Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.cer
File:                     3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.cer (raw, json)
Hash identifier:          xIb83+7N8Xbpc5XD87CkK6n9go94bm6Szo1RfrIetWw=
Subject key identifier:   3A:87:92:2E:3D:FC:7A:58:61:DC:7C:AF:8C:B7:63:B2:33:E6:EE:7B
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Certificate issuer:       /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial:       284D1C8892ABEB33253A28219F40B274823948F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 25 Nov 2023 08:38:30 +0000
Certificate not after:    Sat 23 Nov 2024 08:43:30 +0000
Subordinate resources:    IP: 2a11:29c0:9000::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4d:1c:88:92:ab:eb:33:25:3a:28:21:9f:40:b2:74:82:39:48:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
        Validity
            Not Before: Nov 25 08:38:30 2023 GMT
            Not After : Nov 23 08:43:30 2024 GMT
        Subject: CN=3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:4f:1e:b3:7f:be:da:76:73:58:44:11:95:
                    ac:04:bd:27:46:4e:66:52:9c:8f:52:ac:98:78:b2:
                    f4:46:02:62:a4:da:cd:f3:59:04:7d:c3:2d:25:e9:
                    cd:64:d2:5c:7b:f3:d1:84:2f:ee:eb:a7:5d:71:28:
                    c8:1a:18:33:55:ba:17:c2:40:38:15:81:8a:bc:c2:
                    06:15:fd:20:d6:ea:cc:ca:a9:a9:94:c8:a8:d0:15:
                    d8:65:1a:d0:5d:92:36:82:4c:7c:2c:43:ec:e7:c2:
                    01:ef:10:94:17:d3:ea:96:c0:43:23:a6:b6:af:b9:
                    85:2a:22:6b:6f:d0:16:d1:2d:1d:36:95:3c:36:07:
                    44:ab:52:82:fe:29:78:be:11:4c:34:2f:9f:68:c2:
                    5b:b9:4f:68:08:41:f4:66:eb:96:75:aa:87:67:3f:
                    61:89:7b:f2:98:78:c4:dc:27:1b:b4:69:82:28:e5:
                    11:bd:41:b4:ff:ab:b9:0e:bb:2a:b1:d4:1a:b8:f9:
                    0b:f9:2d:66:8b:d7:ec:36:4c:1b:88:c4:97:cb:69:
                    6d:fe:32:4d:7c:1e:5f:23:c0:3d:04:2d:bc:bc:10:
                    6e:53:a7:de:69:33:f3:88:27:62:b6:66:99:f1:7a:
                    d1:45:18:2f:c4:37:12:8d:9a:4a:78:45:7d:0b:66:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:87:92:2E:3D:FC:7A:58:61:DC:7C:AF:8C:B7:63:B2:33:E6:EE:7B
            X509v3 Authority Key Identifier:
                keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/2/3A87922E3DFC7A5861DC7CAF8CB763B233E6EE7B.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:9f:13:95:98:74:c8:8f:45:11:da:ff:17:12:67:89:a2:
         8b:b9:01:ce:62:d5:10:ba:23:da:d4:e8:1b:27:3e:5a:60:49:
         9e:04:66:7f:36:8f:70:53:eb:a1:e7:ff:dd:5c:67:c6:06:68:
         b3:e6:4c:0f:15:78:6a:0b:8d:08:47:f8:c4:8c:05:69:43:f7:
         b5:1c:a5:68:4b:23:32:0b:2a:af:26:45:3d:5e:51:19:55:b9:
         94:4e:e1:32:fd:8e:67:23:d7:80:c3:f2:1f:1a:2d:90:54:43:
         d1:d6:d3:da:35:e3:45:e6:85:cc:16:8a:14:bd:02:d4:87:c7:
         7e:3b:0f:08:a5:3d:46:c9:97:ee:7e:c5:dc:d6:41:33:e7:e2:
         10:71:75:1a:f2:eb:ea:9a:93:89:1d:ff:0c:dd:3f:ea:41:8f:
         71:e7:ab:9d:bd:48:85:18:dd:97:82:b0:e4:a2:de:a8:4b:2b:
         df:ab:e2:1e:2e:bf:54:c2:55:fc:44:c4:80:88:59:10:a6:b0:
         80:95:a7:47:16:7c:10:7b:d3:88:5f:1b:bd:ca:13:f7:66:f5:
         13:c3:4e:c7:70:74:d3:eb:f8:7d:b3:6b:f5:68:6f:a3:62:17:
         41:d3:2e:0c:62:bc:94:e2:ca:9c:45:76:0d:68:14:e5:69:a6:
         45:e0:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----