Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.cer (raw, json)
Hash identifier:          Iprw1pkyVs7qbfCC9hLHfNRCzVgL6e+QgtuJL1Dsc4U=
Subject key identifier:   08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2D57
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:37:18 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328434
                          IP: 102.68.40.0/21
                          IP: 2c0f:ecd8::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11607 (0x2d57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 00:37:18 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3625A15AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:c0:f2:50:a2:36:5d:45:a8:dc:70:74:72:
                    a6:17:52:5e:ca:11:e9:36:a1:11:29:e0:c3:2d:af:
                    15:d8:c9:19:12:1a:c9:9a:fa:6d:11:ff:26:4e:1b:
                    86:03:06:24:c0:35:90:9a:a9:32:28:f0:70:b4:8c:
                    ba:ba:5e:2d:27:42:b2:ee:5e:d1:ce:a4:a3:47:a3:
                    8f:3a:b3:92:95:08:c0:1a:5f:e5:d4:bf:3c:a9:98:
                    94:21:df:52:f3:6c:c9:32:c5:c2:82:38:b9:46:3f:
                    b3:95:9c:7f:e6:8d:4f:27:20:b7:e1:d0:02:1b:40:
                    d0:81:81:d2:7d:61:e8:13:e7:d3:0c:67:08:47:54:
                    b5:e7:39:d1:67:51:6e:97:2b:42:96:5d:bf:67:59:
                    b1:5c:6a:9f:8e:d3:4a:90:0c:6e:48:13:32:89:b8:
                    0d:35:2c:8a:89:57:fb:80:29:47:03:c5:97:9f:91:
                    3b:cb:88:0c:c5:98:3d:2e:37:a3:51:53:23:82:c8:
                    44:a1:ff:f1:e4:66:7b:13:ef:29:af:95:cb:8a:8e:
                    cb:a3:e3:23:cd:47:cb:24:77:85:78:74:be:79:52:
                    d8:e1:ea:c1:d6:d7:31:3e:6c:6d:4e:9f:4f:84:fa:
                    d1:7e:de:07:63:bd:53:45:a1:4f:3d:12:66:f7:2d:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328434

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.40.0/21
                IPv6:
                  2c0f:ecd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:da:4a:1d:fe:be:ac:63:2e:02:eb:6e:44:1a:48:7d:33:
         be:b7:a9:58:24:9b:42:ce:4e:c1:74:dd:27:cc:fb:be:a9:bc:
         66:74:19:ac:e9:cb:fc:37:ba:a1:88:ac:9e:44:9f:0e:53:8f:
         b0:f7:81:2f:86:6b:b0:f4:56:97:5d:e7:99:d1:e5:fb:85:5b:
         1b:fa:3b:87:d3:cd:e6:84:cd:8a:e2:14:62:b4:e5:ab:91:33:
         3d:83:f7:33:55:e9:21:7c:46:85:f2:04:a0:2e:ab:92:b3:4e:
         23:ec:c3:fe:6c:e1:73:b7:09:12:ad:07:4a:3b:e7:65:d7:a5:
         87:5b:f9:84:bd:97:26:2c:5d:ad:e3:8d:f0:f1:59:5f:44:6c:
         a7:63:b8:67:68:86:c5:60:a9:7c:90:c7:9d:bf:ff:5d:0a:e2:
         bc:25:d3:0a:bf:75:3b:b2:c8:91:4f:cf:43:7f:9a:1b:2a:6b:
         6f:e3:4f:41:44:bb:a1:08:ca:f7:fe:d0:51:a4:fb:0b:83:ae:
         70:9b:c4:61:4a:7e:7a:b4:14:aa:43:3e:66:f2:79:be:f2:b7:
         4b:85:39:42:5f:b3:82:85:4f:f9:1c:56:c2:a1:59:c2:d9:2e:
         70:64:94:9f:fa:3f:79:6e:37:9c:a5:6a:63:0e:f0:b3:37:2a:
         68:c1:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----