Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.cer (raw, json)
Hash identifier:          0/tq7jmYltZk7dLSDPxKRw5gCW7ETA1ArsdEatWxeF0=
Subject key identifier:   1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       32B1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:22:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37288
                          IP: 196.216.188.0/22
                          IP: 2001:43f8:1d0::/48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12977 (0x32b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:22:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C8DB2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:2d:76:54:90:f7:8a:e3:5d:2c:37:7a:d2:
                    40:88:8d:8c:de:fe:3c:7e:18:f2:73:33:43:25:84:
                    e2:79:23:fb:47:a7:c1:28:12:5d:4a:3e:bf:b2:0b:
                    a6:a2:7e:ba:44:dc:b7:df:fb:51:46:9f:53:f6:3b:
                    60:1d:98:77:d5:cd:57:6b:d8:78:53:c9:d7:5c:28:
                    71:3d:b7:a5:7d:59:a4:1f:6b:40:15:4d:ea:80:8a:
                    86:bc:17:5b:64:e3:f2:40:f8:81:70:63:7f:dc:4c:
                    b2:c1:b5:4c:99:56:cf:93:be:6e:4e:40:1d:49:e9:
                    af:99:30:87:da:fc:0e:44:48:23:e8:03:19:0d:a7:
                    14:52:05:79:61:a8:b6:1b:fd:e7:14:49:19:43:12:
                    3d:a7:05:bc:f0:a3:25:1a:de:f0:b1:72:ed:68:75:
                    b6:2b:08:f3:f1:b5:6b:1e:10:4a:03:27:d3:89:78:
                    87:d9:3c:e7:08:e6:1f:97:f7:be:fb:5e:44:28:5b:
                    e6:b9:66:b7:f3:05:98:6f:b1:48:a7:be:64:37:b3:
                    7d:30:2c:16:51:c6:85:d4:9e:07:d8:9b:e9:34:9c:
                    3d:13:2e:82:7c:e3:5f:89:ef:e8:70:cd:01:75:c6:
                    00:f6:74:ba:00:54:46:94:28:e8:96:38:84:01:c5:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37288

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.188.0/22
                IPv6:
                  2001:43f8:1d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:71:d4:e9:d5:3c:24:ed:2a:2f:92:49:4f:9c:85:22:d4:
         fe:d5:2b:fe:b1:c6:d4:15:56:73:36:1a:a2:7d:7c:42:bb:fd:
         29:67:b5:0e:af:4d:d0:91:aa:cd:bc:36:fa:b4:cc:87:f1:be:
         74:f1:b3:cf:d4:d4:11:86:7d:50:77:b3:e1:01:51:9e:af:4c:
         1b:8d:e0:d0:0f:e8:e9:2b:13:40:03:7b:fd:db:e2:dd:a7:13:
         de:8c:07:1b:9a:f7:e7:a5:0f:52:97:82:61:85:7c:bf:bd:54:
         ff:31:f9:15:e9:20:f4:27:cd:89:f1:4c:ae:7d:10:fa:9e:88:
         dc:76:c7:ca:58:98:da:33:19:6f:0d:94:7f:06:34:3c:f3:ab:
         b8:23:1c:42:ff:24:ab:f7:0a:22:53:d4:6b:53:ba:2a:d0:14:
         09:d9:a6:20:1c:1b:d6:90:15:ee:e4:ab:0e:a1:df:44:66:ba:
         cb:c8:ee:8a:95:25:d6:07:8e:f0:c2:4a:a5:5f:80:31:9f:5a:
         78:1a:2f:e0:55:e7:30:9e:bb:38:97:06:6c:52:9e:0b:2c:49:
         44:d5:9e:af:b9:48:96:3f:71:6c:fa:d6:ca:85:6f:d0:2a:48:
         fa:70:b0:4e:1d:df:36:2e:e7:b3:3f:f2:64:e5:b8:6e:2a:75:
         00:a4:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----