Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
File:                     q_mWDIW8-JONWDN_jLfF603Es64.cer (raw, json)
Hash identifier:          1RMgPmbb//MI+VxkmeJiKcDfiVd7qrDG0v6M+xLbX1A=
Subject key identifier:   AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E83
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:40:43 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 36932
                          AS: 36940
                          IP: 196.49.26.0/24
                          IP: 196.49.28.0/24
                          IP: 196.49.30.0/24
                          IP: 196.49.32.0/24
                          IP: 196.216.148.0/22
                          IP: 2001:43f8:bb0::/47
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11907 (0x2e83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:40:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364814FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:f4:29:38:0a:ce:92:97:e7:f8:bb:60:8f:
                    7a:e6:dd:39:a2:63:1a:38:de:ff:f3:d0:15:b8:1d:
                    4c:cd:9b:03:a0:2c:ac:61:0c:e6:ec:08:fb:d7:05:
                    32:35:65:ce:a9:b9:84:6f:74:bb:d8:7d:06:c3:3f:
                    c5:4f:fb:10:dd:50:cf:b1:a8:12:39:43:23:45:ab:
                    33:b8:bf:d6:46:43:43:07:ed:66:85:a6:62:a9:ca:
                    11:5a:6e:f7:67:8f:59:2c:e6:0d:14:1e:af:8e:23:
                    9f:4d:69:10:b4:30:7f:49:b3:e2:aa:bc:64:52:a2:
                    dd:c4:a1:ea:c6:ee:8c:c9:1a:8f:01:4a:3b:14:8d:
                    43:36:f9:38:da:4c:6c:71:cf:43:5a:d8:dc:17:6f:
                    06:9f:48:f5:99:7d:98:d5:ca:b4:c0:f9:f2:80:56:
                    c4:13:68:cb:14:8e:5d:06:64:4c:86:30:77:b2:6f:
                    3e:0c:26:8c:75:90:fe:3a:f6:2b:ee:2b:83:7f:f5:
                    cd:95:48:ea:48:49:b9:44:57:c3:67:b9:58:ec:62:
                    c4:f6:2f:56:20:44:a6:6f:23:be:39:af:5c:f7:49:
                    ff:b3:f0:b9:c1:cf:ab:f7:f0:d4:f5:04:70:24:4f:
                    6e:b1:7f:4a:38:cb:0c:6d:8e:d3:9f:3d:2c:72:a5:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36932
                  36940

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.26.0/24
                  196.49.28.0/24
                  196.49.30.0/24
                  196.49.32.0/24
                  196.216.148.0/22
                IPv6:
                  2001:43f8:bb0::/47

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:f9:95:a4:9a:65:5d:66:69:92:d3:d8:5b:24:75:0d:34:
         7d:26:0e:f7:85:00:d0:26:81:57:0c:de:cb:8b:22:11:e8:22:
         34:d1:a8:1b:d7:cf:ff:d7:13:2f:d0:be:d5:7f:0d:3f:50:d7:
         ff:43:f7:f3:63:e6:83:81:5b:0c:a7:66:36:58:9d:f7:19:89:
         a6:f4:92:a2:5d:65:d2:62:05:cd:83:33:1e:6a:eb:c1:1c:9f:
         6e:df:c6:f2:e7:12:d3:b3:95:90:8a:e2:51:4c:fc:30:81:34:
         92:1f:95:3e:d6:ca:07:ef:1d:d5:1e:a6:d0:f1:f8:aa:2e:87:
         45:7b:99:e4:07:0e:e1:cc:75:a1:08:88:bd:cc:2b:60:0c:c5:
         ce:af:d1:46:74:b3:c3:9b:4f:22:c1:e4:50:c8:a9:6e:5d:b5:
         5a:36:68:16:c1:7b:dc:c5:e9:5d:23:bb:ff:b6:65:e8:c6:cd:
         7b:67:bf:38:d4:81:5d:f8:da:d1:1f:74:e3:26:74:50:b6:40:
         9b:5f:c0:4f:5a:08:f7:2f:05:22:94:6c:54:ce:1b:0a:f2:2f:
         83:39:8c:8a:9b:b4:88:c4:a0:a5:7a:7a:e1:05:ff:e7:ae:56:
         07:f8:d2:06:c4:18:70:6a:c0:42:9d:f3:07:de:0e:fb:80:58:
         cb:22:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:12 2025 by rpki-client