Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3fYJ8mFjiGovr8b2b28bum9dUg.cer
File:                     z3fYJ8mFjiGovr8b2b28bum9dUg.cer (raw, json)
Hash identifier:          mmBC41twahftEnxY/S7BtwwqLEWS9XzjQO9Pw3O6Dy4=
Subject key identifier:   CF:77:D8:27:C9:85:8E:21:A8:BE:BF:1B:D9:BD:BC:6E:E9:BD:75:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701D76F6D63C34B86947F7978E4D37B9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/0a5561-3a78-4188-a6db-2b05f2978958/1/z3fYJ8mFjiGovr8b2b28bum9dUg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/0a5561-3a78-4188-a6db-2b05f2978958/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207345

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 13:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:76:f6:d6:3c:34:b8:69:47:f7:97:8e:4d:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf77d827c9858e21a8bebf1bd9bdbc6ee9bd7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:6d:e4:20:68:bc:bb:08:bf:af:3f:53:a8:
                    90:2e:b4:c1:37:f8:d9:c4:37:3d:65:18:ad:25:f5:
                    06:f1:ae:0b:77:47:ec:06:21:f2:f8:97:42:b0:32:
                    12:5a:8d:a2:3b:a3:75:cc:ba:38:f1:69:0c:1c:18:
                    81:26:d6:8b:5e:63:b8:34:5d:19:75:0e:aa:df:c7:
                    6b:54:ab:c3:0a:75:59:30:b7:34:d6:61:6d:9b:3c:
                    1a:70:54:43:5d:ee:1f:04:95:15:64:d0:ae:d2:b7:
                    56:78:43:1b:b4:9e:9f:2d:4f:e2:02:e5:9b:a6:e8:
                    4e:9f:61:e2:d0:04:cd:8b:61:bc:31:53:01:3a:f8:
                    b2:17:f9:24:87:bf:ea:96:93:d3:27:a4:ea:13:f9:
                    ea:f9:0a:c0:f5:4c:48:17:ee:bf:5c:f7:c7:cd:ac:
                    34:5c:f9:bd:4e:cd:a4:32:10:3b:94:38:71:d8:6d:
                    30:d9:3d:b4:b8:a3:23:65:cb:d4:79:8c:47:66:e0:
                    e3:57:a2:45:b5:88:40:0c:94:6c:2f:a6:32:a2:55:
                    13:81:c8:a7:7d:91:21:b0:f2:ff:b3:53:a9:61:24:
                    5b:a4:9f:09:61:30:9b:d9:63:b3:95:74:69:9e:37:
                    25:3f:d8:a1:ef:fb:b4:28:4f:8b:32:87:1a:60:de:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:77:D8:27:C9:85:8E:21:A8:BE:BF:1B:D9:BD:BC:6E:E9:BD:75:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a5561-3a78-4188-a6db-2b05f2978958/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a5561-3a78-4188-a6db-2b05f2978958/1/z3fYJ8mFjiGovr8b2b28bum9dUg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207345

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:b7:eb:c8:34:c6:9b:3d:1b:e4:d7:27:80:92:9b:27:94:
         6b:0d:57:90:98:64:92:e6:b3:d0:34:22:bb:7d:0b:f9:91:fd:
         78:57:22:0b:60:cd:98:b9:7b:f7:ad:2d:9a:82:5f:c2:bd:c1:
         58:1a:01:e2:19:c3:7c:15:84:aa:24:b3:0b:7b:56:df:91:a8:
         5e:ca:f9:97:6a:66:ea:04:14:4b:85:88:13:b8:d5:2b:5b:0f:
         7b:91:53:b5:db:f3:11:0b:ff:3c:ee:74:ce:55:6a:a5:99:ca:
         1a:46:65:6f:a0:80:36:1f:f1:82:c4:73:76:89:28:3a:a7:14:
         91:41:b4:a7:a5:9e:7c:e2:5b:ae:70:64:6f:e0:96:c1:97:59:
         19:7d:fe:69:d8:71:ba:b2:fd:7f:e3:57:0e:db:b5:ce:34:57:
         f9:1d:26:b6:38:29:8e:4c:1d:15:38:49:f2:37:2b:50:06:28:
         bc:b0:f9:8c:45:97:40:df:de:71:60:df:5f:2e:4d:b1:7d:4c:
         d4:2a:08:a6:3b:34:18:69:26:f9:9e:06:1b:9f:33:46:4a:a9:
         b2:80:36:cc:a1:85:5b:22:8b:11:41:23:d4:d4:5d:a0:60:f3:
         7f:bb:6b:b6:e9:98:b1:20:a9:2b:96:67:c9:d8:14:97:e4:59:
         1a:13:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----