Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.cer (raw, json)
Hash identifier:          JbH6MQZbIt9ZU9bRf60uepJQ/ztG/6Ox1sFtcyT+pWo=
Subject key identifier:   22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E0A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:15:28 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328029
                          IP: 196.61.240.0/20
                          IP: 2c0f:eb80::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11786 (0x2e0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:15:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F363CC24AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:e0:36:1e:89:7d:4d:87:d2:ca:b3:cd:b8:
                    8b:8b:8a:bb:48:be:7b:ed:21:ef:eb:3d:e9:d4:95:
                    10:5a:c8:72:88:2d:02:bd:fb:0c:31:a6:1c:b2:da:
                    89:26:9c:ac:8c:e8:60:ea:84:14:e2:a2:0b:5e:dd:
                    bd:91:0c:4f:1d:91:cf:7c:e4:ee:7f:8f:b5:f1:7e:
                    6f:c3:cc:c4:62:00:aa:a2:96:5d:1a:aa:32:93:a5:
                    8a:aa:e6:9d:f0:3a:85:29:07:94:fc:87:b7:95:b6:
                    17:0a:89:8c:53:12:8b:79:97:23:9c:8b:55:5e:37:
                    2f:f9:7f:dc:7d:f2:d3:ae:3c:9c:13:72:8b:0b:4e:
                    2f:8d:1f:ff:6e:2a:b7:8a:9a:0d:8c:8a:65:8c:40:
                    b4:83:ed:0b:3e:6d:bb:e0:81:14:af:3b:0e:19:2f:
                    38:25:3e:52:07:15:e6:12:69:8b:92:f9:cd:5f:d2:
                    26:ee:a5:c1:9a:3b:c3:05:dc:7a:7d:72:e5:7e:48:
                    80:47:4d:d2:4d:61:4a:96:75:0c:0e:7c:de:3f:4b:
                    7e:8a:29:d6:4f:e6:0a:e2:9b:37:fd:dc:d2:f3:49:
                    5e:43:67:fb:7e:bc:1b:1a:56:4c:50:31:bc:40:44:
                    cd:81:fb:61:e6:3f:5d:b9:70:d1:39:2d:ad:81:18:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328029

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.61.240.0/20
                IPv6:
                  2c0f:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:f8:d7:bf:70:d1:54:4b:24:c1:32:b5:b6:7e:0b:20:52:
         a3:52:91:f3:bd:86:44:e8:37:eb:9a:32:97:5d:97:8a:51:1e:
         6e:03:71:68:5c:47:8d:d3:0f:d4:10:eb:70:ec:99:5b:76:62:
         e0:54:2e:5c:dd:59:c4:0e:01:6a:ac:73:8c:85:af:cc:e3:1b:
         98:8a:26:d0:dc:4d:49:3d:c3:1f:e6:d4:e1:b0:9b:1a:99:48:
         84:56:ba:10:5a:1b:5b:c3:82:6c:65:34:97:fe:64:3e:5e:cf:
         5f:54:f7:23:b9:c1:f5:88:8a:99:2a:9a:18:91:37:18:17:9d:
         65:d5:e8:b4:c0:20:6e:f7:5e:c3:f7:98:b3:a5:01:08:3b:e1:
         29:d0:c9:86:c2:4a:f6:92:37:0e:03:d9:28:49:6d:80:fb:1d:
         1c:8c:f5:64:a4:bc:7b:c1:c4:0a:f4:0b:be:14:1f:0e:70:e5:
         bd:b5:6e:a4:b9:d2:71:77:27:47:38:95:56:91:37:19:be:c7:
         0f:7f:91:e3:4e:10:d6:c0:3f:97:ff:f3:21:5b:03:12:cc:7a:
         be:ed:04:0b:d3:22:5d:6a:cd:8d:89:ec:4b:d0:7e:77:54:81:
         3c:b0:ad:bc:a6:0a:cd:de:10:94:b7:47:88:cf:b1:08:ef:cf:
         f4:58:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----