Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer (raw, json)
Hash identifier:          5s4wZLffF1boUMeTcRpfF0pWir8Zm4XWhhdjJ67bghc=
Subject key identifier:   CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       333E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:54:46 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 36912
                          IP: 41.202.192.0/19
                          IP: 102.244.0.0/14
                          IP: 2c0f:f070::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13118 (0x333e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:54:46 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36E4B69AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:b8:99:22:0e:df:01:1f:83:5c:42:59:1b:
                    e6:23:2d:25:30:0c:d2:ec:1a:c6:db:d6:29:5a:78:
                    f3:ab:69:2d:87:ff:b1:d1:a4:19:0b:b3:06:ab:24:
                    d2:ce:62:8d:75:f5:9c:c8:50:59:dd:27:9c:72:e2:
                    14:a1:f7:f4:6f:84:e1:32:21:9a:e7:dd:0b:5a:1c:
                    b5:6a:36:e9:cd:c0:be:42:07:de:fc:2e:85:01:54:
                    48:d1:ee:29:1e:2d:48:e9:df:34:b2:59:b8:87:5f:
                    73:d7:74:52:e7:99:ed:46:69:66:13:63:f2:85:18:
                    25:13:b8:b8:97:f9:58:dc:39:5a:31:50:8b:5f:fe:
                    27:c6:c5:8d:e0:6c:95:4c:b0:9f:2b:59:b8:d6:71:
                    94:a2:87:d8:4a:18:18:1a:d9:7e:12:f6:0f:6d:a0:
                    64:af:66:f2:dc:fc:07:9d:5e:d3:f7:41:4e:19:52:
                    0a:1d:a8:1a:72:93:e7:d3:b4:db:e9:92:20:36:35:
                    1d:8d:07:78:03:c1:1d:44:6c:b8:f3:da:2c:4d:a3:
                    0a:20:bb:7a:4a:bf:13:65:a4:d6:2a:3c:da:96:b1:
                    1c:25:3a:c9:c3:14:e4:e0:fa:da:23:43:76:86:4e:
                    a7:31:1b:63:4d:e0:80:4d:61:d2:23:2f:39:e5:2b:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36912

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.202.192.0/19
                  102.244.0.0/14
                IPv6:
                  2c0f:f070::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:a7:87:8c:99:04:77:5e:7a:fc:3a:f4:d2:c2:7c:9c:e8:
         7a:4f:aa:7f:77:42:93:cb:be:f2:1f:15:aa:66:b1:04:db:f7:
         e5:64:a9:62:eb:1d:40:b2:5d:13:73:ae:ed:70:6e:3b:c9:18:
         b0:ca:ab:7b:e6:15:e2:a5:82:4d:4b:1b:87:93:d9:86:a6:b5:
         e5:31:10:20:ec:52:f4:1a:e6:f7:a4:75:3c:5a:9b:55:fa:a3:
         17:12:5d:9f:88:01:08:4f:a9:01:07:ba:a0:62:8e:79:20:22:
         4e:18:20:33:8d:97:32:aa:6a:99:ca:a2:5d:d3:da:3d:b2:8a:
         06:e5:5b:1b:bc:66:a6:41:97:db:32:92:19:1e:c9:37:93:b6:
         bf:26:bf:ad:52:0a:f2:5e:c8:8b:02:41:d4:9d:4d:89:0a:33:
         da:58:00:9c:8e:60:0c:4b:91:80:e3:21:b3:b2:87:d7:fa:ab:
         b0:c9:65:ba:ec:b2:32:50:7f:bf:87:27:07:61:8c:2a:66:4c:
         d6:ad:de:6f:d8:7d:3d:2f:e2:8d:db:dd:80:c3:a8:28:8b:2a:
         bb:d0:bd:83:13:59:e8:b4:b1:da:bd:c4:fb:81:eb:4a:3a:97:
         db:46:74:fa:bf:62:5c:52:45:7d:76:17:ff:ba:4b:de:d1:04:
         54:a5:97:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:28 2025 by rpki-client