Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
File:                     w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer (raw, json)
Hash identifier:          8m0VCivvIXFj/uqp5886NMKhkLnTOI4oWrgKioReKyk=
Subject key identifier:   C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2F2B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:14:35 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329007
                          IP: 102.216.252.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12075 (0x2f2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:14:35 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365BE89AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:fa:cd:81:67:b6:8d:60:e4:c3:b6:c6:60:
                    81:36:23:53:6f:cc:07:fc:03:eb:d7:f7:bd:9c:f3:
                    44:3a:40:94:56:3a:9b:35:3d:b7:7d:93:26:81:90:
                    89:ef:57:cf:3e:fc:09:c0:1e:9f:c2:fe:b0:2b:80:
                    90:55:50:fe:c2:88:21:1e:c9:15:96:06:77:ed:00:
                    52:0a:e9:80:c4:b8:d3:40:9b:e3:9f:45:02:10:cd:
                    68:30:43:0e:4b:a7:13:b3:60:1b:29:54:b6:7d:94:
                    19:e1:e5:46:d5:bd:1f:2c:22:42:e7:e5:8b:12:0f:
                    31:79:19:94:b5:ea:bc:49:4b:19:4f:8e:4d:98:ac:
                    48:84:89:66:af:a6:84:81:a1:d9:ef:63:95:e9:c4:
                    c7:b3:67:98:5a:f4:64:d0:b4:df:6c:c4:d6:34:42:
                    1a:1d:8e:70:f6:07:e7:8e:63:30:cb:f0:8a:7c:44:
                    b4:10:7e:d0:9e:2c:d6:ec:92:b2:06:d4:b9:d6:51:
                    e0:b3:fe:4b:d5:b4:93:d3:5a:cf:79:6a:5f:24:38:
                    c1:d4:44:fb:bd:4e:ae:c2:2f:5e:04:f0:f0:59:f7:
                    17:ca:f4:a9:12:80:4d:bf:35:05:ff:66:39:1a:a4:
                    3f:7e:18:17:9f:91:24:4c:6c:3d:56:0c:6b:54:83:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329007

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:25:21:16:7f:8a:11:d6:43:80:90:9e:a3:33:ce:d0:55:4d:
         73:bc:49:a9:82:cf:0d:20:ac:4b:9d:62:62:b2:cb:66:d9:61:
         a5:f4:21:25:7b:a7:bc:e4:0a:e4:a9:50:bb:ad:36:a0:2f:89:
         58:fd:fa:df:60:70:7a:33:4e:00:0e:d4:26:ee:97:ed:da:08:
         3f:3e:34:51:5e:03:db:d1:2a:51:ca:a8:65:c5:f7:9b:8c:95:
         65:54:13:10:9c:96:4b:1e:42:b5:d4:3b:24:f0:29:6a:c4:3d:
         9e:ce:a5:99:2a:b4:cd:73:1a:38:ed:22:6a:2a:44:26:83:41:
         02:61:ab:b8:a5:34:c8:6e:bc:20:a1:22:f5:66:8f:66:61:fa:
         d6:63:d2:ee:ea:5b:69:8a:5b:da:68:3f:ea:51:39:0d:73:da:
         ec:3d:ad:a9:d6:bf:c4:09:ec:fb:8b:57:cf:15:10:e7:d9:60:
         ab:7b:6e:3e:94:69:78:f9:94:d8:f9:74:56:91:14:23:c9:13:
         bd:70:26:a1:c1:95:e9:92:58:7f:4b:a2:06:b9:39:e0:d7:48:
         3e:a4:10:68:22:d6:6f:68:0c:61:ba:ea:eb:f0:3b:14:a8:bc:
         eb:06:ac:4d:5f:c6:23:48:4b:88:46:57:61:07:41:fe:c6:3e:
         68:ba:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----