Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
File:                     1UBLBG1uzW10FBvTrkknuMYH7mI.cer (raw, json)
Hash identifier:          z1G6ZVOotPBDO6nQGgy2hrDAEJ/hpRsLUZmVTftOFmQ=
Subject key identifier:   D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       342A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 12:05:41 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328548
                          IP: 102.23.192.0/20
                          IP: 102.213.116.0/22
                          IP: 2c0f:380::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13354 (0x342a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Feb  4 12:05:41 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36AD16CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:64:b3:b1:8b:3b:43:d9:bb:42:c6:5a:ee:
                    46:cf:05:89:78:cb:4d:17:6a:d4:f6:d2:f3:ff:a6:
                    21:b8:24:69:96:ef:75:50:c3:74:4a:dc:02:ef:5b:
                    5f:60:76:79:c4:b4:23:0f:ba:d5:4e:2e:90:2f:cd:
                    db:4b:6c:fd:96:fe:49:93:06:3e:58:83:01:bc:5f:
                    26:ad:e5:27:77:f3:4d:7e:95:51:07:94:c2:b2:c3:
                    17:d1:d9:0a:f7:76:16:cf:d5:8f:5e:ff:59:4d:4d:
                    5d:d7:14:05:08:4b:50:d8:d2:4b:f9:91:bc:68:58:
                    48:53:5d:c9:17:c6:44:a2:db:98:ec:22:fe:ba:28:
                    a3:22:d7:5e:56:c4:0a:c6:68:4a:e3:ed:5e:0b:60:
                    25:8c:c1:7b:f0:8f:de:d1:e8:d9:d2:8e:15:4a:45:
                    62:c2:b8:4b:7c:5d:c8:18:e9:87:9c:cf:a9:81:c5:
                    54:6c:44:ba:2d:7a:00:36:15:40:34:ff:a5:03:40:
                    af:58:ba:47:9e:f1:11:81:b8:db:5e:64:fa:b5:6a:
                    ba:66:ea:90:fe:00:b8:a4:0a:51:e9:98:77:62:4f:
                    41:81:1f:6d:31:66:61:01:36:f4:e2:3c:1f:be:ff:
                    e6:30:3f:fd:c6:a0:d0:b3:96:2b:dc:1b:7a:7f:00:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328548

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.192.0/20
                  102.213.116.0/22
                IPv6:
                  2c0f:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:38:ba:f5:fc:74:35:b8:10:f5:0f:eb:fe:1d:ee:67:0f:a8:
         5e:aa:33:b9:02:4b:76:7b:fe:0b:d2:b4:69:43:34:84:ce:d9:
         79:c7:0d:34:fa:fb:5d:1a:f8:e5:29:cb:e4:3e:02:e3:58:7c:
         ef:96:d5:41:72:9a:13:61:80:02:dc:4c:32:d2:f5:1d:f4:1e:
         53:a6:ee:54:aa:6b:32:c5:24:90:c9:7d:1a:9b:c9:aa:e3:4b:
         b3:80:38:db:c1:4f:88:d6:dd:8b:5a:ca:f8:56:d4:d2:60:ef:
         cb:3f:7b:46:7e:91:39:45:db:52:02:10:c6:e4:37:0f:95:6f:
         57:80:74:b4:63:ab:d8:82:9a:68:8c:65:b6:50:13:80:5d:65:
         79:e4:8f:c8:d6:ff:05:fb:85:c2:4a:78:06:06:af:0e:69:8c:
         b3:4c:84:56:7a:09:fc:c9:ae:e0:b2:64:75:c7:ba:97:8d:6a:
         38:aa:4c:bd:76:52:be:6d:99:73:5f:ae:a3:81:63:36:28:1a:
         b1:df:fd:18:cf:ab:6e:df:25:b3:cd:df:2f:e2:7f:b7:ca:08:
         f1:a6:9c:d2:92:8b:d2:4f:b7:21:9b:a3:b1:62:37:29:9e:dd:
         a5:69:8f:58:f2:17:fb:ff:8b:d6:c8:fa:16:24:b0:21:94:20:
         94:57:74:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:57 2025 by rpki-client