Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
File:                     WF4wfCBwCWQDd_LGenl7YYBYcwU.cer (raw, json)
Hash identifier:          GFWuegli5EckwIsfTKv5MKIi2r92aRARdR/rfckimMk=
Subject key identifier:   58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2F31
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:15:42 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328406
                          IP: 102.130.224.0/21
                          IP: 2c0f:ec60::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12081 (0x2f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:15:42 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365C439AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:ee:11:e0:99:2c:65:62:67:cc:29:4f:2e:
                    13:95:3b:03:49:72:fd:74:06:f8:0f:39:69:6b:db:
                    56:ac:dd:e9:28:e7:d3:6e:71:dc:ad:b4:b4:84:b9:
                    ed:69:b4:a1:8b:8c:18:ac:c5:68:19:f6:26:66:07:
                    82:22:e9:7a:cb:a3:56:0e:00:0b:55:e3:14:a6:7a:
                    af:86:aa:0d:41:1f:32:36:8d:57:aa:49:2c:59:11:
                    d4:3c:f9:6a:20:4a:91:58:3e:39:d4:4f:7e:c5:8b:
                    03:3d:c6:b7:bc:56:4d:d1:ea:93:4f:70:88:5e:b2:
                    9b:37:0d:8d:89:58:cf:10:21:22:56:6e:3a:8c:18:
                    71:a4:87:5a:ec:fe:d9:d4:3f:e3:4a:f7:fe:f9:38:
                    c0:db:ab:3b:f7:f3:99:37:1f:d2:8c:62:f8:9c:ef:
                    7f:80:9b:f9:10:03:cc:4b:da:db:76:b6:60:89:0a:
                    83:0e:64:3c:c6:1d:fe:d2:ec:76:15:69:b5:4e:5e:
                    f0:4b:04:6c:9c:6f:5e:ad:65:ac:6a:5b:da:c2:1d:
                    35:7c:d4:2b:03:1b:a7:5f:ab:0f:4e:b4:1b:59:6c:
                    71:5d:99:90:f9:32:ea:6a:29:05:a9:57:0a:e7:e7:
                    35:b1:c3:25:de:97:2d:1f:97:38:d7:df:69:41:16:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328406

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.224.0/21
                IPv6:
                  2c0f:ec60::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:18:89:00:bc:ef:f0:46:57:4a:81:6d:99:ca:ed:20:3e:1e:
         70:b2:54:fe:e0:c5:4c:f5:90:d0:71:cd:de:c6:5e:23:eb:24:
         d0:0d:36:f8:46:79:ea:12:ca:f5:85:05:ac:23:f2:24:3e:e0:
         77:25:63:eb:22:76:91:48:64:37:88:31:6d:c0:4f:7c:4f:53:
         e4:76:76:0c:ec:e5:97:24:d2:aa:59:1e:67:a8:ac:d0:8e:e1:
         c4:02:99:78:d1:56:db:a3:16:b4:f4:4f:da:5c:e0:c4:d4:df:
         03:ad:d5:00:4b:4c:2a:51:39:59:92:be:f4:dc:51:95:e6:51:
         02:dc:16:81:e1:b5:00:05:ab:f9:a7:d3:d7:c3:97:7e:8a:1c:
         9a:22:b7:1d:01:d3:72:76:ff:6a:ff:c3:19:9f:dd:8c:b3:eb:
         3a:8d:c4:a7:d5:68:f9:76:0e:02:8e:72:a6:99:fc:df:67:06:
         46:53:4e:46:87:c9:c0:11:14:86:05:ac:aa:f6:d0:e2:56:92:
         57:7d:ca:45:6b:6a:33:c6:55:67:7a:b2:5d:80:06:3b:d7:0c:
         6b:ef:da:20:8b:c8:80:c5:f6:27:1a:4c:9e:ed:dc:1d:c3:87:
         5f:18:b3:06:db:a8:2f:ca:79:29:9a:ba:07:cf:10:fa:56:01:
         74:49:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----