21857151BF93A5C82AE0F3983
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/e52ead-91b1-42e1-b40e-729796d9d6a8/1/ybtXw0kkN_UIS2rxv2OUkwwXrl8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/e52ead-91b1-42e1-b40e-729796d9d6a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:35:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209925

Validation:               Failed, certificate revoked on Thu 15 Jun 2023 08:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:96:b2:18:57:15:1b:f9:3a:5c:82:ae:0f:39:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:35:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9bb57c3492437f5084b6af1bf6394930c17ae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:16:ea:78:e0:bc:5f:6d:e5:d7:fa:da:73:
                    e5:04:d4:ee:91:5f:b4:7b:ad:31:e1:c3:63:fc:d2:
                    17:9e:85:dc:6e:a3:26:af:4e:61:3a:b4:a0:37:cd:
                    c6:8d:bc:e0:7f:26:ae:b3:7f:de:d5:4b:63:18:72:
                    f5:55:3e:66:75:f1:96:06:08:09:98:d2:c3:a1:dc:
                    3d:97:2a:bd:34:32:3e:5b:95:f5:d8:cd:64:1a:b4:
                    25:e3:5d:c0:8c:15:02:a2:e9:7a:d4:b8:f8:79:49:
                    b6:5a:84:d7:25:fe:55:29:e3:d5:66:e7:18:92:de:
                    b4:f0:2e:20:f7:6c:dc:d6:c6:20:a8:74:a3:10:c4:
                    6e:07:30:cc:83:c3:fe:af:cb:97:33:ef:7d:29:9c:
                    f4:84:7c:12:37:77:f0:0c:d7:ad:dc:90:fd:3d:7e:
                    e9:15:8b:3f:8c:50:54:26:9d:9f:2d:13:10:18:d9:
                    34:3c:cd:15:09:b4:c0:de:24:95:46:d0:11:71:d0:
                    b1:1c:38:9c:20:b7:4c:58:f5:8f:70:50:25:98:5f:
                    b9:41:d5:ba:47:cb:cb:17:05:9b:57:74:64:47:0d:
                    6e:80:73:25:78:42:bb:20:8c:63:b7:79:f3:22:b8:
                    0a:ca:a2:0b:f0:39:42:fd:4f:b5:ca:09:88:3d:3f:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:57:C3:49:24:37:F5:08:4B:6A:F1:BF:63:94:93:0C:17:AE:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e52ead-91b1-42e1-b40e-729796d9d6a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e52ead-91b1-42e1-b40e-729796d9d6a8/1/ybtXw0kkN_UIS2rxv2OUkwwXrl8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209925

    Signature Algorithm: sha256WithRSAEncryption
         65:22:4e:72:cf:83:63:ec:6a:e8:04:de:55:57:d7:14:0c:87:
         61:56:13:88:c3:38:51:95:25:6a:b2:a7:89:68:35:d1:84:62:
         44:69:bb:9d:be:95:59:02:33:17:ee:f9:b6:bc:14:bd:09:82:
         ec:c1:56:f0:8b:2e:f5:1a:30:d4:e6:5a:f2:73:5b:5d:76:1b:
         a7:c8:a9:cc:2f:77:a5:4e:b9:3f:c8:ed:50:c3:0a:4f:2b:8e:
         18:de:b0:60:94:96:53:df:8c:3b:3d:62:9c:e0:e6:17:02:81:
         c0:4d:00:06:1e:54:9e:1d:37:42:03:db:46:34:02:18:dd:06:
         9e:11:c2:a7:e7:d5:0e:f9:e9:e4:dc:e3:6f:64:f7:ca:ee:90:
         80:1e:65:c0:0d:c5:a2:0e:8a:66:78:9d:ac:01:13:7c:fa:d0:
         3c:9d:34:98:5f:a1:36:0c:c4:20:74:a8:4d:98:b0:79:68:0c:
         e8:97:2c:11:6d:41:01:3a:4c:13:57:3d:22:62:6f:60:ae:ef:
         f5:ac:b7:13:a0:7d:cf:c1:6b:22:bc:78:49:11:f4:49:10:bd:
         cd:9f:1d:aa:24:3f:bc:c3:5a:8e:45:23:d0:7e:c3:b0:a6:07:
         0a:18:fe:72:04:ff:d3:d1:47:26:df:b8:cf:f6:66:dc:ff:4b:
         d0:d5:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----