Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
File:                     ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer (raw, json)
Hash identifier:          sOqcS2zf+6Zk4ghyMKeaWg4vB9yhntzMVv4Zbcy70NQ=
Subject key identifier:   64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3051
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:13:58 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328563
                          IP: 196.2.8.0/21
                          IP: 2c0f:f908::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12369 (0x3051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:13:58 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367B560AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:57:21:0e:90:45:43:ce:7f:c1:e4:b9:48:
                    83:07:fe:ad:5c:32:86:f2:80:f3:62:80:70:bb:4b:
                    67:d0:91:82:ec:5c:03:9c:78:9d:9d:dc:66:51:6a:
                    7a:20:0f:98:11:c3:03:23:9a:80:ec:77:b3:b2:62:
                    ae:6d:2b:6f:d0:45:b5:40:01:f1:80:85:0b:87:2e:
                    1d:21:e8:6b:2f:40:be:ba:49:6f:40:29:da:3b:cc:
                    77:77:cd:5f:7a:d3:4c:a8:1d:6a:05:f1:ed:29:64:
                    c6:53:ed:1d:47:04:08:41:4c:8c:7c:95:55:ab:57:
                    cc:a5:31:90:db:b0:ca:5c:99:89:fe:3c:d0:b5:02:
                    3e:c3:36:03:27:79:11:cc:6f:bd:4b:2c:78:3e:ee:
                    66:a1:69:f0:79:7b:fc:07:36:28:72:4a:3f:b3:41:
                    32:f3:10:92:6a:4b:00:a2:c7:f8:90:4e:86:53:3e:
                    38:fb:09:39:d4:5e:6c:37:a3:e8:11:94:1a:45:8d:
                    ec:1c:20:72:56:be:56:53:bc:59:93:fd:95:f3:15:
                    00:bd:cd:0a:ea:95:b3:e3:a8:78:7b:da:fd:2f:5b:
                    2b:b0:f5:5f:6b:6d:ad:3e:69:ef:97:cc:49:3b:fa:
                    23:54:13:e3:de:ad:65:96:fd:fc:8d:2e:21:68:0f:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328563

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.2.8.0/21
                IPv6:
                  2c0f:f908::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:55:53:2d:01:5f:66:6e:3f:5e:f1:53:ef:9c:b1:60:5d:b0:
         3b:70:c3:9e:73:7b:7a:19:c2:cb:90:ae:8d:fb:1f:56:5c:da:
         e2:8c:51:13:6f:f5:4c:a7:18:7c:d8:68:8f:84:85:f2:53:c8:
         d7:bb:9b:78:d1:0b:ac:ff:4b:4b:50:b5:d5:3f:f6:33:9b:57:
         e5:45:8c:99:d0:cc:73:8e:57:fd:a1:70:ef:33:a3:88:1b:9c:
         d7:4f:29:0b:96:5c:ec:b7:49:4b:12:35:47:72:85:a6:f2:91:
         56:8b:f9:7b:ed:67:27:39:1d:74:48:e6:2b:fb:d5:72:a9:bd:
         ab:72:fc:d4:af:6c:8b:84:c5:1b:1a:1f:74:a2:5f:b6:d4:b4:
         e7:3b:bd:da:72:fd:e6:fb:21:55:6c:16:0b:c2:81:c5:af:91:
         5e:15:34:24:d8:3e:d5:20:f4:d3:1d:61:e9:c1:23:14:d2:ba:
         92:e1:d4:fd:c6:a1:dd:a6:e3:cf:21:25:a3:46:3a:ff:d7:7f:
         90:45:4b:e4:26:f7:1d:0f:24:c4:67:2f:cf:f7:2c:0e:41:91:
         17:c1:b6:2f:a5:4b:e4:4b:5e:74:61:34:5a:d0:54:7a:4e:2e:
         05:b1:aa:bf:4e:83:ab:ea:9c:0f:1f:36:28:7d:8f:36:f5:ed:
         9b:c0:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----