Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
File:                     jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer (raw, json)
Hash identifier:          K0wYcymDvsl31vLEySLYgwPxpYb5fEuut0Kg7jt8oJg=
Subject key identifier:   8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E91
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:43:44 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 327700
                          IP: 41.94.0.0/16
                          IP: 2c0f:f140::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11921 (0x2e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:43:44 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364A64DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:da:8e:c9:fb:bf:4a:44:0d:21:e5:95:78:
                    54:ff:3c:52:7e:c1:79:7f:73:a5:80:d1:e9:4b:bb:
                    11:89:9f:c9:1a:89:84:af:18:d1:c8:6f:f0:8f:6d:
                    94:6a:2c:c4:4e:2c:61:14:24:83:a2:13:65:6f:f3:
                    25:35:9f:79:0e:e3:34:bc:98:02:c1:1e:e5:91:6b:
                    01:34:d4:fa:3e:16:6a:ae:c3:75:87:cd:22:ca:58:
                    d7:d8:72:26:54:8f:e5:80:6e:ba:04:c9:00:8b:f2:
                    b4:4e:fd:e0:5b:ce:eb:42:14:ff:4a:99:51:43:62:
                    17:75:b0:ec:07:09:35:32:ae:48:00:41:20:76:fc:
                    fe:86:7b:4b:ac:d1:65:b5:2c:2d:b6:01:71:9b:5d:
                    2e:97:f4:f9:d2:04:5c:f9:ab:25:3c:87:35:d0:69:
                    36:91:ff:5b:e9:42:5a:68:62:52:0c:f8:5f:b4:22:
                    81:8d:94:97:b1:c4:ea:40:6b:05:da:96:d8:5c:51:
                    75:73:84:3c:52:43:66:45:74:8a:c3:0e:64:d4:96:
                    28:0b:2c:b6:9d:d1:cb:a6:b1:65:f4:bd:52:55:df:
                    16:5e:b6:8d:15:ea:91:25:18:43:73:d7:50:bc:36:
                    45:cb:26:6a:64:8e:fa:b5:86:3f:59:9c:9c:b3:8f:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327700

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.94.0.0/16
                IPv6:
                  2c0f:f140::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:46:16:07:1b:b1:0f:c5:2b:07:c5:40:e8:76:52:fb:d2:
         30:14:1f:ed:89:d6:51:d2:a1:72:d0:2e:58:eb:3f:66:fd:4e:
         23:69:4d:26:6d:ad:6e:cb:ab:11:d6:33:cf:d6:09:71:5f:95:
         84:74:8b:a6:8d:c9:fd:df:d3:ee:8d:5f:46:6e:a0:ba:e6:b5:
         11:1d:a7:69:95:7f:ca:48:65:8b:56:fe:37:7a:15:93:35:4e:
         fd:a0:09:2d:4e:52:d4:1b:05:ab:c4:86:26:32:e0:53:2d:b8:
         28:73:3b:99:b6:87:54:b3:fe:f4:33:70:61:7c:09:65:14:1c:
         4b:45:12:61:b6:3b:e3:43:5f:fa:78:ce:57:5a:42:23:d1:65:
         08:2e:be:b2:13:09:3f:9a:e0:be:05:31:85:0d:99:da:a6:04:
         a1:83:b2:dc:83:b7:04:b3:99:ce:78:30:3c:2f:9c:a4:1e:fb:
         28:4c:97:ad:f6:0b:50:7e:b7:16:68:35:56:49:75:8d:0b:c5:
         31:ac:ad:05:f2:bb:5a:91:a5:4a:38:1f:a6:1e:37:b3:8a:81:
         26:f4:20:76:64:5f:3c:72:89:67:d9:a2:c4:73:97:4e:31:2e:
         ad:d3:92:e4:bb:39:4b:54:08:cb:cb:b3:d7:4f:83:bd:d9:ad:
         6f:84:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----