Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
File:                     INQ_9eRM5MOe47-3ribe6wBBH9U.cer (raw, json)
Hash identifier:          TueLd70258pGtmhnV0e2BLnn3tc/2fEZbjIDWMQ+P7A=
Subject key identifier:   20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3449
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 00:02:01 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328511
                          IP: 102.68.68.0/23
                          IP: 102.206.186.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13385 (0x3449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Feb 20 00:02:01 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365D370AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:33:75:cf:38:19:fe:89:9f:1b:be:64:2d:
                    2e:87:a5:05:24:2c:15:e5:39:79:32:dd:68:b7:23:
                    2e:cc:89:61:fa:f2:e9:10:61:d3:a4:26:13:57:9b:
                    4d:43:79:b0:8d:ee:ff:7b:b8:ca:56:8d:ba:aa:eb:
                    7f:6c:c8:50:53:b9:a1:9e:62:89:14:04:d7:54:c5:
                    9a:51:ea:e9:d5:7f:5f:6e:69:e1:1b:69:5c:63:2f:
                    d8:e6:35:bf:4c:a9:a2:d1:5d:03:83:be:ef:74:cf:
                    00:f4:bf:81:af:0b:c6:5c:79:25:34:6f:bf:1e:9a:
                    4b:f2:32:eb:63:8f:8d:9f:1c:c7:28:85:df:1e:d3:
                    1a:68:61:87:8f:5a:a8:c9:3a:9f:2d:8e:9d:c1:bf:
                    6d:77:3f:97:0e:3b:e9:36:ac:1a:99:48:8a:b9:e6:
                    e6:3d:d6:da:ea:7e:cd:56:b7:d3:fc:df:f3:4b:02:
                    52:80:60:28:6b:8a:32:11:59:76:1b:91:3a:96:ab:
                    6a:ff:a3:39:e7:c7:c4:31:83:79:8d:44:bd:65:49:
                    5c:a2:66:b3:21:2e:18:dc:2f:91:85:fd:68:3b:04:
                    39:e6:35:4d:d9:33:6f:f6:ee:90:52:ab:d0:5c:18:
                    3b:1b:0f:cb:f6:14:f7:31:51:63:c9:1e:d5:d8:a0:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328511

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.68.0/23
                  102.206.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:a4:48:5f:35:fc:f3:60:5f:16:c8:e6:41:60:c7:2f:d4:
         42:c8:6c:fb:ea:c7:69:9c:65:2d:85:b6:1b:57:e1:7b:44:a0:
         51:38:a5:a2:ed:af:c9:2c:ed:cd:8b:cf:8c:59:b0:18:a2:5f:
         8c:76:8d:63:f7:c3:60:4f:a9:be:d5:1b:23:a7:43:92:c5:e0:
         1e:ca:cb:c0:f2:61:d8:03:3c:43:86:47:01:eb:e2:8d:30:24:
         db:a6:41:66:e7:58:57:bb:92:9e:0c:ab:04:66:e6:5a:d3:fe:
         0f:6b:24:8a:6e:24:d1:54:b3:d8:89:94:c8:a5:b1:48:d0:91:
         31:62:72:c4:43:20:f8:0d:ef:63:57:1f:85:f2:e4:da:51:e4:
         81:1d:5c:13:02:ea:50:15:79:a3:7f:06:1f:6c:ca:b0:bf:fc:
         c9:c0:9c:a5:4f:c6:55:5e:4d:5d:49:f3:9f:d6:83:7a:01:5a:
         9e:f3:64:7a:2f:73:34:37:c3:0b:4a:dd:99:fa:b3:c4:83:21:
         b7:c2:97:94:9d:52:0e:46:30:df:83:5f:47:02:49:c7:59:df:
         c1:4f:31:c0:7d:ab:d1:76:50:c3:d4:8f:f7:22:82:89:90:f6:
         f2:1f:d5:c8:ca:66:a0:d9:ec:dd:70:e1:39:c5:7b:b4:9b:6f:
         d4:cf:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----