Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
File:                     og4gZ_DbeD3jcj4jFRfcfp_lutM.cer (raw, json)
Hash identifier:          2txDkZmvQrTS1IVG44IujPE/4/BkHXUoTv1I6LhlK5s=
Subject key identifier:   A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2FCA
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:46:29 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37182
                          IP: 41.93.0.0/17
                          IP: 2c0f:f2e8::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12234 (0x2fca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:46:29 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F366B0C9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:6e:c1:cd:f5:ad:c3:32:91:a6:f0:12:e4:
                    78:2c:5a:37:d6:78:43:9b:5f:08:8e:37:6a:57:33:
                    2b:93:6c:c3:44:dd:0e:d6:7c:07:f7:3a:3c:30:d8:
                    0a:dc:a4:30:d9:ba:d0:36:38:b2:24:34:4d:9c:a9:
                    0f:3d:d9:2a:a2:2c:1b:4f:77:74:82:f3:80:23:29:
                    2f:4a:a7:cc:1f:47:2f:29:2d:43:df:c0:6a:97:2a:
                    91:37:2d:37:d2:3c:dd:7a:77:b3:a0:6d:22:ad:cc:
                    e9:ee:eb:79:ee:7b:2c:bf:34:39:47:38:87:36:21:
                    67:90:48:e2:7a:21:c0:7d:42:18:f7:67:d6:02:27:
                    64:80:95:1a:24:30:56:61:a1:e5:b0:6e:cc:df:99:
                    ac:d6:01:f1:48:51:ee:29:b4:11:f4:b2:a7:80:e3:
                    93:f8:8e:67:ad:09:c6:74:59:a6:7d:73:98:04:f8:
                    e5:31:ce:f0:29:59:d0:00:51:7b:e1:0d:c0:b0:b4:
                    b0:e3:8f:f4:4a:7c:5e:98:56:13:dd:85:72:00:36:
                    01:d8:72:87:2a:9b:23:fe:4c:d0:c2:e2:b5:c1:b2:
                    71:91:a7:a2:25:dc:bf:1d:37:5b:ae:7f:26:04:b8:
                    52:e2:93:f7:42:b9:c0:32:48:b2:ca:6c:e5:47:d0:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37182

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.0.0/17
                IPv6:
                  2c0f:f2e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:c4:d8:13:dd:fc:a8:1f:1b:86:86:79:20:67:6e:55:c3:a0:
         61:63:0b:28:1e:0c:20:65:de:b8:58:71:84:c6:c0:a1:de:43:
         64:22:1e:e4:f2:4c:68:e6:af:d2:ef:47:1f:7e:cc:1f:be:ef:
         a1:05:85:bf:20:a3:f3:92:34:70:a9:ef:33:80:c3:44:82:62:
         ae:a1:9e:52:8e:39:b9:fd:07:bd:ea:91:b7:1e:0b:5c:60:6e:
         71:76:da:17:e4:83:6b:40:a6:61:df:e2:d5:e6:9b:bf:5e:7c:
         c8:9b:5a:3a:e8:34:a4:ce:15:e3:44:ec:19:b1:59:2e:61:31:
         59:39:0b:6f:cc:b3:71:79:80:90:6f:8a:ae:38:a6:6b:b7:b1:
         ee:5f:1c:31:b5:34:4e:18:d1:45:3a:ee:43:d1:8c:36:fd:03:
         12:e1:44:3f:1a:39:af:7f:ad:34:67:11:8d:f7:45:46:d7:1f:
         87:1c:29:a8:5b:91:f6:fe:36:dd:a5:ae:79:1e:18:b9:3d:7d:
         aa:ef:aa:ad:06:98:f4:9c:0b:c3:68:af:67:29:1b:7f:2d:ed:
         b0:49:16:bc:72:39:34:df:4a:33:94:76:aa:e0:e3:e6:07:a2:
         82:8a:5d:34:03:58:8e:f2:ee:c7:b9:8d:9d:99:93:34:29:9d:
         71:6f:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----