Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AMNfDYQqetu1bQXAM9xHd91p2CI.cer
File:                     AMNfDYQqetu1bQXAM9xHd91p2CI.cer (raw, json)
Hash identifier:          JgytAooi7OmZw5GrEMiUerEwDeUkzFRRCmLNRptIRFI=
Subject key identifier:   00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD130C47B0F3D0697301ED1648D1BB2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:29 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.134.0/24
                          IP: 2a11:55c0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:30:c4:7b:0f:3d:06:97:30:1e:d1:64:8d:1b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00c35f0d842a7adbb56d05c033dc4777dd69d822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:27:15:46:7f:5e:28:dd:ea:a5:52:a6:6e:
                    82:6d:f1:e8:51:75:dc:47:eb:56:72:78:5d:d8:aa:
                    a9:05:18:2f:88:cc:46:46:c1:90:7f:4d:76:4d:09:
                    40:ca:f2:ac:97:fa:a1:24:38:65:fd:d9:3f:cf:83:
                    54:cf:b1:06:68:26:48:a3:29:c7:09:b8:b8:1f:16:
                    fd:ca:45:52:79:1a:58:14:ab:1c:50:ca:80:2c:6a:
                    ea:ea:5a:82:14:34:30:68:cc:03:3a:51:53:c0:3b:
                    ac:b9:e5:71:b8:61:0c:9c:5e:f1:d9:70:ea:3b:5d:
                    39:34:05:93:19:b3:f8:9c:d4:b6:08:33:bc:43:17:
                    0f:1a:21:0c:5e:e1:fd:29:54:75:26:d6:3e:1e:54:
                    29:ce:ea:e2:64:42:ef:19:4a:bf:73:ba:97:d8:a1:
                    e9:22:2b:37:3d:2a:b8:1e:ad:cf:7e:f0:e6:97:0b:
                    d3:7e:26:8a:03:28:47:6e:92:6e:15:3d:3c:91:a8:
                    00:ee:be:a8:7e:b4:26:d4:62:30:24:80:08:b1:35:
                    10:74:50:fd:90:6c:25:c1:2c:ab:98:7b:f6:d8:78:
                    3e:cd:98:dd:dd:45:69:18:2d:b9:3d:c5:f1:7c:73:
                    98:2c:84:ad:75:7e:90:e4:68:c0:17:09:49:d2:65:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.134.0/24
                IPv6:
                  2a11:55c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:ee:64:b7:d5:56:c1:47:4a:a0:42:fa:ac:3e:be:22:b9:
         1f:5f:d9:74:2c:47:b5:0d:64:d4:9e:0a:d4:d5:58:c2:d0:6c:
         1e:2d:1d:c8:0e:9e:ef:f8:31:2e:72:94:4d:da:71:33:15:44:
         7e:83:d6:f7:ef:93:71:f4:16:8e:17:dc:95:a4:bf:ca:0a:5e:
         0d:6e:28:92:9d:f4:01:20:39:26:fc:94:7d:6e:85:f9:f6:a1:
         88:23:d9:1c:78:ac:77:25:c6:57:e7:9e:16:b5:11:64:d2:b7:
         2d:3d:d8:54:c2:cc:49:dc:22:ab:f2:4d:33:4c:00:94:28:31:
         a2:30:be:97:e7:aa:20:5a:88:b1:10:7a:52:39:2b:d5:26:04:
         ba:ed:80:cc:ab:54:42:79:f8:b6:4d:20:8f:2e:62:c5:b5:ee:
         3b:9b:ee:92:37:cf:86:2a:80:22:c5:23:c7:55:5c:77:92:72:
         1b:49:0f:77:d6:e2:30:ed:c6:52:6c:da:e6:68:97:21:81:74:
         7e:5f:9b:64:9c:1c:4c:74:f5:45:0a:57:b1:11:77:52:04:b1:
         a2:4d:a6:46:d7:ed:b6:76:81:fa:41:9d:a6:42:8f:ff:10:a3:
         f5:40:d3:bf:2d:51:fa:d8:71:ad:ad:1f:05:00:44:e8:53:6c:
         92:54:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----