Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.cer (raw, json)
Hash identifier:          8U6XoomNe6Ajb1XRpSda3mPIqgkOx0kB3QrcgzHvKME=
Subject key identifier:   DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       16A4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:52:55 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 169.239.28.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5796 (0x16a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 00:52:55 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3668CFEAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:80:e5:cc:31:dc:50:60:8e:5d:5b:ee:9d:
                    9c:b1:f8:94:54:2b:01:ba:dc:03:20:83:cd:9e:6b:
                    87:9e:69:83:a0:ef:ba:cf:81:51:98:c6:6c:58:00:
                    2c:a5:83:de:a1:d5:1a:30:cc:59:b8:81:d2:ba:69:
                    d1:cb:55:b9:37:16:2b:ce:45:94:36:f4:b5:18:0d:
                    e3:3a:24:b6:ff:c5:6f:c3:60:42:b2:c6:af:0f:47:
                    b6:8e:d6:e6:31:84:c3:94:21:24:68:dd:62:1a:e4:
                    d5:d4:3b:d5:9f:41:df:8a:e8:cd:29:50:3e:ba:43:
                    17:1d:ed:98:07:90:0c:67:14:d7:fc:30:42:ed:99:
                    cc:5a:ef:fd:f0:e1:a3:b1:b4:90:4e:02:e2:30:cb:
                    2c:46:3e:b3:62:b8:f3:7c:ba:1d:34:ff:c7:4e:99:
                    9b:8a:f4:ba:99:b3:de:0d:04:f0:0d:4f:14:5a:87:
                    52:cf:91:09:61:e0:b6:80:31:51:93:5d:c4:90:1d:
                    a9:4c:3f:27:5a:6d:92:97:e9:7d:26:d4:90:e3:df:
                    6f:0a:c8:0d:3c:c8:24:89:20:0a:9f:c0:c9:64:06:
                    f0:c5:22:dc:63:16:23:73:9c:07:51:1a:d3:0b:06:
                    99:c9:f8:b0:2e:76:c8:97:3b:6f:ae:1b:1e:02:f5:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e2:80:8d:44:20:cc:71:a3:2c:b8:80:d4:a3:0f:02:ff:b2:
         74:23:e1:e9:1e:fc:be:78:d4:1d:b8:9b:d6:93:f9:92:83:11:
         04:ef:c7:86:77:59:34:1f:d3:5a:33:5d:e2:9a:3e:dd:f8:f7:
         7c:82:89:58:ba:99:b8:f7:3e:6d:9c:34:f9:22:e9:b0:53:53:
         fb:bd:b3:4a:a7:c9:ac:55:57:f1:9d:f9:8f:d6:c9:77:eb:40:
         e2:ac:3b:0a:46:49:ae:a3:76:03:97:42:4f:a4:9f:2e:4a:d7:
         7b:3a:ea:dd:ca:15:ff:60:6a:9e:5f:00:9c:df:31:f1:3a:1b:
         a9:1f:59:ee:97:7a:9c:af:93:55:f6:d8:e0:e6:81:bb:61:1a:
         c9:4b:5c:c4:e5:ab:39:3a:c7:94:20:81:ac:7c:d2:9d:0d:a7:
         cb:0f:f7:1e:d9:e9:db:c9:de:86:b2:53:01:f7:9c:79:92:0d:
         60:4b:af:f1:47:e4:e7:1e:fa:35:a2:2d:23:be:4b:d3:5e:26:
         d5:c2:10:51:99:cb:bb:0f:6c:88:57:87:27:98:dc:d8:c5:2b:
         1a:9c:3a:92:ea:31:e5:8b:21:f5:6a:8c:3a:22:63:5d:51:22:
         39:de:bc:ca:f0:a3:ea:71:10:6c:a4:af:7c:a8:16:d1:f4:12:
         ec:9f:74:c6
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFqQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMDUyNTVaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjY4Q0ZFQVIxMTAvBgNVBAUTKEREQ0I0QzlDNUJBMjJEODg5
RjI1MDkyREM1Q0VDOTI1QkE4NDNCNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDWQ4DlzDHcUGCOXVvunZyx+JRUKwG63AMgg82ea4eeaYOg77rPgVGY
xmxYACylg96h1RowzFm4gdK6adHLVbk3FivORZQ29LUYDeM6JLb/xW/DYEKyxq8P
R7aO1uYxhMOUISRo3WIa5NXUO9WfQd+K6M0pUD66Qxcd7ZgHkAxnFNf8MELtmcxa
7/3w4aOxtJBOAuIwyyxGPrNiuPN8uh00/8dOmZuK9LqZs94NBPANTxRah1LPkQlh
4LaAMVGTXcSQHalMPydabZKX6X0m1JDj328KyA08yCSJIAqfwMlkBvDFItxjFiNz
nAdRGtMLBpnJ+LAudsiXO2+uGx4C9VpRAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
3ctMnFuiLYifJQktxc7JJbqEO3gwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjY4Q0ZFL0E1RjI3
MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2OENGRS9BNUYyNzFFQTM3NTcxMUVFQUFBQTUzMTg0QUQ5RTZG
Qy8zY3RNbkZ1aUxZaWZKUWt0eGM3SkpicUVPM2cubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqe8cMA0GCSqGSIb3DQEBCwUAA4IBAQB54oCNRCDMcaMs
uIDUow8C/7J0I+HpHvy+eNQduJvWk/mSgxEE78eGd1k0H9NaM13imj7d+Pd8golY
upm49z5tnDT5IumwU1P7vbNKp8msVVfxnfmP1sl360DirDsKRkmuo3YDl0JPpJ8u
Std7OurdyhX/YGqeXwCc3zHxOhupH1nul3qcr5NV9tjg5oG7YRrJS1zE5as5OseU
IIGsfNKdDafLD/ce2enbyd6GslMB95x5kg1gS6/xR+TnHvo1oi0jvkvTXibVwhBR
mcu7D2yIV4cnmNzYxSsanDqS6jHliyH1aow6ImNdUSI53rzK8KPqcRBspK98qBbR
9BLsn3TG
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:36:47 2025 by rpki-client