Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
File:                     GsSe57FYhufc3nkyHoJCyZMkg8k.cer (raw, json)
Hash identifier:          0fU7+GxTJgEhk1zm55JcjEPuDvUneN+tGOH5tyKqoX0=
Subject key identifier:   1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       31C8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 04:32:49 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 36864
                          IP: 41.203.192.0/20
                          IP: 196.200.48.0/20
                          IP: 2c0f:f900::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12744 (0x31c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 04:32:49 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36A7FC6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c7:b2:9f:f9:4d:b4:d8:fa:af:b8:32:71:03:
                    15:57:f8:32:54:79:44:30:41:8e:c6:26:2b:c9:40:
                    20:30:e6:1f:43:0d:03:98:c8:35:ce:dd:d1:2e:a8:
                    1e:eb:4c:74:74:1c:b6:38:ac:06:8f:78:17:5a:99:
                    7a:9a:db:b2:32:16:e3:29:fa:b2:82:94:90:f6:fb:
                    c7:46:4b:d0:f7:c3:c6:6c:37:72:50:5f:ce:3f:1d:
                    ad:67:34:1d:25:ca:05:fd:c7:61:fc:5d:8f:68:28:
                    e9:f1:8f:00:96:b2:a2:23:25:44:c3:48:c0:a7:40:
                    45:5b:44:3e:d9:39:ce:28:08:c2:d9:c2:b6:77:37:
                    e7:43:da:12:7c:68:7e:45:b4:f0:a8:04:a5:12:f6:
                    fb:92:aa:d2:34:13:5d:d4:b8:df:39:60:70:58:e9:
                    f4:27:cc:7e:13:78:be:36:b0:22:40:74:0b:74:ff:
                    59:6f:27:aa:d3:01:7e:32:22:8e:f0:bd:01:5b:cf:
                    f1:54:e0:6d:44:c7:19:4e:e6:ce:22:dd:c4:ee:a8:
                    2f:1e:20:02:d3:1a:f0:e9:3b:c0:ac:fc:81:c6:4d:
                    25:e3:9f:c5:20:7e:99:a1:f4:aa:3f:2f:4a:95:b5:
                    09:73:ec:fa:f5:63:c2:5f:e5:40:ce:ee:52:8c:e1:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36864

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.203.192.0/20
                  196.200.48.0/20
                IPv6:
                  2c0f:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:c0:2c:80:3e:26:57:36:8c:51:7e:8f:e3:24:3d:20:97:
         07:50:42:4e:ab:fb:09:dd:63:e3:8d:a8:3b:63:f0:d8:cc:f0:
         86:fc:fd:4d:cd:1c:42:8f:b9:48:e2:8a:53:6b:40:f5:ab:b8:
         da:7f:0b:32:ed:45:ab:13:be:97:f5:59:07:fc:29:bf:21:b7:
         8b:7a:ac:ce:97:3f:93:61:4a:34:02:d5:26:71:d6:b0:7d:09:
         79:1b:8d:86:15:55:15:46:f8:09:de:3b:c5:89:9e:6a:00:c9:
         ca:04:7d:14:95:ab:d8:36:f8:3f:35:bc:ec:56:cf:d0:e3:74:
         67:d5:51:2a:3c:2d:b2:23:11:f2:e6:9e:80:f9:d4:88:c9:b7:
         63:ed:02:82:73:45:64:af:3b:d8:a9:92:8f:81:14:7e:ab:9f:
         7c:24:06:9f:ad:1b:91:14:df:c4:6b:2e:15:8d:23:39:34:79:
         54:87:12:07:0a:3c:c7:97:73:b7:85:b1:5d:d1:3c:4f:55:c3:
         db:a1:0e:7a:36:1a:76:aa:ac:04:2d:ac:53:dd:b0:81:19:ea:
         a6:22:20:31:d6:20:bd:fe:31:31:44:4f:f6:4f:e8:03:90:1d:
         4c:ad:36:0e:5a:49:cb:5e:86:04:92:33:b4:2b:d9:79:c2:28:
         92:83:3c:f0
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICMcgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDMyNDlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE3RkM2QUYxMTAvBgNVBAUTKDFBQzQ5RUU3QjE1ODg2RTdEQ0RFNzkz
MjFFODI0MkM5OTMyNDgzQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtx7Kf+U202PqvuDJxAxVX+DJUeUQwQY7GJivJQCAw5h9DDQOYyDXO3dEuqB7r
THR0HLY4rAaPeBdamXqa27IyFuMp+rKClJD2+8dGS9D3w8ZsN3JQX84/Ha1nNB0l
ygX9x2H8XY9oKOnxjwCWsqIjJUTDSMCnQEVbRD7ZOc4oCMLZwrZ3N+dD2hJ8aH5F
tPCoBKUS9vuSqtI0E13UuN85YHBY6fQnzH4TeL42sCJAdAt0/1lvJ6rTAX4yIo7w
vQFbz/FU4G1ExxlO5s4i3cTuqC8eIALTGvDpO8Cs/IHGTSXjn8Ugfpmh9Ko/L0qV
tQlz7Pr1Y8Jf5UDO7lKM4eF1AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUGsSe57FY
hufc3nkyHoJCyZMkg8kwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBN0ZDNi84MzE2NzZBNkVFMzkx
MUVEODM2Q0NDNkE0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTdGQzYvODMxNjc2QTZFRTM5MTFFRDgzNkNDQzZBNEFEOUU2RkMvR3NTZTU3
RllodWZjM25reUhvSkN5Wk1rZzhrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkAAwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAQpy8ADBATEyDAwDQQC
AAIwBwMFACwP+QAwDQYJKoZIhvcNAQELBQADggEBAMJ7wCyAPiZXNoxRfo/jJD0g
lwdQQk6r+wndY+ONqDtj8NjM8Ib8/U3NHEKPuUjiilNrQPWruNp/CzLtRasTvpf1
WQf8Kb8ht4t6rM6XP5NhSjQC1SZx1rB9CXkbjYYVVRVG+AneO8WJnmoAycoEfRSV
q9g2+D81vOxWz9DjdGfVUSo8LbIjEfLmnoD51IjJt2PtAoJzRWSvO9ipko+BFH6r
n3wkBp+tG5EU38RrLhWNIzk0eVSHEgcKPMeXc7eFsV3RPE9Vw9uhDno2GnaqrAQt
rFPdsIEZ6qYiIDHWIL3+MTFET/ZP6AOQHUytNg5aSctehgSSM7Qr2XnCKJKDPPA=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:19 2025 by rpki-client