Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.cer (raw, json)
Hash identifier:          WCbPOklgZxoe0XKMOTJYzIkBmMP9TQIRWS9iTlFD+k4=
Subject key identifier:   EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       33C8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:27:21 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328316
                          IP: 102.176.176.0/22
                          IP: 2c0f:eed0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13256 (0x33c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:27:21 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36FDDCFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:a9:8a:d9:4e:ab:c1:2c:25:ac:e6:3d:2d:
                    93:87:76:dc:52:56:6a:6c:f6:d8:11:c1:ce:8f:36:
                    c4:3d:1a:ff:4a:e9:36:d8:53:35:a0:ac:b0:ca:20:
                    f9:ce:4e:de:81:b5:e8:f7:7b:e7:40:fa:9d:d7:ad:
                    24:2d:7d:1c:51:dc:8f:1b:4e:56:e8:50:a7:01:42:
                    f2:9f:8b:f8:da:fb:30:ef:7b:bd:b4:4b:f7:14:a7:
                    a1:08:e9:40:4a:17:0d:f6:af:49:ef:0f:ca:03:9a:
                    0e:c5:7a:73:71:6f:45:31:92:d5:bf:1a:5b:fa:f5:
                    e6:2c:23:28:1a:e0:5d:ba:7e:d3:2d:ba:7c:0a:d8:
                    26:90:79:0f:c8:70:9e:f9:53:82:38:2a:2a:d0:ca:
                    a9:9f:5c:be:69:36:24:72:b4:6b:05:38:7a:6f:66:
                    20:18:0c:b8:84:34:36:e9:34:0e:c2:ef:cb:24:6a:
                    20:31:38:13:ae:47:e1:a4:59:df:6a:83:b5:5f:31:
                    ea:5c:e9:3f:fc:96:53:d2:47:82:05:95:14:c5:3c:
                    a8:b0:cc:0c:ea:0f:fe:36:8c:ee:6a:56:98:c6:e9:
                    bd:d2:79:c5:da:1b:c1:9b:c9:10:29:ef:42:72:cb:
                    98:88:1e:7a:1a:23:5e:f1:16:57:2f:ae:0f:7e:d8:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328316

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.176.176.0/22
                IPv6:
                  2c0f:eed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:36:30:82:58:7a:8c:97:c3:1a:1e:1f:e5:bb:d3:6c:25:99:
         f4:b8:f5:17:e5:95:6d:b8:0a:9f:51:c3:ff:6a:24:a6:6c:52:
         fb:4a:d9:8b:0a:45:c1:02:a6:9e:cc:08:39:8d:5b:0d:9b:3a:
         92:e7:8e:33:ae:08:3a:76:2c:79:12:31:0f:b2:df:da:0f:42:
         09:99:a3:62:f8:fd:46:3e:3f:72:e9:a3:7a:44:6d:b2:9d:0e:
         2f:69:5a:0a:16:4f:78:f4:a9:22:35:65:42:35:fd:be:03:e7:
         fe:6e:4f:0e:29:d6:00:c0:f7:ae:39:2b:7d:d9:24:2f:4e:4d:
         7f:96:7b:7b:2f:8a:3f:d3:95:f4:1b:26:49:37:fc:3e:f5:20:
         d7:0e:21:2e:93:c5:30:f7:d7:ab:19:d9:7a:f9:f6:76:e5:dc:
         13:21:14:9d:4f:ad:0f:dc:5a:df:49:7c:c5:1a:bf:91:70:36:
         5c:b4:9e:61:1b:27:64:49:84:e6:fa:4f:8a:5f:c8:09:ff:fc:
         da:58:34:43:8a:34:84:fd:c2:d8:3a:b8:4d:98:17:da:a7:b0:
         24:84:fc:f7:cf:fe:9f:f8:3d:de:66:0f:b3:3d:ad:34:8d:f4:
         5c:4c:2e:d4:b8:5c:eb:d8:8b:f4:25:57:2d:16:e1:69:fe:3b:
         55:2c:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----