Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.cer (raw, json)
Hash identifier:          8x1HMmyZlCa0FoWO9IQZh8RJ7HGbhiD5XoFxLvQmNuk=
Subject key identifier:   FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3204
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 04:45:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 327981
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12804 (0x3204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 04:45:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36B1FB2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:6f:26:dc:a9:8b:e4:cb:a0:6e:4f:2c:b8:
                    97:60:a4:10:d2:44:f8:ab:37:58:be:00:aa:95:f9:
                    c1:a8:4c:17:bd:e4:76:74:4e:65:1c:45:46:4d:8d:
                    a6:46:54:13:c9:75:cd:91:40:c5:19:73:e5:fd:f5:
                    58:fb:f3:22:10:b3:b4:81:24:d7:98:52:2d:9a:25:
                    0f:63:0e:2e:5d:9c:fd:eb:fd:01:28:76:f5:38:26:
                    e3:f1:92:a5:c3:57:4c:6d:78:0a:77:18:ed:55:5d:
                    ee:15:d8:89:e0:7d:37:45:d3:2e:d4:16:4f:fe:72:
                    37:6a:b8:9c:fe:cb:6e:f0:ef:23:8b:1d:c1:62:10:
                    13:5d:38:d9:c6:53:72:d9:b6:98:f8:55:cf:0c:71:
                    15:38:a2:32:e1:82:97:f4:ab:2d:bb:ab:51:ce:52:
                    48:e9:d9:0d:7f:2a:eb:46:51:56:7a:d3:5f:70:dd:
                    a7:53:19:98:1f:18:d9:32:9c:30:80:09:87:ef:89:
                    ab:b8:44:a9:d4:19:26:59:09:1c:64:6c:cd:ae:25:
                    f0:de:3d:ee:99:ba:8c:d1:55:77:e8:6b:17:a4:04:
                    4c:ee:0a:64:91:70:18:7a:6b:70:dd:14:a1:0e:5e:
                    55:23:3a:8a:78:15:e4:bc:26:2f:31:57:e4:64:ba:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327981

    Signature Algorithm: sha256WithRSAEncryption
         bc:ba:de:55:ae:47:12:63:b3:04:3b:2d:9f:dd:24:aa:58:b0:
         48:72:6d:27:a1:6d:5f:c0:63:76:35:0e:e3:7e:87:25:39:02:
         02:4d:53:57:07:5a:0d:5f:2b:e2:cb:7e:e9:77:99:c6:0c:33:
         5c:18:f7:ab:fe:e2:cb:a4:13:6d:a7:ea:25:79:f1:af:69:3e:
         e1:17:76:b1:62:9a:2b:f0:36:89:17:d4:6d:f0:03:70:00:e8:
         8a:da:e8:a9:51:b6:23:f1:cc:cd:fd:6e:ee:6b:f8:e7:53:a3:
         bd:e4:55:16:17:56:f6:f5:b6:44:7e:18:b5:18:fd:a3:1e:f5:
         90:86:88:ed:dd:a2:d5:3a:dd:ab:8c:be:5b:4c:65:ba:2f:ef:
         12:e9:c9:f5:9f:06:1c:12:fe:4a:71:0d:80:15:48:c5:59:08:
         b4:e5:4b:2b:1f:3a:58:ff:83:14:ef:3f:8f:6e:15:a0:f1:14:
         c2:39:66:5d:87:49:9f:69:c9:60:21:5d:27:4d:4d:56:ea:a4:
         31:84:02:22:95:82:30:bd:26:48:5c:a7:95:16:d7:02:b3:d1:
         fe:f2:69:aa:11:04:2b:e0:b0:f1:9e:96:b4:50:cd:53:b9:62:
         fc:05:e2:dd:bc:58:0d:f1:69:6c:34:69:39:3d:fe:8c:0a:c6:
         1e:5e:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----