Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.cer (raw, json)
Hash identifier:          RkmLLI9r0Uf/J8FV1KmCPWhGQVAWZA4LYGd8T3wLyqM=
Subject key identifier:   9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       31BB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 04:30:03 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328170
                          IP: 102.22.80.0/22
                          IP: 102.67.136.0/21
                          IP: 102.211.28.0/22
                          IP: 102.221.36.0/22
                          IP: 2c0f:ed68::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12731 (0x31bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 04:30:03 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36A42DFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:96:2f:d4:8b:7b:c7:9d:47:b9:d4:c4:1a:
                    fc:63:d7:47:2e:e4:bb:ab:03:12:a3:ea:76:e4:2c:
                    08:d0:d4:69:64:f4:a5:71:26:24:d6:6f:2d:ff:2e:
                    53:d9:2b:ec:1d:f2:75:3b:6a:74:22:2a:4c:bf:a3:
                    3c:3c:7d:7e:13:28:47:32:aa:dc:34:a7:6d:70:60:
                    9b:66:fd:39:d8:a7:e8:50:dc:27:3d:99:8d:df:18:
                    b5:a3:0e:e1:09:12:7a:bd:9f:61:b2:82:8c:8c:3d:
                    1d:8e:c9:de:17:3a:ac:41:98:af:d3:f3:2b:5d:0e:
                    87:cc:3b:b8:11:84:46:cd:b5:57:a5:c9:cc:17:2e:
                    5b:d0:0b:26:18:d3:25:ba:6c:b8:71:a2:d4:60:a9:
                    db:fc:b9:eb:71:fd:d4:d7:6a:c8:d8:b0:56:8c:0e:
                    5f:62:ad:6c:22:6a:f8:2a:2d:e2:a5:01:21:68:f1:
                    8e:99:d1:7b:93:cd:a9:b6:f0:8a:d4:bf:9f:41:e3:
                    20:7d:4e:7c:45:ad:cf:88:dd:f9:13:e0:88:81:f1:
                    44:1e:56:3f:20:d0:00:29:3b:82:ed:84:f4:a7:16:
                    6e:43:97:40:4b:54:78:1b:b2:40:ed:82:32:ed:83:
                    ef:29:df:33:9b:da:29:ba:f7:d4:89:a4:88:32:0f:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328170

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.80.0/22
                  102.67.136.0/21
                  102.211.28.0/22
                  102.221.36.0/22
                IPv6:
                  2c0f:ed68::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:e1:4e:e0:24:39:4a:28:15:b6:11:6f:ed:12:d8:48:f4:
         28:26:01:97:f3:ed:88:57:95:bd:74:04:61:55:14:13:ed:ef:
         df:f6:66:97:17:46:16:77:44:d9:e6:27:a6:b2:aa:8e:48:70:
         23:ec:76:2d:76:90:86:31:bb:80:eb:df:34:14:a4:0c:4f:85:
         9a:ad:b9:58:1e:36:c5:f2:fe:a0:67:29:7c:49:bc:14:d6:6d:
         4a:2d:4c:d8:22:82:d3:61:82:d1:e5:2f:15:62:5e:81:fd:a0:
         49:9a:0c:3f:0d:e9:82:8b:8e:de:63:ca:c0:b2:4b:22:72:8e:
         d7:97:f3:ee:73:b7:e8:2a:74:bf:45:d7:30:dc:fe:f4:29:1c:
         f8:8d:68:b6:8d:e6:5d:b5:e8:d7:cf:d4:5e:25:6a:5f:57:e1:
         cc:f4:fd:5e:7d:fb:45:97:75:a2:d2:14:f2:05:08:26:a5:3a:
         8e:a0:c0:ee:9f:89:f2:06:d4:2a:98:c4:35:08:1b:35:9d:59:
         73:7e:85:ac:84:a4:69:5b:d6:c8:ad:38:0f:b2:07:2f:ac:26:
         f8:12:29:cc:c7:36:71:87:b0:d8:a2:08:7a:b4:e5:93:d8:80:
         01:77:96:9c:8c:4c:eb:5e:72:9e:29:39:50:d9:74:75:75:22:
         89:14:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:18 2025 by rpki-client