Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
File:                     M3RPEtwtkNArK4aFUwjsHAeEk8w.cer (raw, json)
Hash identifier:          XTJCba9M4IHQ3eiyY/flP3FW816gzOdp2JXs+PEodyk=
Subject key identifier:   33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E4D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:29:15 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37568
                          IP: 196.220.96.0/19
                          IP: 2001:43f8:10b0::/48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11853 (0x2e4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:29:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36693F7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:ba:a1:03:2e:a0:5a:7a:47:c7:94:ec:4d:
                    8a:d9:f9:67:90:2a:99:d1:bd:91:70:8a:99:b5:10:
                    81:df:36:d0:fb:02:26:2d:33:ea:2a:6a:82:ae:68:
                    bc:b4:e6:1f:67:a4:06:8b:7f:ba:81:a7:dd:e8:23:
                    e8:bc:e8:04:c0:9d:0f:31:68:f5:2a:3c:6d:cb:af:
                    38:c6:d4:e5:1a:0d:81:19:e5:c8:2d:33:1c:a3:01:
                    ba:f9:db:3c:1f:34:3d:7d:71:74:d2:e2:71:14:1d:
                    24:3e:9f:18:34:e3:66:ac:48:50:29:69:79:6d:75:
                    78:4a:0a:79:8b:3c:ad:be:af:ac:3b:2c:40:83:50:
                    0e:ce:3f:67:ac:2c:44:d1:33:65:89:df:d5:16:5c:
                    82:55:eb:e7:16:15:b6:db:7d:c6:15:c8:65:d0:12:
                    63:75:64:f4:30:a7:83:62:5c:52:16:48:1e:49:48:
                    ab:f1:a4:d5:c3:f6:7b:a0:0f:64:da:34:aa:00:89:
                    c9:5f:c1:67:2e:c8:56:d4:c6:37:19:29:c1:1b:d4:
                    7f:a5:c7:e5:e0:01:b4:71:4c:f6:b1:dc:8a:c4:1a:
                    26:6b:80:ae:bc:f0:f3:3f:8d:14:5e:d4:40:8c:f6:
                    48:ba:fd:be:c8:75:01:4b:80:27:68:58:d2:76:26:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37568

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.220.96.0/19
                IPv6:
                  2001:43f8:10b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:82:6a:87:cd:a1:9d:9b:a7:c3:48:08:6d:27:68:ce:4b:35:
         61:7e:0c:96:91:9c:c6:e8:93:4f:7b:2a:35:25:ba:32:df:f2:
         7e:d5:7f:11:84:c0:b0:b0:c4:9f:41:1a:83:2a:75:57:aa:c5:
         cf:67:5a:19:14:be:31:26:34:cb:18:1b:01:94:71:45:f5:6a:
         02:c9:2e:8a:a4:a0:49:92:00:3f:1d:69:b8:97:8c:0a:91:11:
         dc:e9:4e:13:10:df:e4:ae:54:c1:75:e9:2d:14:13:3e:85:8e:
         71:0e:8f:51:40:1f:2e:e1:07:33:56:f1:3e:a0:aa:7e:f1:32:
         95:c8:83:15:5f:84:71:12:e0:7c:81:d0:8f:a5:86:f1:a1:1b:
         ff:57:8f:e0:1a:b0:75:5a:87:a7:76:75:6a:f1:b5:d0:8b:f6:
         f9:07:84:00:4f:35:a6:94:43:30:5c:c1:16:ec:22:db:a8:c6:
         b4:4f:dc:cc:c0:5a:3c:d8:9b:9e:c2:b8:d8:52:6e:02:b7:66:
         99:a1:cd:dc:f0:0e:06:04:2e:61:3e:66:a9:02:24:89:0a:4f:
         6b:3e:c5:6b:38:dc:7f:54:57:bd:83:12:8b:07:2f:04:41:b7:
         c0:f1:1b:e8:da:bd:b5:f2:14:74:d4:31:40:65:61:8a:b0:ae:
         8b:ad:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----