Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
File:                     0L5n0EWzPwWlhxUQOZ5wnJj2130.cer (raw, json)
Hash identifier:          sSGWn8tshPUSkm+IYrR+3KWtLpN8Op4NUsoOaj9K60w=
Subject key identifier:   D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2FC3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:45:04 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328337
                          IP: 102.134.64.0/21
                          IP: 2c0f:ef40::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12227 (0x2fc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:45:04 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36B70EFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:d9:47:4b:2d:a2:2d:79:30:b1:f3:b4:bb:
                    61:4d:c8:76:4a:ab:28:01:57:7b:95:09:13:1a:7d:
                    c4:3b:1f:da:28:32:48:b0:fb:a4:6d:dc:51:30:4e:
                    8a:06:1a:d1:b2:e1:75:d5:26:b3:ce:ed:f7:ad:91:
                    26:78:b4:06:4f:e4:56:62:ae:b8:97:63:0b:8f:c4:
                    17:91:78:dc:b6:c8:5c:7b:fb:ea:bb:32:34:16:66:
                    e4:2e:3e:0d:6d:d8:35:42:f7:71:73:89:9f:39:0e:
                    2b:89:06:ed:54:3c:51:56:50:8d:9b:91:4d:e2:23:
                    0f:58:28:47:6d:e3:a2:9b:c1:34:d4:8d:a3:0f:c7:
                    6b:8b:27:36:9f:64:2e:03:f4:2f:b2:21:6e:f2:db:
                    dd:d9:83:72:ba:4c:f5:c5:79:4e:f3:34:f0:62:34:
                    6e:a0:d6:2a:29:09:88:f0:c8:09:37:69:89:cc:52:
                    8a:82:b2:bc:64:19:b8:97:d1:ff:78:55:6e:12:1a:
                    36:0f:42:95:a3:3c:56:ca:17:09:ea:8f:86:74:00:
                    34:01:b5:87:62:a4:f8:47:91:1a:26:74:0d:81:a4:
                    81:5f:8f:15:e9:aa:35:9a:d5:ea:5f:80:cb:3f:79:
                    ed:99:03:33:33:d4:2b:90:dd:44:a0:ab:eb:0b:16:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328337

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.64.0/21
                IPv6:
                  2c0f:ef40::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:cf:1a:68:e8:0f:d8:fb:33:df:26:9e:29:d2:c7:90:e6:
         a8:d2:04:d4:be:d6:d9:ed:f1:fb:40:73:13:37:71:a3:80:db:
         79:a7:f2:3f:5d:2f:1e:e9:89:d4:b4:a8:e3:83:bd:3b:28:ac:
         08:d3:e4:66:11:74:cf:b3:3c:8c:e2:b1:c3:62:8a:e4:20:0e:
         a7:29:dc:dc:71:c2:ae:4f:1b:66:5a:98:1b:03:77:67:37:78:
         c3:23:ba:f7:2f:95:44:f9:a7:c5:58:b7:9a:cb:7f:54:b7:1b:
         15:17:00:ee:3e:fe:c4:ca:07:a0:a2:84:2d:44:ac:90:56:7c:
         57:5f:44:d4:c6:3b:41:dd:c9:18:c4:6f:b5:27:12:30:67:fd:
         4c:ec:9b:6f:fd:70:63:9c:41:6c:30:76:46:85:df:1c:f4:9e:
         dc:cf:a3:a3:72:83:71:e0:59:85:da:da:10:8c:12:cd:14:30:
         11:b2:f0:fe:bf:95:51:f4:52:f0:6d:9a:12:46:a5:12:04:b2:
         61:34:f3:79:88:be:1f:b2:aa:81:22:f9:bc:1c:27:cd:0f:51:
         cf:9a:90:8b:cc:8c:c2:1b:54:9c:cf:99:b4:3b:d9:4a:a2:df:
         98:81:e7:aa:8b:74:17:e9:cc:75:db:0a:dc:16:a2:7e:70:08:
         bd:23:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----