Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.cer (raw, json)
Hash identifier:          l9UhRCUtq2IlGfC/Ix9NFBYXO8A9MyWJtRBQtHmD9FI=
Subject key identifier:   2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2F25
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:13:24 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328915
                          IP: 102.218.204.0/22
                          IP: 2c0f:2900::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12069 (0x2f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:13:24 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365BC44AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:52:8d:f5:c1:56:bb:8a:a5:e9:20:42:97:
                    5f:fb:9f:1a:72:a1:ab:54:a2:2d:03:a3:d6:f1:e1:
                    f4:96:22:94:42:24:b6:56:38:56:90:72:eb:bd:13:
                    5b:aa:25:3c:0c:8e:d5:db:0b:99:27:a0:61:e8:7b:
                    00:a5:96:d1:87:d5:9a:50:22:b9:c9:b6:39:f4:f6:
                    1a:2b:89:96:ce:77:18:70:f1:d8:62:7e:54:a1:a0:
                    df:2b:8f:72:35:74:7c:75:64:25:dd:96:6d:70:6c:
                    6f:6e:e3:88:2f:ac:74:9b:ce:4c:2d:a4:32:0f:e4:
                    9b:ef:98:86:4f:49:8e:9b:b7:c6:4c:54:89:48:e2:
                    23:d5:80:3d:53:8e:82:92:48:d7:35:24:0e:ed:6c:
                    71:36:9e:10:e0:85:21:2a:a4:3d:a7:c1:ff:39:5d:
                    3c:91:83:01:6a:fd:87:df:de:77:97:ed:da:2f:31:
                    2d:2b:0e:4d:a5:ce:99:58:8a:85:f3:f4:66:4d:d8:
                    8f:a7:88:78:cd:4f:ac:da:69:f2:37:27:b3:4b:d7:
                    30:8a:f2:c9:59:a2:d7:18:c8:7d:88:90:4c:d2:e8:
                    93:89:4a:63:84:18:82:7f:89:1c:31:3b:b4:f7:f0:
                    39:11:33:1a:87:69:e7:2e:84:85:6a:7a:9a:83:da:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328915

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.204.0/22
                IPv6:
                  2c0f:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:4e:73:c4:6d:b0:db:a1:ff:4d:35:44:05:9b:0e:07:1b:
         b0:4a:85:d8:09:49:c7:f3:c5:18:f1:9f:e0:d3:c1:07:be:c7:
         b0:74:e7:3a:4d:57:e6:4b:7c:1c:89:04:ac:c8:22:e7:d8:15:
         ea:4b:aa:1b:3e:57:c5:a6:e8:bd:ad:e8:bb:d9:79:f7:9f:e4:
         bf:88:db:16:9c:03:e0:66:19:b8:d3:30:a3:17:e0:79:75:a7:
         95:67:e7:c6:b2:b8:8c:c1:99:c7:1b:d9:ac:5b:0b:5d:f4:36:
         11:18:f8:72:e3:77:78:99:ac:53:44:aa:fb:02:c1:d2:75:b6:
         0c:99:8e:de:12:f0:d8:04:6f:5b:25:e2:29:84:90:0a:02:4e:
         fa:94:82:32:49:cd:a3:48:eb:7b:87:48:74:44:3b:a7:cd:90:
         6e:bd:c1:83:df:0b:1d:9d:91:c7:c6:a6:b7:fd:88:63:e4:95:
         a1:0a:28:a6:77:e5:71:fb:ec:7c:58:24:5e:20:97:08:17:87:
         39:d4:13:bf:23:22:75:92:0a:9a:b0:ad:20:ac:f6:da:20:06:
         27:cd:13:29:b6:e1:31:b1:15:74:28:12:76:ce:8c:48:6b:09:
         11:13:ea:81:52:95:8e:0d:0f:c0:40:35:95:ea:9d:80:31:4d:
         c8:fd:d7:1a
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLyUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjEzMjRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjVCQzQ0QUYxMTAvBgNVBAUTKDJEMDAxNTRFNjAwQTY0MEFDMzJBMzI4
NUQ5Q0U5RkM1MEE5NDFBQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA+1KN9cFWu4ql6SBCl1/7nxpyoatUoi0Do9bx4fSWIpRCJLZWOFaQcuu9E1uq
JTwMjtXbC5knoGHoewClltGH1ZpQIrnJtjn09horiZbOdxhw8dhiflShoN8rj3I1
dHx1ZCXdlm1wbG9u44gvrHSbzkwtpDIP5JvvmIZPSY6bt8ZMVIlI4iPVgD1TjoKS
SNc1JA7tbHE2nhDghSEqpD2nwf85XTyRgwFq/Yff3neX7dovMS0rDk2lzplYioXz
9GZN2I+niHjNT6zaafI3J7NL1zCK8slZotcYyH2IkEzS6JOJSmOEGIJ/iRwxO7T3
8DkRMxqHaecuhIVqepqD2p/bAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQULQAVTmAK
ZArDKjKF2c6fxQqUGrMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1QkM0NC84OTJENDlDNkY2MTgx
MUVDQkUxQjM4QUZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJDNDQvODkyRDQ5QzZGNjE4MTFFQ0JFMUIzOEFGRjEyMjI0NjgvTFFBVlRt
QUtaQXJES2pLRjJjNmZ4UXFVR3JNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBNMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2swwDQQCAAIwBwMF
ACwPKQAwDQYJKoZIhvcNAQELBQADggEBAG+8TnPEbbDbof9NNUQFmw4HG7BKhdgJ
ScfzxRjxn+DTwQe+x7B05zpNV+ZLfByJBKzIIufYFepLqhs+V8Wm6L2t6LvZefef
5L+I2xacA+BmGbjTMKMX4Hl1p5Vn58ayuIzBmccb2axbC130NhEY+HLjd3iZrFNE
qvsCwdJ1tgyZjt4S8NgEb1sl4imEkAoCTvqUgjJJzaNI63uHSHREO6fNkG69wYPf
Cx2dkcfGprf9iGPklaEKKKZ35XH77HxYJF4glwgXhznUE78jInWSCpqwrSCs9tog
BifNEym24TGxFXQoEnbOjEhrCRET6oFSlY4ND8BANZXqnYAxTcj91xo=
-----END CERTIFICATE-----