Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
File:                     zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer (raw, json)
Hash identifier:          29oPLSVzD62Fk6sPx9sp9hpfygsgssq/C1+OYOvGVuc=
Subject key identifier:   CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DB64F3EEA67636DED735AE861B16FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:07 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 45.131.116.0/22

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 14:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:64:f3:ee:a6:76:36:de:d7:35:ae:86:1b:16:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:2b:35:85:08:81:c0:1d:65:c3:39:95:94:
                    92:6c:bb:27:1c:82:5b:3d:1f:c2:53:47:bc:b1:72:
                    85:53:1f:d8:c1:94:7b:3e:46:25:a0:1e:a8:a1:09:
                    34:bb:35:80:4a:fd:da:24:0f:8f:56:ab:c3:ec:1b:
                    71:96:4c:e0:6c:a9:dd:77:83:b2:a0:65:ff:64:f9:
                    0a:12:e5:65:36:d0:1e:62:72:2c:6c:ac:b0:4c:e1:
                    e3:c1:5e:77:c2:54:f3:25:aa:eb:38:95:23:f9:c7:
                    c9:c6:d4:f3:57:81:57:97:af:50:83:aa:e7:9a:4f:
                    61:b7:50:e9:e8:4f:bd:e6:5a:e4:4a:af:7b:08:cc:
                    67:19:a2:1a:6c:a6:81:39:25:cd:95:82:43:b6:2f:
                    a8:80:3d:94:39:17:5a:1d:21:e3:ae:ec:9b:40:4f:
                    ac:48:af:98:61:c0:70:61:54:28:b5:15:7d:f0:4d:
                    dd:c9:e9:60:80:3e:7b:4a:3e:3a:77:c5:9d:9a:db:
                    e0:a7:b0:6a:ac:87:55:e4:e0:59:63:60:ca:46:a8:
                    cd:81:72:7e:d3:4b:49:85:4d:b0:2f:65:b7:a7:14:
                    fa:8b:9f:bd:11:63:1d:af:c2:24:f0:88:a1:fd:30:
                    82:c0:be:24:9c:04:ec:d8:38:80:c2:d3:c7:52:d9:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:97:88:87:21:21:da:8e:c7:ce:ad:d7:9e:21:d5:bf:c5:
         11:94:c5:cf:c9:23:b2:38:b3:80:86:47:0a:5a:63:18:f1:d6:
         76:f9:c0:3d:3d:5e:f6:4d:62:79:4d:e5:29:47:24:31:ce:0f:
         9a:5f:3b:b8:a0:ae:64:b7:6d:64:4f:91:88:35:7b:31:08:c2:
         73:86:18:e5:49:ae:4f:b7:71:3d:ab:0b:a1:32:56:2f:34:b5:
         ac:7d:3e:82:f9:17:1a:20:fd:8e:20:8d:a7:a3:60:0b:76:b8:
         a8:99:af:d4:a6:33:f2:1b:f2:ae:1b:cd:03:6d:0d:69:62:b6:
         9b:f9:28:87:ca:f8:4f:ba:17:51:fb:f5:e3:15:4c:56:cc:76:
         d8:de:dd:f9:d2:4b:5b:38:09:10:a8:cc:be:fe:5a:78:78:04:
         a7:e7:81:31:6b:a7:64:4e:ad:da:b9:f3:8d:af:92:8e:08:9f:
         17:66:25:b2:81:e4:9c:a3:ce:51:4a:14:a8:5d:41:6c:28:bf:
         3a:b5:8a:8a:b7:b0:1b:72:0c:89:35:4c:20:bf:a1:d4:92:8b:
         c7:10:49:22:e9:f6:c1:35:7c:b0:c4:f2:f4:47:45:f2:79:00:
         af:3b:26:bb:91:69:2e:89:b3:86:fc:56:b1:3e:12:62:d8:69:
         5b:4a:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----