Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer (raw, json)
Hash identifier:          ySaVnnwJmSYtImIEKRN0VDwooftG4tnqbDSIsfvTc9E=
Subject key identifier:   01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3290
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:15:47 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 36982
                          IP: 196.13.250.0/24
                          IP: 196.42.64.0/18
                          IP: 196.47.192.0/18
                          IP: 197.239.128.0/18
                          IP: 2001:43f8:70::/45
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12944 (0x3290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:15:47 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C4E2CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b6:af:d0:09:49:b1:d6:3e:40:c9:b7:d1:8a:
                    d2:b0:c0:6d:0f:fa:98:ff:3b:be:fd:88:5a:b9:e5:
                    6b:f3:08:7c:e4:f6:9c:84:d4:03:43:8a:b7:79:6c:
                    13:26:4a:18:26:8b:47:22:3c:f9:06:36:8e:67:25:
                    1d:56:2a:92:75:bd:d5:e7:6c:42:e1:12:55:d8:33:
                    b1:2d:98:f7:37:b1:86:28:e7:97:4b:cd:1c:e3:9b:
                    71:92:a6:60:74:25:6b:1c:a5:b1:ae:e7:ae:4d:0b:
                    00:d8:d5:3c:5c:30:06:18:5a:fb:36:9e:91:54:bc:
                    75:47:fc:6b:25:41:cf:7c:5a:c3:a5:26:0d:dc:5e:
                    fc:a1:e4:61:91:86:aa:6b:ac:19:40:11:e8:61:a1:
                    38:a6:a8:5b:ae:9e:ef:66:ea:1f:39:b7:be:a9:de:
                    f7:e4:fc:88:7d:6c:43:7c:48:3c:23:e1:52:65:fc:
                    eb:d4:21:4d:6b:f6:6b:3c:37:7c:85:43:10:86:90:
                    1e:6e:ce:88:08:28:05:13:f9:c3:07:42:e9:c7:8a:
                    76:4a:1c:6c:b1:78:96:46:14:3b:59:62:2a:ca:81:
                    46:ff:98:8c:f9:cd:45:f8:38:62:aa:47:6d:2a:e8:
                    a1:98:d5:65:72:8b:88:c6:61:20:b0:f9:73:1c:78:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36982

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.13.250.0/24
                  196.42.64.0/18
                  196.47.192.0/18
                  197.239.128.0/18
                IPv6:
                  2001:43f8:70::/45

    Signature Algorithm: sha256WithRSAEncryption
         23:29:ce:be:5b:5b:06:90:48:b5:a4:b8:0d:2b:56:45:4b:7e:
         5f:8d:82:49:c8:e3:c4:94:6d:07:ed:82:ed:5b:b0:65:04:f3:
         9c:13:fb:3a:7e:a9:0e:a1:84:86:a6:3d:20:cb:7e:33:0e:cd:
         22:6c:7f:bd:76:57:27:dd:04:9c:1c:d0:ab:1e:51:9f:9f:14:
         07:be:19:da:cb:8d:15:98:e6:06:4d:a0:fd:7d:ed:0b:17:e7:
         01:1b:74:0a:9d:7b:82:72:de:0b:d9:96:c3:20:19:e2:56:bc:
         31:8f:c8:6e:37:a0:09:e0:21:5a:34:d3:88:97:ba:35:25:29:
         a5:ac:7c:d1:6c:57:a4:75:c7:99:a2:a3:a6:b2:46:37:84:40:
         3c:b0:62:0b:98:c0:7d:ce:f1:0b:76:1b:23:5a:a0:f8:23:54:
         92:d6:59:aa:ac:35:b6:0d:1d:6d:a9:07:4b:7f:69:4f:9d:7d:
         65:35:05:68:86:b8:6c:9b:e0:40:1d:d8:38:6c:1c:86:5e:57:
         45:fb:62:f8:e8:3c:2c:15:fc:6f:c4:18:99:e7:69:75:2a:bc:
         1b:8f:87:d9:38:b8:51:3e:a7:db:ec:58:2c:c1:37:dc:85:fd:
         ec:36:63:fa:7c:d8:6a:82:0c:ae:69:9f:51:2d:01:57:39:99:
         0f:54:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:29 2025 by rpki-client