Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.cer (raw, json)
Hash identifier:          i2/p/zQHIlixYY4MI+jGHk80wOqGhC/Rav6rXILF95M=
Subject key identifier:   4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       346E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 10:04:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329393
                          IP: 102.210.54.0/23
                          IP: 2c0f:17c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13422 (0x346e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Mar 11 10:04:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36DA6FBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:e8:ad:32:4c:d7:9c:de:7d:6a:eb:f0:f1:
                    0d:2e:c8:f1:a2:65:58:e1:72:3a:7a:02:2d:ef:eb:
                    d9:ea:79:0b:8b:b5:57:0e:de:91:4e:0a:09:27:75:
                    13:a6:fe:99:60:fd:eb:9a:5d:bf:eb:ec:e1:dc:4a:
                    21:8e:4c:02:5c:77:54:ee:9c:bf:ba:07:e4:b9:1c:
                    34:56:88:7c:20:d0:da:79:eb:c1:6d:d2:75:d4:06:
                    52:96:41:8c:e6:22:18:6a:65:01:f6:ea:ba:55:39:
                    f9:9c:d4:b4:44:bf:a1:bd:35:ad:1e:4d:1f:74:7b:
                    05:e6:7f:5d:69:6f:5e:a8:54:83:27:6d:9c:f9:ce:
                    e5:39:ae:70:e1:52:3d:b0:14:9c:fe:df:29:8d:26:
                    54:66:44:78:d3:bc:1d:91:1f:91:49:a4:86:09:22:
                    d9:44:54:c1:13:55:fc:3d:0c:bd:86:f1:01:05:2a:
                    1f:b1:86:ef:90:fe:1c:0e:fc:f3:ec:1b:b9:0f:c7:
                    00:fc:32:49:80:34:76:24:54:a0:4b:23:bc:85:f2:
                    ea:fe:ac:68:01:68:41:d4:0f:0a:41:57:61:c2:ad:
                    df:5e:ff:b9:aa:b7:97:c5:80:01:f2:f5:22:b0:16:
                    42:08:05:1b:3b:79:52:74:d6:fe:95:9d:8e:b7:2e:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329393

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.54.0/23
                IPv6:
                  2c0f:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:35:c7:ec:de:c5:ed:fe:74:b3:91:4c:78:f0:eb:a4:48:5b:
         fe:4c:eb:00:b6:91:02:26:81:a8:0a:4d:83:88:08:19:88:9d:
         4d:61:ba:0c:59:9e:8e:b6:ba:5a:cc:49:1b:8e:15:be:46:d2:
         cd:f8:72:1c:68:1b:1e:74:b5:8a:6f:3c:ac:da:4e:ff:b2:50:
         98:e1:e1:1c:c1:0e:24:9d:03:cb:d4:37:69:2d:21:03:78:83:
         94:3c:40:5e:05:09:46:45:52:bd:f4:11:3b:67:54:1f:42:47:
         c0:b5:c2:72:eb:56:5c:d9:74:9f:ac:c1:c1:bc:97:e1:05:3d:
         7d:c8:34:e6:ae:3c:b9:5f:d9:a0:7c:e0:f6:aa:5f:82:9f:1c:
         9f:bd:2b:5a:99:a5:eb:39:b1:8d:8e:a3:49:ed:6d:6e:fb:13:
         54:6a:6c:6f:2b:de:31:30:fe:d1:9c:e8:67:51:56:dc:70:ed:
         56:a2:cc:73:0d:98:d6:c5:73:59:db:32:c2:93:a1:fb:f7:55:
         9a:d2:68:37:48:b0:7d:d7:ea:b8:23:36:06:7b:39:a0:ee:70:
         af:ce:ee:c5:d7:9e:7c:2a:3a:d2:e0:4e:b6:25:e7:3d:94:91:
         18:87:fc:23:e8:69:25:88:72:a5:aa:9e:83:02:1b:64:c6:55:
         32:73:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----