Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.cer (raw, json)
Hash identifier:          jmRLeskoGQMn1wfR4+ykCuktr6RR8/T4jZ0o3FrKLRs=
Subject key identifier:   8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       31B0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 04:27:41 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37192
                          IP: 41.78.88.0/22
                          IP: 2c0f:ff88::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12720 (0x31b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 04:27:41 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36A3983AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:58:35:5d:1e:18:bf:66:ca:3a:88:99:bb:
                    55:47:b3:7b:bd:2e:fe:ae:01:71:14:e4:ef:75:9a:
                    30:80:78:5b:de:f7:31:53:aa:43:bc:bb:1b:d3:d7:
                    96:e9:d7:89:47:35:c4:62:07:51:93:34:3b:0e:e6:
                    37:b9:9b:69:90:83:33:4d:71:df:63:27:26:b5:91:
                    f0:80:cd:09:e3:78:02:f3:c8:44:11:74:fa:bd:97:
                    e9:ad:2a:34:fb:20:5a:aa:b0:e7:61:e2:cf:61:c6:
                    61:87:be:5b:25:f4:07:04:c2:e9:3b:82:e9:96:f2:
                    e5:00:3e:60:98:76:55:d7:ee:40:4c:cc:26:3f:13:
                    e9:fa:c1:e3:0f:9a:5e:ae:5f:1d:f0:3b:59:6a:a9:
                    d2:02:b8:9d:76:be:a5:38:f2:14:5a:01:12:35:16:
                    ab:91:ac:35:01:a6:6e:31:38:cf:a5:b4:f9:d4:9f:
                    c1:e2:cc:ce:76:d8:19:14:73:95:c5:db:23:18:70:
                    7a:7f:32:ab:01:2f:34:ad:2d:2a:44:45:64:0c:e1:
                    3c:46:25:c5:da:a3:1a:1e:25:40:66:d3:ed:ed:e9:
                    84:9b:11:72:5b:39:5e:9e:f6:6d:7b:ce:f2:96:e8:
                    86:7f:bb:5a:eb:05:8b:ad:5c:a0:ad:0e:1a:d2:c1:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37192

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.88.0/22
                IPv6:
                  2c0f:ff88::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:52:90:98:1a:c8:26:27:20:c5:0c:ed:42:d4:c7:0f:e2:
         ef:18:a0:1e:e6:4f:cc:f4:8f:0f:d3:7a:09:6f:92:e8:57:9e:
         67:d6:d0:e7:ce:91:5d:cf:93:e5:96:cf:e3:6c:6f:5f:b9:6a:
         ca:e0:d2:e2:03:e9:31:69:ee:94:e0:96:da:a4:3b:b7:d8:64:
         f0:07:50:ea:a2:06:f2:0e:25:32:fb:9d:31:c3:6e:9a:22:4f:
         05:99:c4:23:a0:dc:d0:38:48:be:7c:8b:64:cd:ab:fc:59:9e:
         64:e2:75:21:0b:dd:ae:f2:a0:0d:a2:b6:b7:66:d1:f3:9c:9f:
         c2:3d:47:31:e7:be:e0:8a:d3:d6:72:10:24:ca:b7:50:6a:6c:
         56:c0:03:96:a4:83:cb:42:8b:a9:d2:6e:03:4e:5f:86:8d:a6:
         25:d0:2a:e9:35:73:4d:d4:17:8b:63:67:fc:e5:ff:ae:81:40:
         04:3d:4e:d5:37:ad:93:c8:7f:bf:f3:fd:e0:97:57:15:75:be:
         d0:e2:10:d3:b9:a8:0a:c3:da:d4:44:7e:8c:de:22:38:26:9f:
         84:32:00:ac:63:70:e6:fe:59:5f:7b:1d:a2:e1:93:e9:14:3e:
         b5:7f:62:a0:2c:87:d4:d2:89:ca:eb:8a:99:dd:e6:95:a7:e0:
         3d:c0:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----