Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
File:                     rhKLIvUdxljVXiFW669z1satdio.cer (raw, json)
Hash identifier:          D9L860Oih+I0hZJfxFQ8amntg849eoDdNmziC4bOTyw=
Subject key identifier:   AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2EF3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:03:34 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328426
                          IP: 102.130.240.0/21
                          IP: 2c0f:1780::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12019 (0x2ef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:03:34 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3656B95AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:ba:ee:02:93:0d:55:40:39:dc:df:26:8a:
                    0a:c4:a1:7c:1b:71:74:ae:95:df:e8:03:8c:ee:8f:
                    3f:e4:6d:85:7e:fc:26:7e:46:cf:d4:1c:e3:2d:44:
                    b0:2c:65:ef:34:e4:c2:66:08:d1:76:5a:ce:4d:cf:
                    6e:2c:1d:b0:0e:6b:ca:18:c0:61:2c:80:d6:33:43:
                    3c:cb:1c:e8:f1:6f:6c:35:15:9c:fb:df:79:e4:ef:
                    7f:ce:cb:d4:90:b1:07:95:b5:dd:4d:61:b8:01:2c:
                    5b:0e:e3:1b:d8:73:24:6f:81:4a:df:12:1c:27:34:
                    7f:41:03:6e:00:c0:2d:ae:58:df:1d:bc:2a:cd:61:
                    4c:ca:c0:1c:bc:13:4c:af:1a:68:04:bc:4d:0c:76:
                    b0:95:95:41:c8:bf:94:2f:1c:1a:1e:e1:dd:c5:e6:
                    75:a3:15:50:c2:21:9d:31:66:1a:c7:3a:ab:34:95:
                    1c:58:90:3b:bb:2a:63:0d:8b:9a:fd:65:4b:9e:f2:
                    06:30:01:e7:60:cc:41:7b:eb:54:e1:b5:60:14:18:
                    9b:7c:9b:a4:b0:c6:04:79:ba:fa:7c:41:ba:e5:65:
                    8a:e5:02:85:ce:a9:1e:f6:db:e8:1e:85:f5:11:34:
                    5a:04:9e:ec:1b:91:9e:44:b1:21:40:28:4d:3d:45:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328426

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.240.0/21
                IPv6:
                  2c0f:1780::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:63:fa:9f:7f:c7:41:d6:f7:76:b1:75:2d:3b:6c:43:85:ba:
         ee:f7:b8:1b:f1:ef:73:b5:01:5c:47:59:77:2b:e0:b1:d3:76:
         fc:63:ce:1b:ba:9a:f3:88:23:e3:14:7b:1e:ec:e4:a5:4a:86:
         c5:17:17:5e:60:ac:88:04:cf:60:d4:5a:95:e8:94:06:f9:00:
         1b:d6:ab:91:5f:85:47:2c:49:e3:7f:e2:a5:a9:70:48:c3:2a:
         99:12:55:87:ad:7b:48:e3:8b:d2:84:1e:9c:27:2c:e3:a7:ee:
         48:3a:55:92:00:6b:84:df:d6:aa:ae:d7:d5:4e:b6:3d:df:a5:
         70:97:a3:24:c3:39:23:6b:c0:0c:dd:1c:72:db:72:5e:37:e0:
         67:09:1a:da:c0:cf:50:f2:8f:d7:5c:83:3a:d1:e4:bf:b1:ca:
         0a:47:37:5b:40:b9:04:6c:04:87:60:66:33:bf:a2:b6:d6:4f:
         d4:1d:15:61:f6:79:eb:76:98:2d:47:91:59:1a:f5:a7:33:62:
         9a:a7:33:f4:2c:af:da:92:de:c1:eb:0b:5b:9e:51:99:0f:5d:
         9c:05:e0:6b:77:7d:8f:fa:59:2d:6e:25:53:3f:3f:32:a1:17:
         ac:a7:75:6f:de:7c:83:c7:ef:4b:bf:ea:4e:aa:30:93:27:60:
         fb:14:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----