Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.cer (raw, json)
Hash identifier:          htqhaCw7BdNqY4UaJjgIdgV37Or/dXFDWU8HoepWNVs=
Subject key identifier:   A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2DB8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:58:39 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328218
                          IP: 2c0f:f148::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11704 (0x2db8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 00:58:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3632159AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:bb:63:3b:34:83:33:b0:56:e9:30:df:3a:
                    20:dc:8a:e5:31:a9:8c:f5:57:67:a1:70:66:02:d0:
                    74:99:7e:b6:e0:d8:35:3a:17:6d:9d:92:eb:d3:fe:
                    ec:0c:76:dc:20:a3:1e:a3:34:7f:f3:6e:16:5f:5f:
                    65:dc:34:07:36:c0:33:1f:a7:dc:01:55:28:31:6c:
                    3e:11:e0:bf:1f:b9:17:ba:a9:95:5c:21:24:6a:cf:
                    a9:bb:71:00:df:f7:13:c9:64:b4:8b:8c:1f:0a:23:
                    a3:54:2c:35:1a:79:03:68:92:47:f0:63:fe:85:d9:
                    4e:c0:b9:17:14:fa:bb:9a:4a:95:8e:87:34:08:15:
                    94:21:53:d1:5e:6d:92:65:68:75:1c:2a:1f:a4:c6:
                    8c:07:40:d9:f1:a9:73:98:9f:0d:2c:54:3b:67:33:
                    b0:12:0b:36:84:d8:f2:f5:dc:fe:9e:28:d5:22:a3:
                    8b:10:b6:db:9d:6b:7d:d5:c5:19:e1:d5:92:22:9b:
                    dd:24:0f:64:3a:15:ff:77:7f:92:e4:6c:a3:97:42:
                    39:09:d8:e3:d9:66:4f:66:24:9d:5c:8e:84:aa:22:
                    67:f5:ec:b9:55:f9:39:b2:c1:6a:72:1f:97:d4:80:
                    67:fd:82:9b:a4:84:93:c7:fc:65:2a:d1:87:5d:39:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328218

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f148::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:0f:e3:e5:e8:2e:68:19:9e:f1:c2:2b:2d:19:4b:d4:48:
         f3:06:1b:29:59:5c:1b:1b:af:85:b3:4a:2c:2d:e9:c5:38:31:
         e7:33:6d:71:a0:12:12:c6:0a:32:a5:56:b8:f5:f2:75:a4:6d:
         e5:78:db:2b:76:d1:54:d8:52:09:a2:4c:46:e9:40:fa:ca:1f:
         84:3a:40:88:49:85:0b:75:52:8f:bb:52:69:8a:2b:14:35:77:
         20:c6:ae:39:ed:b9:8a:c0:2a:8d:8d:8f:2d:88:d5:ea:53:97:
         99:28:93:1e:39:45:6d:56:1c:98:60:72:c9:e2:6d:53:dd:3c:
         dc:ed:cc:a9:9d:19:bc:36:2f:f9:21:b3:84:d1:52:a5:5b:95:
         13:54:71:1b:71:b3:40:cf:7e:36:f5:a7:0d:f8:14:6e:46:2e:
         b2:19:9c:cb:c6:c5:9b:b7:82:8f:ed:55:d7:69:b8:90:e9:57:
         9e:c6:f7:e5:5d:84:b0:64:15:a6:e3:18:a9:55:af:29:d4:3b:
         d5:8c:26:05:c9:0c:53:5b:3c:6b:93:44:c4:ec:62:4f:b6:f2:
         6b:0c:dd:fe:8a:07:ae:1a:8c:a3:52:ad:b7:97:fd:e7:38:e1:
         c7:e7:0c:88:93:74:d0:54:3c:06:0b:ba:6b:b7:3c:6b:3b:21:
         80:b1:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----