Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
File:                     e-hZtChr4eoUuIx6MLXOT9hZgOw.cer (raw, json)
Hash identifier:          5WOjolFyzizfIP6dbz0l1Y7RjAF4XdE3OBYkFkfTDIo=
Subject key identifier:   7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2F8C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:34:04 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328568
                          IP: 102.23.88.0/22
                          IP: 2c0f:ead0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12172 (0x2f8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:34:04 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36B7955AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:49:d2:2d:51:e4:c4:23:c7:8b:fb:f2:72:
                    a4:3b:f7:4c:cb:b5:a3:d1:40:95:7d:3c:43:18:58:
                    69:9d:9a:10:1b:f0:6d:9e:d0:d3:86:6d:26:a2:48:
                    2c:64:a7:14:10:66:9b:95:14:85:26:15:55:7e:a3:
                    99:28:aa:02:c4:a1:46:ab:ac:cc:9a:dc:d7:79:d6:
                    63:e1:50:1a:a7:cc:ac:7e:c2:bd:14:80:af:b3:16:
                    a8:3f:9b:db:3a:56:93:b3:0d:ab:58:24:79:7e:d8:
                    06:1b:95:e5:77:13:79:67:f9:17:9a:72:cd:61:9e:
                    7e:23:c0:b7:5c:78:56:f4:ba:9f:3e:3d:e2:01:ee:
                    ef:73:e7:13:0b:93:bb:36:93:fa:df:5f:c1:89:37:
                    a0:7f:27:dc:ec:70:ad:fa:61:6e:bf:2d:f4:9b:45:
                    c7:2c:f5:82:dc:c3:ca:f9:0b:52:02:06:ae:54:b5:
                    c9:ac:b5:10:f2:21:fc:fb:cc:3d:4f:61:24:a7:27:
                    48:70:f7:71:03:a7:f0:d8:7c:03:17:2c:38:10:23:
                    a6:e0:68:f0:5c:ca:73:ca:d7:ae:b8:f1:73:6d:e8:
                    8f:88:0d:82:c5:d5:98:1c:f5:62:64:8a:63:dd:2a:
                    46:82:5d:e8:1e:5e:70:85:1e:21:2f:3c:dd:b4:35:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328568

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.88.0/22
                IPv6:
                  2c0f:ead0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:f2:91:80:41:90:7e:43:2a:07:75:72:db:d4:84:9b:b6:d0:
         0f:ee:ea:45:ab:59:2f:58:e4:34:33:b6:66:4c:b6:f1:60:9e:
         af:20:53:dc:f7:aa:25:dc:d6:18:34:6d:e5:f8:0c:0c:04:44:
         36:cc:35:83:a2:7e:d0:0c:67:1b:93:7a:44:a9:e3:ec:c4:c9:
         c0:21:c2:af:12:b9:a9:a9:9a:4d:f6:20:e9:d9:61:7e:4e:7e:
         0d:8b:15:c6:c7:5a:e0:75:38:c5:99:53:ef:e2:6a:52:54:d9:
         3e:b4:bc:c7:41:ff:48:cb:bc:3c:a9:2c:21:20:81:05:e8:3f:
         51:c3:63:6e:1b:aa:88:c5:eb:a5:55:37:64:79:53:2b:19:58:
         28:6c:c8:2f:a3:5c:d2:e5:3b:58:44:57:01:7a:e3:a7:0e:88:
         18:82:e6:d5:1c:09:1d:15:dd:46:60:e2:42:67:be:8d:1b:9a:
         f6:cc:79:d0:66:d9:db:8d:b4:25:8c:45:24:2e:fe:4d:79:38:
         4f:96:be:d3:78:4e:e0:54:bc:13:48:ac:a0:42:52:1f:81:a7:
         05:24:ef:d8:71:f8:38:df:da:74:f8:6b:e3:64:df:64:7c:ec:
         05:51:82:7f:27:c1:f9:1a:21:30:d8:ac:c8:05:95:f7:b7:9e:
         01:ce:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----