Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.cer (raw, json)
Hash identifier:          Hd0D9MV7t7M0jhF+g4TU2gznIJSR+/oeK4Vog9wK16o=
Subject key identifier:   C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       32E7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:34:25 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329032
                          IP: 102.216.176.0/22
                          IP: 2c0f:4680::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13031 (0x32e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:34:25 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36D591BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:ce:0b:fe:bc:cf:25:ae:ed:6e:88:ac:a1:
                    55:b7:42:aa:b0:eb:60:8f:7c:5b:4e:ee:2d:77:ad:
                    f2:4a:25:7a:a2:61:6c:1c:74:a4:36:32:4f:ac:77:
                    0a:b4:b6:ce:ab:3c:ca:2b:17:bf:5c:ff:a5:3d:56:
                    42:92:29:84:ad:c1:8e:ae:ef:88:dc:8c:aa:82:93:
                    c3:10:7a:6f:93:61:88:8d:03:89:92:aa:43:1f:ec:
                    30:28:4f:ef:18:a4:ae:b6:e7:81:aa:be:0f:a6:ac:
                    ef:c9:dc:bf:ca:90:3e:39:b4:18:fd:d4:cb:64:e0:
                    11:20:49:83:ec:66:86:f0:4f:84:fb:b4:e7:07:ea:
                    af:02:e4:7a:ef:cc:9b:74:ca:6e:3f:58:c3:74:7e:
                    f7:02:e9:4e:31:50:9f:fc:90:40:35:6b:c1:f4:be:
                    b2:70:a2:82:c5:cc:5b:30:b8:7f:ff:3e:2e:e4:6c:
                    d1:af:f9:44:e3:a4:a3:e0:95:fe:0d:79:a8:d4:2f:
                    45:ef:fc:53:d1:91:96:9b:00:c3:cb:64:6c:77:4e:
                    6e:72:0f:73:b4:00:b3:84:92:34:46:1c:cb:46:51:
                    df:22:fb:06:42:b3:97:a1:54:fe:41:a0:85:96:5d:
                    44:8c:32:45:c0:08:db:f9:20:f6:15:7e:6e:e3:56:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329032

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.176.0/22
                IPv6:
                  2c0f:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:66:b1:3c:94:40:0d:e2:46:65:85:b8:23:aa:7e:76:84:
         8b:d8:66:fc:67:11:62:94:ac:76:e1:49:98:7f:58:65:d7:40:
         fe:34:61:c1:f6:f8:b9:be:3f:03:53:3f:36:f0:41:77:27:78:
         f0:cc:2b:2e:ba:94:7c:83:c3:b0:8d:87:12:a4:b8:ce:f7:50:
         c3:a0:99:52:33:af:09:af:ab:25:59:2e:38:2c:b0:c3:2a:21:
         40:64:23:24:c4:ee:db:86:2c:5c:dc:47:ad:a7:6d:94:27:6f:
         72:67:94:87:83:78:6a:64:64:73:e0:b3:6e:e3:8e:8e:43:0f:
         bd:a7:c4:45:3d:8d:33:eb:e8:ce:6f:ba:87:fa:98:3c:77:d8:
         08:88:da:7c:72:ef:14:f4:0c:e1:7c:59:70:84:7b:c7:83:f8:
         c4:60:cc:33:a9:10:c2:4a:3e:2e:6c:f1:cf:9b:0d:dc:9c:21:
         77:d3:42:a7:95:54:45:b4:2f:f4:02:82:93:85:6a:1d:1d:72:
         ae:9e:88:e8:3b:07:09:87:fa:1f:22:10:75:76:c9:54:84:08:
         b1:04:b8:e2:9b:2f:37:a1:ff:2f:b7:67:56:62:6b:59:ee:44:
         17:a6:4c:b0:b1:4f:6c:8b:d5:78:37:72:de:91:e9:2a:06:37:
         45:8c:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----