Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
File:                     D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer (raw, json)
Hash identifier:          oeOoUT4xmXndH3c37l3CXr7HaTxHZHoAuKJndVTM42s=
Subject key identifier:   D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Certificate issuer:       /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial:       03EBBAAF2CC18A5C3C2F45DBC590DCA1910F0ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 25 Nov 2023 08:58:06 +0000
Certificate not after:    Sat 23 Nov 2024 09:03:06 +0000
Subordinate resources:    IP: 2a11:29c0:9000::/36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:ba:af:2c:c1:8a:5c:3c:2f:45:db:c5:90:dc:a1:91:0f:0e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
        Validity
            Not Before: Nov 25 08:58:06 2023 GMT
            Not After : Nov 23 09:03:06 2024 GMT
        Subject: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:d4:85:61:8f:5a:ad:92:03:5f:70:b1:13:
                    5e:49:fa:db:27:4e:da:48:23:2c:ec:da:07:0d:de:
                    13:78:ff:a8:29:b9:9f:49:1e:de:ac:86:1d:26:8b:
                    2c:11:00:47:45:7e:e6:37:d0:cf:ef:bc:0d:37:d4:
                    9a:d3:6e:e9:14:86:9e:c4:74:18:9a:9d:ea:81:16:
                    c9:68:8b:b7:7f:25:40:8a:8f:b9:af:d6:3b:9a:ec:
                    d0:de:5d:fa:2c:29:37:65:8a:d9:d2:2f:04:a2:40:
                    df:af:f7:04:49:c9:df:1b:2f:36:2e:4a:35:e6:6f:
                    6d:51:61:f9:a3:0c:42:1a:7a:b2:79:b5:78:77:1d:
                    bd:b7:b5:e1:a3:3f:6c:3b:08:f7:2f:91:df:a1:10:
                    83:59:a1:60:bd:bf:7b:09:46:c1:0c:1f:6e:bb:79:
                    46:c3:75:b8:7d:55:c1:9c:28:d4:ed:55:b3:7c:a4:
                    6a:52:4e:26:c7:41:4c:19:d1:7b:ed:af:13:16:dd:
                    5c:d3:3b:11:30:11:03:6c:31:49:2a:5b:78:a7:e8:
                    d1:26:5f:7d:fc:93:8d:06:33:27:f0:87:b2:a9:e0:
                    78:2a:79:c1:67:bf:58:50:8c:34:68:86:73:ad:b6:
                    82:3f:66:f3:53:1c:0c:ef:85:fd:d7:ea:83:ec:5a:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
            X509v3 Authority Key Identifier:
                keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:fc:b7:64:35:e2:19:56:e0:da:48:2d:06:c8:44:83:d4:
         f4:db:7d:7c:3c:81:16:e0:b9:d4:5f:b5:e1:98:d2:f3:ca:44:
         5b:5b:9c:ec:ff:b0:8d:3f:f9:67:65:89:c0:6c:15:9a:8b:df:
         c9:bb:82:84:d1:6d:fb:ec:08:ea:15:22:7e:d0:32:cc:5c:a2:
         4e:c0:41:ba:55:5d:eb:a2:9d:32:2c:c5:b8:02:7a:8e:b0:a6:
         aa:3f:34:6f:e0:52:7c:1e:48:9d:e6:ce:f1:34:8d:05:dd:63:
         03:07:75:68:d6:4a:91:90:2c:35:d5:d8:a9:e4:db:99:51:b6:
         d7:bb:74:53:e2:a0:36:f7:31:3b:2a:86:21:5a:25:3f:3f:2c:
         6a:20:77:f5:b7:8c:c7:9f:c2:05:b5:83:a8:94:c0:94:85:61:
         77:53:19:ed:03:11:d9:78:53:7d:cb:a1:3f:a3:42:d1:70:4d:
         fa:cf:25:01:e7:27:c0:d5:f7:09:80:e3:fc:11:22:96:9b:c5:
         5d:95:6f:4b:06:fd:0f:a3:28:ee:79:fa:87:20:a3:64:ba:62:
         a8:42:c0:bd:3a:3d:c4:fe:cc:3a:46:3a:59:72:76:34:88:e3:
         19:de:76:3d:17:87:c1:b7:98:27:93:d8:26:72:fe:1a:e6:40:
         c7:68:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----