Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_r9_454NpaYN1sjcZoHO9aJGKC4.cer
File:                     _r9_454NpaYN1sjcZoHO9aJGKC4.cer (raw, json)
Hash identifier:          6/XVXZhPxquZGIdRQWrX6d35jO1y4Z2nFkN/EsNyvxA=
Subject key identifier:   FE:BF:7F:E3:9E:0D:A5:A6:0D:D6:C8:DC:66:81:CE:F5:A2:46:28:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       1565
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/_r9_454NpaYN1sjcZoHO9aJGKC4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:17:02 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 327811
                          IP: 196.13.106.0/24
                          IP: 196.43.250.0/24
                          IP: 2001:43fd::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5477 (0x1565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:17:02 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F3646C24AF/serialNumber=FEBF7FE39E0DA5A60DD6C8DC6681CEF5A246282E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:53:ad:49:ac:b6:56:a2:05:c6:bd:f3:a9:
                    00:ff:67:b4:42:53:2e:8a:43:df:0f:5d:0b:8f:d1:
                    2d:18:e9:f1:0d:49:d0:c4:7f:f7:04:2b:73:6c:98:
                    40:bc:6b:64:01:2a:02:55:43:df:3e:7d:56:db:ae:
                    61:dd:92:16:f5:2d:d0:a9:3e:f6:cd:73:32:2e:87:
                    c8:fc:71:f8:ee:25:4f:df:bb:2b:bd:49:6c:c0:f2:
                    1a:71:7a:cb:4c:8e:d6:4e:c7:95:36:fc:b7:74:0b:
                    7d:df:a7:62:b0:d1:b0:d8:c7:8e:7c:4a:ae:f7:8b:
                    0e:78:ed:42:ff:db:ec:b8:cc:03:ae:c0:c6:74:38:
                    82:4b:e3:5c:7d:35:f4:ae:5a:50:ba:ec:be:c4:be:
                    f0:6f:d3:e5:79:89:02:39:4f:87:1c:6e:ee:b5:1b:
                    e1:7f:a9:50:46:9e:f8:b1:ad:af:33:dc:be:23:0a:
                    d5:7c:d2:99:ac:80:df:2f:85:e7:c6:28:ba:e3:3b:
                    d7:8a:bd:4a:64:cf:a7:2a:1a:fc:10:7b:67:d6:86:
                    16:19:19:eb:3e:63:0e:6c:f8:ff:20:98:88:f4:49:
                    8e:5e:b9:61:ce:a8:f9:27:ff:e5:3b:6f:b1:64:39:
                    e7:6b:d8:50:f1:ff:5b:3a:81:c8:dc:45:4e:f2:7c:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:7F:E3:9E:0D:A5:A6:0D:D6:C8:DC:66:81:CE:F5:A2:46:28:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/_r9_454NpaYN1sjcZoHO9aJGKC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327811

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.13.106.0/24
                  196.43.250.0/24
                IPv6:
                  2001:43fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:63:55:41:bc:1c:2f:ae:d6:d7:5f:6e:53:b3:b6:da:15:35:
         34:4a:aa:40:e3:30:34:a8:7d:33:7b:ee:de:77:83:cc:2f:90:
         52:11:70:3f:a4:5b:58:cc:bb:4b:d7:dc:9e:65:2f:17:ad:65:
         16:38:b7:2f:b3:a9:a8:92:ef:43:00:f1:12:3f:1b:75:1b:7f:
         b4:5a:b7:01:6e:25:17:b8:8d:8a:48:80:f6:67:ee:96:97:8c:
         56:65:ab:f8:8c:26:c7:5c:01:b2:7e:f3:23:96:e2:92:86:b3:
         97:de:6a:ad:90:76:c1:78:81:14:8c:5f:bd:8f:a6:50:2e:c5:
         9f:8c:91:77:56:67:12:77:3b:ba:8e:eb:8a:ee:cb:35:25:40:
         95:89:01:1e:e0:9c:57:f6:5e:11:4e:2b:42:79:5f:36:65:8d:
         5d:f8:72:95:4c:98:1a:4b:cb:04:0d:62:5d:b3:0f:0e:c8:3b:
         20:c7:7f:b8:86:6b:3d:e2:02:92:9b:c8:c5:0a:9a:65:5b:3f:
         19:18:08:0b:31:fc:0b:aa:6d:59:f4:98:d2:16:ab:b8:c8:e9:
         49:3b:ea:9b:ba:76:3e:d0:e9:e0:ca:75:60:17:d9:f5:b1:4e:
         12:5d:3b:e5:8b:7a:06:9d:40:fd:9c:1e:cb:f2:6f:d8:dd:ba:
         58:1f:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----