Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
File:                     gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer (raw, json)
Hash identifier:          D+p+au9cw8kD7VwkXNL1v+XRKeLzQQqPJoweaYz5j8k=
Subject key identifier:   80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E2A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:22:02 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37204
                          IP: 41.220.16.0/20
                          IP: 102.213.40.0/22
                          IP: 197.221.224.0/19
                          IP: 2c0f:f758::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11818 (0x2e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:22:02 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36406B8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:86:f0:19:34:c7:58:9f:bc:7c:0e:f8:75:
                    70:74:c0:21:f1:bb:83:c3:b0:6f:06:2a:18:3f:53:
                    92:ad:33:0d:0d:8e:c7:b4:70:0f:f1:d3:d6:af:28:
                    04:99:dd:49:f9:1a:de:47:42:a8:1c:e5:83:4e:91:
                    20:c9:14:7b:77:00:f9:b2:d8:d8:e5:c0:aa:25:45:
                    57:4c:11:de:96:db:40:0e:8f:49:b2:51:16:b1:ac:
                    bf:15:cf:7e:71:c9:86:46:fe:64:eb:6c:57:e2:9b:
                    42:89:88:39:11:34:23:fd:e6:e0:33:b8:ed:40:e9:
                    71:26:f7:f6:cb:59:e7:82:2c:b0:ce:59:5f:7b:6a:
                    7c:5e:a2:46:f2:fb:3e:93:2a:61:e1:7b:ca:69:b4:
                    ce:3f:5a:7d:30:d5:94:03:df:77:96:08:6e:82:ff:
                    bd:ce:08:c2:62:c0:09:82:bf:d9:ab:88:63:c0:07:
                    ce:97:74:fb:2f:03:7d:b4:52:9b:3a:a1:15:18:97:
                    2a:11:bf:37:64:bc:d2:96:85:48:07:fa:be:09:d8:
                    e3:61:30:7b:5c:89:79:86:9f:b6:20:25:90:1e:e5:
                    f6:6f:bd:8c:7c:2a:89:89:67:41:a2:0c:54:7c:07:
                    53:e0:cd:1f:4a:35:7e:5b:93:e0:50:ad:17:77:7e:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37204

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.16.0/20
                  102.213.40.0/22
                  197.221.224.0/19
                IPv6:
                  2c0f:f758::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:44:05:e6:ba:97:fc:3b:30:05:a5:98:9f:48:bf:cc:7c:
         07:b5:ad:15:39:99:9d:91:ef:6c:90:27:c0:24:94:97:7c:d8:
         63:1b:b3:07:36:f4:fc:8b:14:ab:7b:67:07:d6:58:9e:2b:0e:
         0f:3d:f0:72:11:8c:a1:0e:83:14:82:90:8d:d4:ae:a5:cb:64:
         46:b2:76:be:91:5b:0f:8f:d0:56:d0:9b:11:37:cb:22:a8:4a:
         ac:ca:2d:82:53:75:3d:98:b2:63:6e:d2:dc:9e:f3:e8:36:ed:
         f8:e5:ce:c0:83:ab:a1:38:59:1d:a5:f4:97:db:0e:bf:60:bf:
         12:2c:df:3b:36:bd:c1:23:75:af:df:4f:9c:3f:cf:6f:a2:4a:
         96:a7:cf:6b:4c:c9:dd:44:07:91:9d:33:15:ae:e5:96:6c:07:
         f5:9b:37:c8:81:09:61:d4:e5:d6:6f:95:d3:ce:14:93:d7:ea:
         67:73:f4:4b:75:12:27:3a:ac:77:58:84:e7:4c:6e:15:a7:b7:
         f1:1e:54:6e:5b:f4:1c:a7:f9:09:a5:d1:2a:5d:9f:33:86:a4:
         96:17:e0:15:b8:7b:fc:69:aa:2a:a6:56:ef:45:bd:b7:af:7a:
         3e:19:92:b0:c9:c0:5c:3b:ac:a6:2c:1c:31:82:9b:44:ca:57:
         1d:9d:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:55 2025 by rpki-client