Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
File:                     ll15l05AXZDHV_miXEMFvq3uoG0.cer (raw, json)
Hash identifier:          2NyL7vHwKkS5tbBcNiJd4w7miMMNdu4UUm6bxWTQcPg=
Subject key identifier:   96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       33B8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:23:45 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329052
                          IP: 102.215.176.0/22
                          IP: 2c0f:1080::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13240 (0x33b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:23:45 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36FB8C3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:21:1f:29:db:33:d2:84:72:0f:f4:e2:2e:
                    1e:97:9d:f7:a5:af:06:e5:25:4b:88:74:da:81:e2:
                    9c:67:1b:c2:1b:af:31:5d:10:68:ea:bc:b8:f9:35:
                    ae:a8:a2:ca:47:8c:95:82:d3:29:3a:7d:06:cb:89:
                    1e:ce:36:8a:bd:d6:d8:d3:09:b9:be:cb:e9:a8:18:
                    b7:8f:ae:c4:8f:b6:77:ca:4c:ee:c5:e6:16:93:21:
                    bf:5c:e5:b4:d8:e5:17:30:ba:e0:42:8c:5d:f8:14:
                    b8:b0:4a:1b:ba:c3:c8:10:6b:77:12:2f:6e:5b:be:
                    a7:37:9e:4f:4e:21:e6:47:06:0f:40:cf:dc:a5:22:
                    51:4b:df:4d:b1:11:c6:10:c0:40:1c:fa:10:00:07:
                    45:9b:3a:4c:2d:dc:fc:fc:47:26:c3:85:fb:c0:a0:
                    73:19:fe:35:90:a9:ec:89:41:40:78:1b:f3:70:13:
                    ce:e8:2d:3f:58:36:4e:a2:d3:6d:31:71:d0:79:6c:
                    ba:c2:e2:03:e9:49:e8:c1:af:99:e8:92:76:d7:48:
                    06:b9:2a:18:4f:02:4b:8b:e9:a8:ff:13:a3:b5:3b:
                    38:4f:ba:8b:f5:a1:a4:e6:b0:1c:09:87:6c:14:5c:
                    95:9a:00:e1:14:71:1b:63:3a:ba:ba:bd:e6:09:8c:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329052

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.176.0/22
                IPv6:
                  2c0f:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:ad:69:a0:84:18:33:d7:11:6e:ce:0a:6c:9d:fa:ce:66:
         e9:5b:47:dc:f2:a0:ee:6d:d8:00:f9:63:b3:a8:6c:17:04:9f:
         75:36:25:d4:16:b0:f1:eb:da:53:79:3b:eb:34:c9:73:75:23:
         33:18:0e:50:6d:38:28:ea:9d:71:60:b6:72:51:d4:12:77:f1:
         1a:30:e5:69:46:a5:30:89:8e:71:30:7c:cc:31:38:49:20:ae:
         4d:7c:58:2c:07:95:24:2b:79:23:32:25:b2:22:b3:ed:ed:62:
         71:3b:dd:ed:fd:8b:9b:63:67:35:b4:2c:3e:37:91:b8:d2:7e:
         c4:f3:11:51:7f:71:26:9e:b3:ce:73:0a:bf:cd:2c:3a:19:91:
         f2:c6:69:2a:64:75:ba:a1:fa:d7:92:34:85:92:32:1b:cd:c4:
         1f:2f:6d:67:ae:c2:51:a5:0b:13:30:c3:3a:47:ff:87:6b:81:
         48:3a:dd:c9:bd:c5:54:4d:e8:3f:40:f6:19:40:14:b4:23:2f:
         c5:71:bd:79:73:48:c3:25:49:f3:14:bd:86:a4:99:41:1b:90:
         08:d7:0c:38:a1:39:56:6d:c7:98:db:0f:45:36:dd:7d:e0:ed:
         39:47:17:a8:3b:f0:4b:4a:4c:77:2d:4e:ff:fb:8e:ee:98:10:
         77:42:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----