Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
File:                     uB6iOhePYIDn2A7zBrAE6aHc4RA.cer (raw, json)
Hash identifier:          ZXmb0KXioEd6KVZqcDkODJkSYQyiYqFyX+hlcd++AUQ=
Subject key identifier:   B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E12
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:17:06 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328253
                          IP: 102.68.176.0/22
                          IP: 102.222.204.0/22
                          IP: 196.251.156.0/22
                          IP: 2c0f:4cc0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11794 (0x2e12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:17:06 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F363D469AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:03:d9:65:fa:58:89:9f:77:1a:21:be:64:
                    29:ad:f2:be:ab:6d:8b:52:fb:bd:24:6d:47:0f:56:
                    87:ce:3b:81:27:e4:13:3a:f1:54:a3:11:a1:c6:b7:
                    0a:63:7c:04:a6:e2:29:5b:14:e2:5c:1f:6b:3e:b4:
                    73:fe:7d:1d:e7:86:60:9c:21:2a:e2:ab:d1:da:7f:
                    02:ba:44:1b:ca:12:ee:e8:1f:19:14:7c:8b:4a:e2:
                    9c:3a:af:a8:1b:d5:92:40:d5:98:0b:9e:10:dc:02:
                    03:5b:43:1c:69:18:38:a7:93:a3:86:39:0a:e6:39:
                    df:31:0d:5e:3f:9e:58:63:56:51:9e:4a:c4:33:ee:
                    b5:cb:89:d7:6a:ab:56:ed:ad:92:3e:2c:f6:c8:5b:
                    9d:ff:26:e9:bf:a7:dc:6a:37:4d:4d:e6:16:a4:45:
                    50:3b:f3:97:b9:02:04:65:93:8e:df:f3:d3:20:e3:
                    ef:f2:6b:2f:80:9f:78:ef:53:c0:f4:53:58:f1:61:
                    98:86:b4:d4:e7:48:f9:64:58:33:ec:35:a9:bf:fb:
                    d4:80:4a:21:2c:76:ab:76:b4:e7:4c:e2:4e:89:14:
                    c3:8e:58:fa:d5:25:a8:ea:39:c8:f4:66:c3:ac:4f:
                    f1:b5:ae:2c:47:7a:0f:c8:92:8f:d4:49:51:d2:72:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328253

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.176.0/22
                  102.222.204.0/22
                  196.251.156.0/22
                IPv6:
                  2c0f:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:59:3c:c6:f4:fa:55:4c:90:09:ac:84:57:0d:fd:eb:36:dc:
         50:cf:0c:47:1a:27:93:f6:00:61:bd:78:56:c1:20:69:cc:a3:
         47:5d:a0:35:bd:3b:44:6f:d4:9c:f6:3f:2e:8c:36:0e:45:53:
         9c:fd:c7:3e:b9:39:5e:26:13:ee:58:e8:a3:6e:b4:c1:97:d2:
         25:3d:67:77:56:88:03:9c:72:9f:b8:08:0e:79:7c:e8:d5:11:
         64:24:f0:08:18:ec:23:9a:20:65:11:36:3e:3c:68:02:06:7e:
         85:ae:88:b3:3f:0e:96:54:ba:28:41:4f:19:ab:49:b2:2a:8c:
         56:9e:c0:69:ba:1b:b1:bf:1d:72:ed:b4:d8:37:93:d9:af:5c:
         3a:8d:a0:13:0d:86:3a:5d:d8:bc:eb:24:95:d5:32:ac:39:f4:
         9a:0b:bf:89:fc:1f:ca:a2:df:88:23:31:4c:20:bb:17:a4:4b:
         8e:c8:a2:86:e7:41:c6:e1:5d:84:14:13:8c:cb:0a:19:66:b6:
         b0:d7:91:15:df:fc:be:5e:8e:a7:c0:5d:7d:a7:dc:fd:37:9c:
         e1:7b:1e:7d:44:56:1f:eb:4c:6b:55:f8:ed:0b:36:b1:b9:2e:
         3c:fc:da:05:56:0e:51:d8:b1:33:ab:c9:14:66:0b:b6:a6:2a:
         9f:74:44:79
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICLhIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTE3MDZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjNENDY5QUYxMTAvBgNVBAUTKEI4MUVBMjNBMTc4RjYwODBFN0Q4MEVG
MzA2QjAwNEU5QTFEQ0UxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/hwPZZfpYiZ93GiG+ZCmt8r6rbYtS+70kbUcPVofOO4En5BM68VSjEaHGtwpj
fASm4ilbFOJcH2s+tHP+fR3nhmCcISriq9HafwK6RBvKEu7oHxkUfItK4pw6r6gb
1ZJA1ZgLnhDcAgNbQxxpGDink6OGOQrmOd8xDV4/nlhjVlGeSsQz7rXLiddqq1bt
rZI+LPbIW53/Jum/p9xqN01N5hakRVA785e5AgRlk47f89Mg4+/yay+An3jvU8D0
U1jxYZiGtNTnSPlkWDPsNam/+9SASiEsdqt2tOdM4k6JFMOOWPrVJajqOcj0ZsOs
T/G1rixHeg/Iko/USVHSciI/AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUuB6iOheP
YIDn2A7zBrAE6aHc4RAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzRDQ2OS80NDY4RUVDQTlCRjUx
MUVEQkE1MUQxQTNGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0Q0NjkvNDQ2OEVFQ0E5QkY1MTFFREJBNTFEMUEzRjEyMjI0NjgvdUI2aU9o
ZVBZSURuMkE3ekJyQUU2YUhjNFJBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAj0wOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmRLADBAJm3swDBALE
+5wwDQQCAAIwBwMFACwPTMAwDQYJKoZIhvcNAQELBQADggEBAAJZPMb0+lVMkAms
hFcN/es23FDPDEcaJ5P2AGG9eFbBIGnMo0ddoDW9O0Rv1Jz2Py6MNg5FU5z9xz65
OV4mE+5Y6KNutMGX0iU9Z3dWiAOccp+4CA55fOjVEWQk8AgY7COaIGURNj48aAIG
foWuiLM/DpZUuihBTxmrSbIqjFaewGm6G7G/HXLttNg3k9mvXDqNoBMNhjpd2Lzr
JJXVMqw59JoLv4n8H8qi34gjMUwguxekS47IoobnQcbhXYQUE4zLChlmtrDXkRXf
/L5ejqfAXX2n3P03nOF7Hn1EVh/rTGtV+O0LNrG5Ljz82gVWDlHYsTOryRRmC7am
Kp90RHk=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:31 2025 by rpki-client