Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
File:                     DOoR1fD2WesQDyt_sejINrwlz5g.cer (raw, json)
Hash identifier:          HljvACBg87KDxGkzWK55X0ENwIByx3dUEup30Ajhl8U=
Subject key identifier:   0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       327D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:11:31 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328400
                          IP: 154.66.112.0/22
                          IP: 2c0f:ece0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12925 (0x327d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:11:31 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C33BBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:9a:b6:b4:59:0f:6c:1a:fb:ef:df:87:0c:
                    cb:52:f1:48:5a:33:50:5a:9a:bc:c9:4a:a1:df:cc:
                    d3:23:a7:31:b7:7d:eb:09:8b:a5:75:fd:85:2f:b6:
                    89:3a:7a:8d:f4:de:4b:df:36:a0:97:7b:98:d9:9b:
                    3d:db:48:f2:40:e5:49:4a:1a:c5:6d:61:de:5f:6b:
                    96:4a:0a:29:fc:cb:e3:03:2e:ee:3c:4d:4c:ca:4d:
                    a4:3e:12:56:5b:6f:af:f4:aa:d0:32:06:4d:9d:f5:
                    25:4c:07:be:da:03:cd:cf:3b:9c:2f:ad:42:30:7e:
                    94:c2:d1:71:b7:d4:28:b8:c5:3f:d5:d7:88:82:5d:
                    b6:69:4d:4c:be:f0:53:c4:d0:77:df:62:fd:2a:2b:
                    49:69:67:7f:d4:ff:9f:84:c8:ed:b3:b6:56:db:c7:
                    ad:ae:06:ef:bf:28:38:3d:7b:95:b5:1a:46:44:16:
                    e6:61:74:7d:9c:8a:b7:4f:a7:12:e3:35:20:e3:1c:
                    10:1c:8a:4b:87:56:e7:9b:45:d6:dc:a1:34:6b:f1:
                    3a:0a:a8:6a:0f:35:ad:70:fa:63:07:fe:24:35:ec:
                    6e:77:0f:1c:14:d0:2b:54:ae:82:63:4b:4d:7d:e4:
                    8d:50:9d:bf:dd:9a:1a:44:bd:3b:94:ec:05:d5:b5:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328400

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.112.0/22
                IPv6:
                  2c0f:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:2b:68:ef:d5:67:fb:de:20:91:0b:76:a8:8f:ea:bb:d9:b5:
         b9:70:06:3c:89:70:45:07:45:ba:14:57:01:0d:e7:22:97:7a:
         90:f2:9f:f3:0f:2b:73:a9:b1:a9:30:e1:85:87:e2:62:b8:e1:
         3d:fa:c5:0d:63:54:98:90:66:9e:f0:10:af:ee:db:30:25:7f:
         61:5a:f4:96:e4:81:57:7f:86:9c:5e:21:c6:f6:a1:80:45:6d:
         b8:98:95:5e:33:23:93:32:da:5b:dc:07:6f:66:1b:87:67:af:
         d0:9d:14:3e:fb:bd:17:bc:e5:4d:98:91:af:a6:be:f6:ea:ba:
         85:25:6a:95:a1:6c:86:14:61:73:02:46:9e:bc:36:08:14:84:
         9d:0f:1d:60:0a:10:74:b7:1f:46:14:2f:c4:88:51:0c:fa:51:
         d0:04:77:69:33:8c:f8:33:a0:76:93:6c:9e:ff:16:d5:60:2d:
         0b:f0:36:15:ef:2e:7e:7e:27:8c:2a:8e:1e:ca:70:e9:1f:2b:
         cd:b0:00:73:8a:8a:7e:5c:45:5b:77:f4:76:fc:0c:44:1a:81:
         9c:d1:c8:35:2a:3f:03:6e:53:fa:5c:ac:fb:82:7b:f1:12:25:
         d3:a8:35:9f:a3:d4:f5:73:8d:74:ab:2a:14:10:ab:9f:21:0c:
         9c:8d:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----