Certificate

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/66D2F438D4B7E19C3D74AB88A9B399F011B22519.cer
File:                     66D2F438D4B7E19C3D74AB88A9B399F011B22519.cer (raw, json)
Hash identifier:          ISAfVs2VeTU28OM4mpfYSgZq5g2cD5VxiifamVQs4+w=
Subject key identifier:   66:D2:F4:38:D4:B7:E1:9C:3D:74:AB:88:A9:B3:99:F0:11:B2:25:19
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Certificate issuer:       /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial:       04580DEECCCA7139A5FAF280B5FE488456423867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 25 Feb 2024 18:10:02 +0000
Certificate not after:    Sun 23 Feb 2025 18:15:02 +0000
Subordinate resources:    IP: 2a07:2487::/32

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 21:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:58:0d:ee:cc:ca:71:39:a5:fa:f2:80:b5:fe:48:84:56:42:38:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
        Validity
            Not Before: Feb 25 18:10:02 2024 GMT
            Not After : Feb 23 18:15:02 2025 GMT
        Subject: CN=66D2F438D4B7E19C3D74AB88A9B399F011B22519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:c0:98:38:10:9e:fc:f8:ef:74:0a:11:0d:
                    c5:28:24:d7:f8:c2:c9:fc:3f:44:24:f1:50:61:f5:
                    f9:16:8c:35:d8:fa:1e:5d:83:32:22:f3:32:da:11:
                    40:57:26:9b:fa:ab:5d:88:1d:2a:b3:02:e6:04:87:
                    43:90:9a:a2:3e:01:bb:57:49:44:ee:87:3e:e6:a9:
                    aa:03:a2:f6:b2:d1:6b:ea:c5:80:43:f1:59:c4:9d:
                    ff:29:19:1d:5b:ab:1f:45:28:f8:3c:60:9c:24:73:
                    57:d6:34:c2:c1:5c:ea:c9:04:9e:53:05:be:e3:7c:
                    b5:46:66:b5:4a:4f:9c:67:7b:ca:b6:42:fa:c8:0f:
                    78:c3:72:82:0d:82:6d:ba:ae:43:43:2f:54:ef:fd:
                    60:2e:71:e2:a4:00:89:cf:8d:7b:e2:87:cc:d8:e7:
                    8d:ee:20:62:ab:85:63:1f:6e:2d:c6:28:b2:6b:46:
                    88:0d:3e:b0:c0:de:7d:3b:7d:34:2a:0f:17:31:27:
                    24:f5:a5:82:fb:8a:1a:ce:a3:93:e2:d4:67:fe:53:
                    40:47:8a:df:c9:d6:95:4d:85:f8:8d:20:9b:df:d8:
                    b7:6c:6d:0c:61:f2:b9:e6:f0:24:f9:c2:2f:d2:85:
                    52:97:40:41:8f:38:e1:87:3f:2d:e9:74:07:f7:38:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:D2:F4:38:D4:B7:E1:9C:3D:74:AB:88:A9:B3:99:F0:11:B2:25:19
            X509v3 Authority Key Identifier:
                keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/1/66D2F438D4B7E19C3D74AB88A9B399F011B22519.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:12:16:95:91:ae:fd:12:73:9d:ee:9d:32:c7:af:24:ad:
         39:91:35:7e:1a:c3:0b:5b:c3:5f:a2:b8:0d:b2:fd:79:f2:56:
         6a:8d:81:d2:27:8d:86:b0:00:d4:82:db:55:a9:33:69:a1:ef:
         6e:1e:f4:54:79:68:0e:e2:52:ca:17:1e:a5:fc:80:b4:a9:e7:
         4b:72:4b:36:b9:46:47:b9:95:25:82:be:1d:c2:6c:91:ab:a0:
         48:95:00:01:0d:67:e2:c9:1b:3e:2e:97:72:ee:2b:b1:5b:3a:
         0c:d1:5d:79:27:2e:f5:21:fd:c9:24:42:46:62:a3:7c:17:93:
         a3:0d:de:93:1e:fe:03:9f:48:fc:a2:70:3c:ec:09:c5:c8:66:
         94:0a:95:74:a4:85:6a:79:e1:bf:84:1f:23:f2:3b:d0:44:68:
         e7:21:16:4d:91:86:98:58:82:bb:87:dc:c4:ca:6d:4c:3f:6a:
         d2:9f:ce:06:b7:99:c1:59:cc:df:24:19:2e:5d:9c:fe:5a:4d:
         c6:51:a0:a8:80:71:78:ce:39:27:2d:54:d3:f7:24:08:35:3c:
         73:89:3e:66:42:77:7f:65:5c:bf:3c:63:1a:e1:3a:90:34:d7:
         54:98:ef:5e:d0:19:00:17:25:ef:ca:7d:aa:7b:b3:95:41:e6:
         ce:e4:ad:bb
-----BEGIN CERTIFICATE-----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