Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IQFErQIljXpdESJb_ZmB2YGGm34.cer
File:                     IQFErQIljXpdESJb_ZmB2YGGm34.cer (raw, json)
Hash identifier:          rJ99SqoGrAaIiW4bWvvBO0ccKpcb4xPqv01mNT6Vcv4=
Subject key identifier:   21:01:44:AD:02:25:8D:7A:5D:11:22:5B:FD:99:81:D9:81:86:9B:7E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       1A50
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/IQFErQIljXpdESJb_ZmB2YGGm34.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 12 Oct 2022 19:45:10 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 328785
                          IP: 102.215.128.0/22
                          IP: 102.221.100.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6736 (0x1a50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 12 19:45:10 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36B24EBAF/serialNumber=210144AD02258D7A5D11225BFD9981D981869B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:57:6f:89:ee:61:b3:30:b6:62:fe:86:11:
                    5f:50:46:17:7b:ba:8c:e4:03:4b:b8:28:bc:a6:10:
                    0a:39:1c:57:56:f4:31:70:28:7b:c2:14:9c:ed:96:
                    0b:f9:66:ab:e5:8c:b5:7e:d8:f6:96:c2:12:a0:3c:
                    09:5d:7d:c9:10:70:7d:ce:8f:ab:25:65:d9:97:19:
                    73:24:55:80:e9:6c:58:61:c2:a0:3a:e9:34:e8:49:
                    b9:8f:f9:14:73:5c:bc:b7:ec:93:ba:ed:b8:86:5c:
                    7f:c5:17:7e:36:da:1e:44:99:3a:48:76:e4:a6:2a:
                    03:a7:ab:02:49:03:67:60:0d:8f:0d:10:73:72:ae:
                    bb:cc:55:4f:fe:79:8a:78:fc:e2:18:d5:d4:e7:40:
                    19:b6:9f:70:4d:ba:c2:ba:0c:06:1a:87:eb:22:52:
                    17:e1:ec:5c:fd:69:9e:83:1e:16:a2:c4:ab:f2:e2:
                    03:1c:89:78:ae:d7:82:80:60:cd:07:37:f3:34:22:
                    5f:58:cd:2d:17:6f:ce:5f:5a:a9:0d:ff:d1:5e:82:
                    0c:a6:dd:f5:36:87:f4:09:e9:94:a5:59:0d:0d:1c:
                    02:35:9c:00:d5:c4:29:84:d4:c0:7e:61:83:c7:ec:
                    d6:7c:d9:3a:4b:a7:45:49:71:fa:23:9f:cf:17:ff:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:44:AD:02:25:8D:7A:5D:11:22:5B:FD:99:81:D9:81:86:9B:7E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/IQFErQIljXpdESJb_ZmB2YGGm34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328785

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.128.0/22
                  102.221.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:67:77:5a:33:85:4a:5e:dd:c4:ea:e1:81:cf:87:66:23:
         49:2c:79:e1:ad:36:04:28:7b:5b:a3:75:75:46:4a:fe:88:87:
         08:d8:72:ff:86:b0:e2:fa:50:73:99:c4:b9:2c:e9:d4:19:d6:
         39:d7:1a:82:f0:c4:b1:b7:54:3c:28:48:4d:30:bd:2e:20:5c:
         4e:16:e6:04:0e:c2:ef:6e:35:aa:84:f3:39:14:83:24:b6:87:
         6a:96:c7:3c:a8:5c:c0:ac:a1:d7:fb:d0:7d:4c:7d:ed:c2:16:
         91:02:49:e8:0d:ae:3f:28:61:73:19:b3:a4:c3:5b:b8:92:87:
         2f:ae:12:0e:c2:23:f4:e4:a0:6e:f4:de:8c:d6:2b:36:87:0e:
         2f:aa:22:62:bf:27:81:83:f3:a7:5a:60:de:a7:b1:9c:30:1b:
         5f:dd:e5:3b:bf:2a:99:22:c5:24:02:0a:d7:ec:85:34:50:59:
         4d:68:ce:3c:2c:4a:5e:57:64:e3:53:61:4a:9b:01:a6:19:08:
         0d:e0:fe:53:24:55:a0:13:8c:ef:20:90:cb:d4:b2:a2:1c:70:
         3f:a5:6e:f0:e4:f8:d1:18:5c:77:88:e8:03:3d:72:b2:ff:11:
         11:b2:c8:ee:6e:ba:04:2f:ba:d2:b8:0f:61:99:3b:b6:f1:f6:
         d6:9f:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----