Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.cer (raw, json)
Hash identifier:          qwur42eNb/VVr2NhTCRAuqF2pRRkpYR+zrbOvurjMXM=
Subject key identifier:   A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       170C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:12:56 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 169.255.160.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5900 (0x170c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC
        Validity
            Not Before: Jan  1 01:12:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36A15D5AR
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:06:3b:ef:7d:8f:11:70:a2:f7:33:d6:24:
                    ec:d3:b3:6a:bb:c8:5e:2a:ba:76:5b:83:70:61:18:
                    ca:81:2c:d5:df:ec:b6:ea:b2:9f:49:7d:f6:b2:11:
                    78:ec:73:a9:cd:8f:e4:cb:00:cb:2c:86:38:b4:4d:
                    c2:5c:8c:da:c8:97:ef:85:d7:49:0d:6f:ba:38:bc:
                    91:12:e4:d5:6c:c7:bf:be:e5:eb:d5:04:cb:e4:e0:
                    94:19:5b:af:9c:b5:d6:63:66:1f:46:d2:5d:5d:f8:
                    54:fd:f3:a7:8d:f3:7a:d0:1c:1c:eb:39:7e:92:7d:
                    d5:09:8a:8b:ca:44:51:80:77:a2:54:32:9a:44:78:
                    3b:7a:14:01:7c:56:e8:a2:96:b3:52:26:f5:f0:5c:
                    1b:1d:3a:c0:f4:29:a3:f7:6b:83:e1:e4:1b:ea:f5:
                    31:60:b6:5d:b5:e3:32:1c:da:7e:af:05:00:27:83:
                    ef:bd:ed:d5:76:9c:ce:e4:4f:e0:00:36:49:82:fc:
                    5e:b5:83:1a:92:fa:c0:80:75:5e:48:c7:32:41:69:
                    d3:74:38:57:d1:07:ce:9d:66:0e:8f:c8:2f:99:b7:
                    f7:d4:de:40:48:3d:db:0c:4a:19:96:41:2a:d5:c8:
                    e4:a9:e8:65:7c:d0:40:81:84:81:d5:4a:97:6e:f8:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e7:86:a9:c0:b7:35:73:9b:73:19:b4:62:8e:48:06:f0:04:
         17:63:5e:4e:8b:c4:5c:16:78:0e:af:53:db:72:d5:33:ba:6a:
         76:a2:ed:bc:fb:5a:9f:8d:43:5a:af:61:c8:41:cd:41:93:1f:
         35:4e:76:9a:37:ae:e3:69:26:75:89:e6:e4:1b:1c:88:01:90:
         36:5e:5e:71:7a:46:98:2d:30:19:c8:91:b9:33:2c:66:0d:a2:
         69:9d:ce:15:70:e7:6a:a9:5f:a3:6b:92:f8:06:3f:b2:c1:9c:
         fa:52:f4:9c:2d:1f:a7:3a:cf:88:63:e5:4d:fe:d5:68:50:36:
         f7:20:0c:5f:fe:a5:00:74:c0:df:c1:77:96:1e:a2:31:41:1b:
         18:8f:94:1c:66:a5:49:a6:d7:95:5f:9c:c5:22:b5:c7:74:52:
         af:35:2c:98:f5:b2:fc:d6:00:21:45:7a:00:78:14:81:f4:6e:
         03:19:4a:4f:d7:83:0c:49:a2:a3:45:25:1a:52:08:d9:22:02:
         cc:d1:68:cd:c1:b7:45:ed:09:fa:ae:11:62:4c:ce:3c:1b:ac:
         db:8b:da:c4:b6:44:ac:50:76:4e:05:f6:bb:61:21:a5:b9:17:
         c8:43:dd:c4:07:89:67:48:25:a5:f3:0d:16:03:e9:39:52:27:
         d4:c4:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----