Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer (raw, json)
Hash identifier:          +ohMf8JFGm0RzKm4+Fgw8XWYrdGEEXdxRZ+hFhAnEko=
Subject key identifier:   36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       329F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:19:02 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37212
                          IP: 196.216.180.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12959 (0x329f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:19:02 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C6DD4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:5f:95:ef:86:16:1b:ce:3d:8f:eb:97:4c:
                    20:b6:02:93:c9:95:f9:e1:c7:8c:6c:20:58:5c:41:
                    1c:a3:1b:f1:3d:95:19:f3:9f:46:8d:c8:de:f9:7f:
                    cd:18:77:ef:84:15:c1:39:71:12:ec:2f:21:59:67:
                    a9:8b:50:fd:9e:10:eb:72:6a:41:ac:d6:36:88:1b:
                    15:8c:e0:10:80:73:00:5e:c7:cb:65:a2:74:ca:1e:
                    8a:87:c2:a7:1e:33:38:e5:3b:c3:67:3c:ae:99:b7:
                    c6:59:a1:de:e0:27:6d:e4:49:e9:10:e2:68:0b:5c:
                    6c:1b:28:0a:d4:38:40:ed:27:2c:f2:b7:28:d9:bf:
                    bd:24:3d:d3:40:81:66:a8:70:71:1a:c8:ba:c0:a1:
                    e9:a0:37:dc:a5:4e:b0:ce:44:1b:80:cf:35:fd:2b:
                    ef:41:95:51:3a:bb:c3:d5:7b:6d:1f:35:64:c6:e3:
                    2f:f4:e4:e6:99:e9:b9:c4:f3:30:82:7c:d3:92:77:
                    ba:cf:7d:7b:a3:e3:83:1e:47:5c:7e:99:1b:b1:59:
                    a6:4f:10:27:a1:34:59:9f:f0:89:0c:fb:de:b5:01:
                    b3:eb:85:af:50:4d:24:38:af:be:5c:8f:3c:84:33:
                    53:57:d8:9f:40:4c:a0:60:c0:eb:2b:b8:7a:15:05:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37212

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:fe:30:82:cd:dc:5c:b4:48:49:49:5a:3b:e3:78:2e:60:
         75:a3:95:ea:dc:b1:93:df:63:d3:6a:9b:56:6d:9c:e1:c1:ee:
         56:e1:ff:0c:39:45:22:8d:52:6d:17:94:7b:e1:9f:46:ed:15:
         2f:78:07:62:f3:83:22:c6:34:f4:f5:7b:c4:16:42:d8:00:55:
         a8:d5:df:76:d8:69:0d:bd:e9:12:42:d5:05:2c:7a:1c:fc:49:
         90:8b:91:42:82:06:ca:eb:46:d9:b5:bc:ca:f0:f7:dd:52:6b:
         79:cd:54:11:3f:86:f2:35:a4:38:b2:68:ea:f6:b5:0f:cd:50:
         3a:14:12:55:90:b0:8a:d5:42:94:6c:87:d5:45:ba:5f:b0:83:
         6b:e2:2d:d2:59:a5:04:10:e2:59:7d:f0:80:66:ba:9d:3f:ff:
         22:dc:8f:71:e6:3e:02:21:cf:05:f5:54:f8:1e:8c:c7:2b:6b:
         65:31:8c:25:8b:4e:1c:36:3b:37:e6:9f:e6:18:db:42:8c:2a:
         20:b7:78:72:2d:1a:f8:15:cf:cc:6b:dc:d7:a8:05:84:ba:b6:
         b3:0c:3f:5a:69:7c:c4:4d:6b:c5:d1:da:be:cb:7e:3d:05:41:
         71:28:b1:16:69:d9:6a:f8:7b:fa:80:af:cf:27:da:3a:3e:f8:
         3a:76:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:30 2025 by rpki-client