Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer (raw, json)
Hash identifier:          T+xa4yWuS2CsP1ysqkgMZ/aclwnHe637paHgyIXV5L4=
Subject key identifier:   5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2D5F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:39:15 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329266
                          IP: 102.212.0.0/22
                          IP: 2c0f:4740::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11615 (0x2d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 00:39:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3627065AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:01:50:c7:b0:35:37:53:9c:86:9b:0d:f5:
                    c2:9d:72:98:fa:f1:6e:53:e2:08:a0:d3:61:28:b8:
                    15:6e:0b:50:d1:26:3f:a9:7b:00:09:77:2c:0f:f0:
                    d4:28:d7:84:90:c9:f3:b8:e6:67:1a:93:f7:ea:2c:
                    32:7e:da:42:60:30:52:3d:b4:9a:17:d9:dd:02:68:
                    04:08:6d:66:e6:52:80:18:89:45:d5:a7:d5:fa:49:
                    f4:6a:2b:0a:98:1b:27:84:9f:27:c3:76:a3:34:fb:
                    a4:f7:ab:2f:c6:d0:3e:db:89:df:fa:e4:d0:03:d9:
                    ad:d5:95:0f:f8:ed:06:9d:23:dc:c9:01:60:a1:e0:
                    ce:d5:31:d4:3a:15:74:e6:2e:c9:f4:90:fe:4a:21:
                    f5:4d:8b:87:f3:3e:2d:da:40:dd:f9:6f:bd:37:9f:
                    6b:bf:41:7f:35:77:32:8b:38:a5:ca:07:e6:19:1d:
                    f7:4b:d5:46:88:3b:8c:9b:4d:20:3a:81:80:46:5f:
                    ca:d4:17:23:fa:58:a7:f3:58:84:4d:4a:b5:b8:52:
                    53:a2:57:0b:2f:97:5e:2e:83:07:ed:c1:ee:82:2b:
                    a6:fd:96:68:38:9d:1d:66:fb:57:3a:a0:42:26:65:
                    d5:27:82:de:b1:26:7e:a0:65:61:fd:b1:66:d5:c1:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329266

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.0.0/22
                IPv6:
                  2c0f:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:07:ae:bf:3e:d7:94:4f:64:7e:2e:1d:e2:55:33:bf:50:73:
         eb:ec:01:c5:e6:48:40:d3:3f:52:f0:88:ca:51:3d:64:ee:2c:
         85:4e:57:d9:dd:6e:78:2a:ad:c7:09:e9:6d:c1:9e:fd:f7:0d:
         8a:f7:2a:df:33:12:54:b3:05:30:cd:c0:fa:65:7f:40:fb:a3:
         c4:8b:03:84:48:9d:f1:a3:25:58:48:eb:38:6f:bb:a1:9e:1d:
         19:de:3c:85:1f:0c:60:09:45:81:d9:44:d9:c4:b3:36:52:62:
         19:39:36:cf:03:78:0e:c3:aa:84:6c:a2:48:ae:74:78:4b:2b:
         05:03:c8:96:db:27:80:72:42:84:d1:c9:b5:66:97:bc:3b:4c:
         a2:41:6c:a9:ea:2f:86:60:f5:a0:14:6c:9a:1e:81:d5:16:5e:
         f0:aa:fb:65:0b:3a:35:0e:08:d5:55:bb:dd:ec:94:ab:ce:f5:
         bc:9a:eb:24:76:0f:ab:9d:92:e2:3f:e6:c4:94:2f:6e:e4:ba:
         73:de:0a:19:5a:17:aa:0f:ba:9d:7f:7d:c8:9c:2d:2f:0f:df:
         38:c6:91:d9:a0:27:3a:be:7c:ed:37:d3:9a:50:e7:44:20:2b:
         a0:af:77:2b:4e:f5:5d:35:60:d5:6f:6e:74:74:f1:c2:6f:72:
         25:24:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----