Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.cer (raw, json)
Hash identifier:          tOIf+IsrmWpT8bUVfVswpI6ztCBTyx+4PZZoDMlpZCg=
Subject key identifier:   83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1759
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:27:44 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.220.128.0/17
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5977 (0x1759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:27:44 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36D9B5BAR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:45:0a:f9:14:70:60:2d:c1:66:ab:1b:f0:
                    f0:2f:dc:de:13:95:ab:95:1c:8f:1e:87:8e:e2:f5:
                    54:a9:8a:69:21:89:06:f4:17:65:b8:27:fd:73:97:
                    f1:92:bb:75:c0:17:b6:e3:f8:cc:ba:7d:5a:6d:47:
                    2b:76:e8:34:93:2c:2d:6b:37:dc:e9:6e:b9:8a:6d:
                    8c:13:e1:ae:1b:aa:d2:d7:9b:e9:8a:2a:3c:28:9d:
                    2d:f6:cf:ef:d0:09:6b:d6:d8:99:b4:c2:09:36:30:
                    e6:01:8e:b1:2d:0a:e0:eb:05:d3:05:f1:dc:b4:f1:
                    90:76:7d:08:63:e7:bc:0b:5a:9b:2a:56:1b:91:2b:
                    69:ee:3d:5f:33:e3:18:90:bb:f7:c0:d0:2b:3d:6d:
                    6b:70:45:36:1b:1a:88:a6:03:7d:23:d6:1e:71:a6:
                    78:56:3e:ad:77:2f:ce:7a:37:84:0b:b1:32:35:93:
                    dd:45:3e:58:e2:fd:24:73:cb:6b:a7:fd:99:05:88:
                    be:27:41:f0:83:2d:ca:1c:bf:e0:fe:e1:5a:8d:a0:
                    ba:6a:71:28:30:06:3f:3f:d4:28:85:ca:a2:06:37:
                    82:22:5f:2c:69:eb:d6:b4:32:f7:6e:97:77:b7:0b:
                    a6:26:a3:ba:6e:40:cb:58:89:b7:bf:59:09:93:d0:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:f7:8c:91:15:0e:9a:bb:5d:1b:4d:e0:06:c9:99:e3:97:09:
         86:d1:2e:cc:a7:2d:f0:89:05:31:8b:95:2a:5e:9f:01:54:1f:
         15:81:50:a7:28:dd:b5:01:d1:ec:05:4d:62:4c:6f:65:bc:24:
         d7:4f:ef:73:b0:5c:83:83:cf:e7:22:00:b0:38:33:4c:f2:dd:
         75:26:a6:ae:6d:a7:22:f9:52:d2:5e:0b:a6:75:0f:fa:df:76:
         da:67:32:df:2d:e9:7a:19:44:38:e4:43:b0:80:ac:21:23:b1:
         c6:92:0c:d4:b0:fc:32:eb:e2:a7:38:c0:d7:fe:da:2f:04:f9:
         26:3a:43:32:0f:97:57:93:56:cc:57:0b:2e:9b:23:5b:f7:fb:
         f8:34:e5:62:88:48:36:f8:c4:27:07:f6:7b:61:b5:6e:60:3a:
         bf:53:9a:77:12:82:79:a1:db:57:ed:7b:4e:12:7e:c5:74:73:
         c2:e7:bb:0c:49:b9:47:0a:2b:2c:88:58:76:6d:9b:35:3f:c7:
         39:8c:bd:88:57:ed:10:5d:26:bd:12:ee:4b:a1:8d:78:96:e5:
         5a:29:0e:f2:99:f2:44:29:75:e2:66:ec:65:ff:2b:f8:71:32:
         a8:13:77:c5:e9:92:d3:f8:69:11:f0:de:29:19:a0:21:95:a9:
         8d:c1:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:49:01 2025 by rpki-client