Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fr3iqg5CdX8lyf2_Gp-NM23yu2c.cer
File:                     fr3iqg5CdX8lyf2_Gp-NM23yu2c.cer (raw, json)
Hash identifier:          Gf9dTX+YfnkUs8vluLJvHhM5vmYCh5YkKGRgE7J0bwA=
Subject key identifier:   7E:BD:E2:AA:0E:42:75:7F:25:C9:FD:BF:1A:9F:8D:33:6D:F2:BB:67
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       1C5F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/fr3iqg5CdX8lyf2_Gp-NM23yu2c.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:36:12 +0000
Certificate not after:    Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 37183
                          IP: 41.85.192.0/19
                          IP: 196.29.32.0/21
                          IP: 2001:43f0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7263 (0x1c5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:36:12 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=F36505B2AF/serialNumber=7EBDE2AA0E42757F25C9FDBF1A9F8D336DF2BB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:70:52:d8:c6:e4:62:a5:56:6c:ed:1e:69:
                    e2:dd:fc:70:96:c5:91:cb:50:bf:6e:8e:25:50:42:
                    fd:30:07:40:8a:07:69:17:57:10:3d:c7:35:c3:96:
                    bb:dd:9c:35:2d:07:10:db:8f:e0:a4:9c:02:1e:54:
                    f9:33:e1:b9:3c:42:55:3f:da:e9:b6:06:7a:93:89:
                    32:f8:33:7f:14:36:fd:ec:b4:4e:44:2b:4b:b7:88:
                    d6:f7:4e:d7:31:15:ac:29:8a:86:91:aa:cd:9e:5e:
                    aa:8c:0f:94:49:b3:d4:56:3f:72:43:bd:0a:cc:43:
                    34:8d:73:7d:f4:2f:ff:db:88:19:67:59:d7:d0:5d:
                    a1:78:87:4b:a7:96:80:29:30:0c:6d:f2:b2:c3:34:
                    fe:18:96:e2:91:b9:25:f6:49:a6:e4:dd:16:01:c7:
                    f2:8a:cb:10:d7:f5:84:8a:c8:e8:26:06:46:ac:8c:
                    e8:f7:c1:ae:95:47:40:2e:90:6e:45:d9:4b:4f:4d:
                    1f:52:ed:67:ff:b7:e3:d3:77:84:d0:1d:8c:2a:61:
                    c5:c3:cc:4b:29:7f:e6:c3:7a:db:46:d7:92:60:f1:
                    79:77:60:5b:92:f1:41:6a:11:6f:e2:c4:7d:b6:2b:
                    fc:35:1d:7b:c8:bb:2e:87:51:b1:d1:1e:26:6f:28:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BD:E2:AA:0E:42:75:7F:25:C9:FD:BF:1A:9F:8D:33:6D:F2:BB:67
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/fr3iqg5CdX8lyf2_Gp-NM23yu2c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37183

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.192.0/19
                  196.29.32.0/21
                IPv6:
                  2001:43f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:7e:1b:e8:83:26:7c:da:99:57:e0:d3:d0:c8:38:8a:5a:
         74:7d:2e:d7:b6:cd:8f:3f:bd:6f:70:ed:ac:10:37:dd:5d:a5:
         b4:73:5a:4a:48:9f:bd:fc:51:de:1d:f6:a0:36:a6:6a:13:af:
         71:a8:2c:81:e8:bb:c0:8d:8d:18:b8:2f:5d:5a:96:d4:58:9e:
         ec:e5:f6:8a:a9:1e:ba:61:94:e6:12:17:a7:0e:9e:1a:88:40:
         05:fd:f1:60:83:e8:00:17:25:2b:2f:37:65:7e:01:ba:8b:67:
         16:8d:0d:21:24:f9:20:4a:02:0c:22:fe:f1:c2:f1:b4:84:85:
         53:46:82:b6:68:0f:58:d5:14:e7:0a:a6:ef:3c:a4:12:21:3a:
         4a:84:a9:af:73:65:ab:78:fc:68:63:b7:ed:17:86:43:55:20:
         8f:57:b6:bc:4a:d4:33:11:58:02:73:7f:87:5c:d2:a3:db:3f:
         1d:0a:4b:29:e8:cf:84:c2:ae:cf:34:1e:6b:cf:4e:77:6c:95:
         75:e6:e2:01:22:83:72:0a:4c:b0:5e:0e:e7:9b:96:40:4a:e6:
         a1:e0:8d:92:f7:75:40:41:5f:cd:ab:a4:ba:e6:85:18:ef:18:
         e9:f6:91:50:26:89:04:48:42:9f:d4:0f:21:73:d7:6f:9c:93:
         3f:aa:41:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----