Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
File:                     ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer (raw, json)
Hash identifier:          bojOTDvn7HhAaK78odWjR6ELtT1gALYqFKUz4mkDgaA=
Subject key identifier:   CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3394
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:15:19 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329510
                          IP: 102.207.120.0/22
                          IP: 2c0f:51c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13204 (0x3394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:15:19 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36F6A4DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:c7:2e:80:db:d6:30:e5:64:19:46:37:0a:
                    08:62:ec:09:95:95:46:e2:99:45:76:c3:e7:21:35:
                    31:14:71:40:d4:32:4f:e1:79:23:17:dd:a7:ab:10:
                    b3:e4:c3:16:65:35:1b:bc:d4:d0:82:37:62:b5:54:
                    ea:89:71:a1:d6:b7:f2:24:ff:a2:7a:82:72:5f:78:
                    ac:0f:c2:99:56:41:3c:f1:4a:0a:c2:3c:98:e9:5f:
                    46:35:d6:64:10:78:a1:f1:c5:3d:7a:3a:3c:28:7b:
                    ea:bc:2f:9c:98:f9:b7:36:e5:53:47:33:71:0c:71:
                    7f:48:cc:2b:12:3a:fb:9b:0b:0c:ad:ff:d1:a4:7a:
                    87:78:32:8b:13:e2:bd:a0:53:8c:84:a5:c2:e8:19:
                    50:13:53:4e:15:24:06:2f:25:bd:72:ff:8f:27:16:
                    53:b3:78:5c:2f:a2:64:c2:f4:79:03:77:41:39:b2:
                    85:48:67:76:47:f2:5d:87:9d:5c:6f:3d:5c:d6:90:
                    3d:e3:b0:e9:72:7f:6d:87:2d:c8:03:9e:d5:01:35:
                    97:75:a2:b7:c6:8d:c2:62:02:8d:35:2c:f5:d6:05:
                    3b:16:3f:fe:73:0d:04:e2:ab:ee:51:45:4f:a4:ce:
                    49:62:d0:e7:b9:5f:c7:1a:05:fa:58:e5:d7:2b:de:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329510

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.120.0/22
                IPv6:
                  2c0f:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:db:e0:f4:c7:88:ef:ad:4e:9b:eb:4b:c1:9e:dc:0e:4b:
         fd:1f:95:e1:3d:b7:03:1f:be:90:3f:a6:ba:7a:4b:e0:30:0c:
         ff:0d:18:47:df:5a:cd:75:02:84:ec:d8:5e:75:df:c1:31:4a:
         dd:6e:39:8e:37:44:87:15:9e:9d:d4:09:0c:29:0d:a9:e2:b3:
         2c:d8:d1:63:bc:4e:db:c0:b5:1f:61:58:9a:c0:11:58:d9:b2:
         9a:15:da:e6:b0:a7:07:60:8b:f8:85:0f:87:3f:d7:27:83:10:
         3f:0b:1d:43:8b:01:8d:3b:b0:8e:c6:c2:6f:8b:3d:c9:a4:3b:
         61:cf:16:a8:c4:ef:67:e9:e2:e3:e6:ff:d3:46:35:74:95:5f:
         60:91:26:01:bc:72:f6:fb:03:fb:59:28:d9:5b:32:17:30:c4:
         d9:39:3a:d8:1a:20:7f:31:46:7d:96:84:df:8a:60:f4:aa:32:
         1a:41:50:cc:6b:ae:96:42:2a:83:66:be:7a:5e:f4:bc:74:be:
         ce:07:b3:44:0e:b7:0c:15:56:9c:2f:78:c5:6e:d0:7e:3c:b7:
         bf:eb:c0:36:e3:85:51:eb:f1:af:7b:79:09:85:15:76:1b:bc:
         b1:51:5b:58:35:44:fb:d2:96:30:1b:c5:43:27:7b:e6:5e:0d:
         c4:b3:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----