Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.cer (raw, json)
Hash identifier:          LjA9vhkrJGwLu1R9AtMXTABs/9dCDhe9bw08VYBeYb4=
Subject key identifier:   FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E9D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:46:10 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 327872
                          IP: 102.213.0.0/22
                          IP: 102.219.88.0/22
                          IP: 196.250.128.0/19
                          IP: 2c0f:f4c8::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11933 (0x2e9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:46:10 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364B494AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:b6:bc:53:46:97:af:fe:05:98:27:5b:75:
                    13:dc:8c:e6:a3:f6:2d:cb:12:c2:a4:a0:1a:64:48:
                    31:74:bd:72:59:15:3f:88:63:32:53:b6:fe:62:d2:
                    e9:43:fa:78:22:66:fa:60:d2:58:bb:38:2d:fc:04:
                    47:51:25:8d:e5:48:7b:c9:08:af:9e:de:93:50:6f:
                    15:ae:15:76:b6:94:f3:d5:ad:36:51:de:b0:5a:79:
                    cd:e2:b6:5b:b3:19:db:29:0c:94:86:a1:69:9b:81:
                    16:0e:e3:2e:90:fa:d8:ed:4c:f0:c7:61:52:14:68:
                    32:51:74:be:2b:54:9d:e8:7d:7e:d6:59:44:f9:a8:
                    cf:23:9e:af:00:1e:19:79:68:80:9f:b5:af:46:bc:
                    45:f4:f7:8e:6d:50:b9:35:82:3d:a5:0f:b0:d5:ea:
                    5e:b7:e6:cc:ab:e6:19:a5:5b:28:ba:e4:45:8e:b0:
                    1a:e6:49:ca:05:cb:33:7b:84:54:2a:03:a6:4b:dc:
                    01:5d:fe:0f:55:cb:8d:ce:96:81:4e:fc:03:2a:2f:
                    89:92:1f:16:62:a7:b3:e7:3b:ce:39:e6:3b:bc:6e:
                    ce:f5:3d:5f:c6:cb:d9:35:fe:5b:79:0d:5c:20:21:
                    5e:db:cb:68:fc:c5:a9:74:8b:bf:ea:97:97:f6:70:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327872

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.0.0/22
                  102.219.88.0/22
                  196.250.128.0/19
                IPv6:
                  2c0f:f4c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:5b:aa:82:b1:33:af:01:df:ed:f8:c4:bf:63:81:03:d9:
         0c:ab:e2:4f:1a:1c:56:77:03:ee:01:a1:c3:6e:fa:12:7a:be:
         c0:03:f7:cf:ef:97:db:65:b8:7c:79:20:ca:a9:e8:e7:17:93:
         59:ad:f0:c4:17:1e:66:68:be:f6:7f:07:7c:23:4a:b4:dc:bb:
         c6:45:29:f2:07:80:53:35:ca:b2:72:4e:ee:47:8b:02:89:6d:
         42:f4:75:51:da:00:42:84:77:d2:87:c5:61:51:fa:b4:c7:2e:
         32:97:49:8b:de:df:c4:b1:6e:01:81:c9:d3:26:ac:4b:f3:2b:
         1d:39:0c:f5:7e:f3:9e:20:cf:9a:6a:71:59:1b:72:13:50:dd:
         13:b2:ea:dd:15:61:1d:f0:65:7b:45:18:0b:7f:0e:16:c4:69:
         89:b1:14:fe:9c:71:7e:72:d4:ec:b9:57:80:b6:02:fc:6f:e8:
         13:35:6f:2f:b6:e8:1b:a7:05:c1:83:38:e8:d3:f6:bb:fd:1d:
         35:1a:64:81:9a:92:f0:7a:07:d8:2a:a4:9b:62:ea:97:b1:f5:
         aa:00:eb:2a:7a:78:00:3a:c3:00:21:90:e3:c4:5f:a7:d1:cb:
         5b:05:79:90:1b:bc:6c:e6:6c:2d:3b:e3:98:05:64:83:54:cb:
         cd:73:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:06 2025 by rpki-client