Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
File:                     BWiAuMNgRKWRJvERqjVFvCDBKGI.cer (raw, json)
Hash identifier:          wWv/VsC09N8fwfVWhbDSTqTV7z5ukoaASY+P2IZGuFg=
Subject key identifier:   05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       178B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:38:00 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 169.239.68.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6027 (0x178b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:38:00 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36FC328AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:7b:3c:31:1e:76:af:38:57:43:49:63:a5:
                    0c:11:d7:26:4c:87:43:c1:9d:bd:62:5a:35:08:c2:
                    82:25:dd:e6:31:80:21:83:52:cc:90:a5:97:d3:69:
                    86:ba:6b:f4:da:9b:2f:30:d2:d6:56:c3:c9:7f:6f:
                    4d:a6:d7:7a:b7:da:b6:39:2b:d5:a6:68:15:87:09:
                    46:38:35:9d:0b:33:e8:21:f0:8b:4d:6b:b2:0c:ee:
                    29:f2:9e:9c:85:b9:7f:56:6f:1a:aa:b8:a2:40:df:
                    d2:3d:0c:cb:38:ef:a1:cc:56:a7:24:2a:c8:9a:1a:
                    31:1d:4a:04:69:20:96:15:02:fa:fa:aa:e1:b4:98:
                    e5:fa:47:2b:10:f9:97:5f:b3:47:0c:1e:1f:04:2f:
                    07:82:ed:29:80:30:58:1b:bd:25:9a:42:a3:2c:48:
                    6b:a9:72:a8:88:3b:b5:b7:a5:3b:b7:5a:58:b2:c9:
                    71:0f:01:f6:15:47:03:ec:0e:ed:fe:96:b6:d9:11:
                    21:81:dc:e5:66:bc:c5:49:2c:8f:5b:a1:18:4f:3c:
                    84:2e:d2:6a:dc:c3:71:60:0b:43:fd:a1:22:1a:d8:
                    76:2c:d8:79:e4:b9:c3:5c:2c:5d:e2:62:34:78:37:
                    ef:f9:ca:d7:f7:99:d2:7c:11:c1:f5:5a:c5:b5:64:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:2a:d0:9d:ed:74:84:89:9e:0d:4f:17:a5:f4:47:47:0f:
         97:17:df:e9:4f:2c:ee:7c:84:77:65:03:3c:6c:ed:70:fb:1f:
         11:41:3e:a8:69:a4:3a:1d:be:ec:06:21:75:08:8d:b1:4b:34:
         b5:bb:04:9f:bd:68:9a:d1:63:1b:55:27:29:4c:ee:91:20:71:
         9d:51:80:8e:62:36:68:97:65:0a:d1:43:40:ed:91:c3:1e:f2:
         66:6d:ca:c8:3c:c1:4b:ba:cb:3f:cd:99:06:ad:7b:85:7e:7b:
         14:2b:17:9a:bb:e1:be:dc:25:1e:14:91:0f:80:55:11:22:36:
         ac:93:ec:5f:0f:09:7e:8f:d9:81:04:2b:f6:08:87:82:d1:34:
         79:fe:11:0f:ca:3d:59:4d:a1:fa:49:1f:2d:b9:31:af:c2:bb:
         30:86:a2:a8:2e:3e:d6:a9:0d:68:e3:63:c2:88:b7:61:a8:3c:
         f8:0e:b9:16:4c:7e:89:b1:1a:50:29:e0:26:c7:6f:3d:c3:ec:
         5e:9c:31:50:7a:d0:ec:ee:89:a2:9d:30:d6:05:0b:6b:25:62:
         78:3a:85:1f:66:f3:65:b4:a0:3f:2f:0c:1c:42:f1:9f:02:8f:
         ea:ce:24:a8:85:54:79:c1:65:9b:06:ef:29:94:95:ce:b7:e0:
         bf:f2:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:34 2025 by rpki-client