Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.cer (raw, json)
Hash identifier:          fRblyNR7Jtw9seG09K4zQHZMDwjGED6PymMrmp31QxM=
Subject key identifier:   01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3036
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:08:24 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 15706
                          IP: 41.209.64.0/18
                          IP: 41.218.0.0/18
                          IP: 196.1.192.0/18
                          IP: 196.202.128.0/19
                          IP: 197.252.0.0/16
                          IP: 2001:4228::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12342 (0x3036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:08:24 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F369C738AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:37:96:46:01:4e:be:f9:44:77:03:ce:83:
                    4a:12:b1:9a:57:0a:24:d7:0a:ec:50:d8:28:7a:4c:
                    e1:06:fe:5d:e1:c0:d3:a9:3e:c3:1b:18:cc:fa:99:
                    a0:f3:7e:97:39:0d:cf:f0:89:30:6c:d7:8e:a4:5b:
                    c8:f1:f5:14:1b:36:d1:fd:c4:94:ef:2b:e1:93:0d:
                    06:6c:b1:48:31:9c:7e:e9:11:29:8f:d3:a3:24:39:
                    18:04:1f:88:a3:f8:07:87:43:2e:4b:b6:3f:f0:a8:
                    93:60:20:11:81:cd:15:27:fd:35:db:ba:4d:97:79:
                    22:67:02:94:fe:92:97:70:63:2e:e7:13:f9:22:98:
                    f7:5a:5a:9a:6f:02:53:38:34:23:a5:89:8e:46:ae:
                    10:cd:32:7e:ab:b1:9b:ac:6a:f5:f9:c3:5e:f5:fd:
                    79:b5:f7:78:31:fd:f4:8c:98:3f:99:36:e1:57:bc:
                    4b:6c:1b:0e:2b:c9:e1:ef:00:15:5b:ad:ac:04:3f:
                    ce:a4:f0:6e:ff:47:bb:e8:e8:70:28:10:94:47:8b:
                    41:3b:26:7e:24:5a:58:a3:4f:72:a9:c3:58:1e:8a:
                    42:3f:fa:fa:18:cd:fa:d1:6a:64:46:49:e3:fa:35:
                    da:ad:85:e1:8c:2d:e7:37:e7:cc:a3:14:52:31:1f:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15706

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.209.64.0/18
                  41.218.0.0/18
                  196.1.192.0/18
                  196.202.128.0/19
                  197.252.0.0/16
                IPv6:
                  2001:4228::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:99:2e:2f:66:4c:50:a4:bb:e1:22:ea:b2:ce:a9:45:c4:
         b2:89:e3:f0:56:79:fd:d7:c4:4d:9c:b5:42:6c:bb:ad:1a:42:
         f4:66:16:b8:7a:1d:a8:58:b7:cc:24:1e:9d:b3:e3:a5:5a:67:
         57:38:34:b4:06:31:33:59:bd:da:82:e8:65:ea:1d:df:03:33:
         c1:38:b4:96:3f:f3:aa:1e:d0:2e:01:1f:38:30:d8:73:e8:53:
         38:40:26:77:37:1a:34:46:a0:a4:21:76:1d:85:15:48:9a:65:
         0e:57:47:89:22:9e:b1:ff:4d:51:a4:79:1d:07:ef:20:ce:04:
         1b:3e:b3:b2:4e:3d:22:64:c8:ea:5f:49:45:1a:35:b6:f4:07:
         a9:de:cf:3d:9e:cd:f0:6e:09:24:45:f5:8f:21:fc:12:60:7a:
         1c:42:97:ef:0a:aa:56:85:f9:4b:c0:c4:0a:3c:cd:ff:e7:cf:
         f4:50:21:bb:97:ef:87:ac:a5:bd:f4:62:47:ea:df:31:45:90:
         23:84:10:26:80:90:1f:84:ab:df:03:46:58:24:b1:04:96:ea:
         42:07:61:9e:ce:b0:17:ae:71:ee:7a:84:2d:68:39:9f:71:15:
         46:ee:90:49:d5:81:09:f8:1c:f9:45:7a:bd:29:0e:db:5a:36:
         1f:77:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:00 2025 by rpki-client