Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
File:                     hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer (raw, json)
Hash identifier:          Ogmw+qugB/R/zuYbKQ+yqqzAU8x6biFhoBjmLC39P6g=
Subject key identifier:   87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       309D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:29:17 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329276
                          IP: 102.212.60.0/22
                          IP: 2c0f:c40::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12445 (0x309d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:29:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3682B3AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:cc:5e:26:5c:41:25:50:1b:bd:30:4e:5b:
                    37:98:e3:e4:e8:33:b9:64:85:ec:e1:c7:d5:19:ea:
                    99:8f:a0:94:90:e9:e1:fb:69:34:1b:07:7e:9f:5d:
                    3d:2a:81:c3:f3:20:b1:f4:62:0f:d5:a1:35:3e:31:
                    73:b4:b0:20:9c:e7:64:e8:7b:03:e4:5a:c0:a4:33:
                    b9:21:ad:d4:3c:18:b9:d0:e4:00:8e:a3:b0:e9:f5:
                    02:26:32:6c:2c:6a:29:95:08:27:20:79:1a:73:a9:
                    94:dd:64:6e:cd:e8:0a:41:6e:ff:11:db:a1:48:fb:
                    8a:07:07:c1:df:9d:e4:96:87:26:5c:6e:2f:a9:05:
                    8c:fe:af:01:5e:ad:60:a0:d6:7b:df:13:75:70:20:
                    c4:6e:c9:84:02:70:ac:5a:5a:ff:a4:37:cc:c5:a3:
                    ae:b2:5d:de:db:44:f3:be:77:b5:3e:c1:43:d7:2f:
                    55:94:ce:3b:bf:dd:3a:87:06:ae:92:dd:92:8f:d3:
                    30:54:a2:73:f9:dc:9f:95:49:eb:db:31:40:f1:b7:
                    2d:33:40:02:34:72:b6:1e:56:6c:8f:32:7f:ce:39:
                    15:ca:6b:40:58:8f:ab:98:28:af:75:52:ee:ac:8d:
                    88:fa:be:fb:6d:0e:07:9a:60:5a:62:3c:3b:47:d1:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329276

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.60.0/22
                IPv6:
                  2c0f:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:b5:85:0e:12:ce:f7:43:cf:e7:4a:35:fc:03:6c:60:be:
         f0:14:ac:16:9d:52:f4:27:69:11:1f:56:e5:3c:a5:c6:2a:53:
         70:e3:ab:a7:ad:04:75:d9:65:7b:20:a0:14:78:6e:50:86:3f:
         0f:9d:37:70:b2:55:c0:81:b9:02:33:b0:ea:39:7e:75:c4:9a:
         b0:52:13:c0:34:f0:72:5c:84:5b:f7:a5:0e:6c:f0:3f:50:0c:
         5c:6c:99:64:55:9a:40:06:d8:fa:6c:2f:21:ee:26:40:89:6b:
         d2:dd:8a:0a:3d:24:6e:41:77:2c:c5:0e:3b:ca:65:58:5e:9c:
         62:4e:c3:48:c5:15:3d:34:5a:a3:05:fc:62:b0:eb:48:f5:f1:
         11:d3:63:7f:54:e2:14:c8:e0:76:61:d6:9b:a6:a4:60:35:58:
         49:52:8a:3a:94:7a:c5:27:74:84:b6:5a:38:af:9f:90:8d:f3:
         3e:05:31:64:c8:99:d2:9d:49:97:04:22:b7:d8:c6:70:0e:6a:
         58:e2:4a:84:18:a5:ec:cd:13:fc:4a:00:74:6d:8a:d3:4b:cd:
         7a:31:12:b1:8a:73:31:3b:dd:ce:0a:f6:64:b4:5c:2a:88:fc:
         3d:25:32:ea:a9:b7:fe:72:a4:9c:fc:90:a1:62:72:23:78:bc:
         3f:72:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----