Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.cer (raw, json)
Hash identifier:          +ru8NH2UIPRIw6dkJl2SRcyysQV+Mjb98QqJh4k2QIs=
Subject key identifier:   1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3384
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:11:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329243
                          IP: 102.212.44.0/22
                          IP: 2c0f:240::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13188 (0x3384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:11:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36F505DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:0b:d8:2e:ba:3e:3d:0c:a9:ac:87:2b:62:
                    07:a2:13:1d:9a:91:20:d6:ec:e0:73:1c:d7:c3:3f:
                    ad:75:0c:b3:8f:a4:d2:6b:74:fb:d5:e3:80:2a:24:
                    14:a4:83:be:37:a5:d7:c6:81:77:34:5f:92:41:31:
                    97:11:27:3e:2d:bc:f8:69:5b:13:61:f8:92:5c:85:
                    06:82:7e:89:8f:d3:ac:9f:c4:92:69:0d:51:f8:7c:
                    29:e7:4e:e2:61:36:47:e1:09:e6:01:a2:d7:c2:61:
                    e4:aa:6b:4a:75:22:e4:fa:4a:ef:e2:58:cb:08:fe:
                    f3:46:c0:c4:19:9f:bd:5a:73:a7:b4:e4:2d:e8:86:
                    e6:af:7c:47:5d:bc:1d:d1:fb:5f:2f:55:bc:0f:2a:
                    a9:a4:be:98:18:d7:f2:65:1f:60:ad:f2:d7:d6:fc:
                    ba:52:6d:fb:42:e0:bf:c5:bb:cc:1d:34:f3:80:b9:
                    8c:21:22:da:4f:74:a0:80:fd:da:e0:97:37:26:87:
                    ef:36:04:03:5d:ef:de:81:7b:43:cd:7a:94:fa:e5:
                    e5:46:5a:ed:70:2f:28:6e:1f:bb:20:53:6a:98:cf:
                    42:37:09:0e:d4:5c:4e:d4:1b:cc:29:6c:40:52:d8:
                    85:8f:9f:17:0d:29:25:77:ae:77:1f:3b:6d:16:b2:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329243

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.44.0/22
                IPv6:
                  2c0f:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:d3:09:64:36:5f:17:e5:e1:42:43:6a:dd:19:cd:3d:58:
         1c:7e:fa:6e:d5:eb:bd:3d:4e:b7:cf:86:34:21:59:e3:6c:b3:
         64:b7:63:05:41:48:56:a4:55:cb:30:7b:81:ab:2b:02:29:58:
         1e:22:02:32:9a:df:b4:0a:13:9e:ec:6f:ad:74:1d:58:ee:18:
         21:00:c1:4c:87:c0:f3:f6:9f:07:c7:96:73:99:31:7a:a1:97:
         da:4f:61:40:e6:32:66:10:5c:94:87:a1:a5:a6:29:91:53:c1:
         26:a0:18:be:6a:5a:cc:58:5e:8e:3a:b7:8b:41:03:be:13:cb:
         2c:02:7d:16:8c:65:55:b6:18:8d:5c:7b:9b:dd:0b:09:8a:c8:
         95:a1:5e:84:b6:62:e7:86:fd:01:18:f9:9e:47:ae:cd:d5:13:
         e1:fe:da:ee:1c:ae:bc:8f:72:e4:06:21:86:c1:33:09:ce:e0:
         9d:2d:90:b5:c3:63:0a:e2:9b:a3:62:2f:aa:7c:77:1e:76:31:
         6b:71:27:3f:34:19:9a:01:88:03:b8:b8:3e:9e:31:63:88:5e:
         fa:6f:25:39:58:c5:b2:d1:8b:99:d2:57:06:91:b2:62:47:5b:
         a5:86:28:f7:59:6b:e8:0e:dd:a1:6a:b6:42:58:58:87:a3:52:
         3b:64:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----