Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.cer (raw, json)
Hash identifier:          NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=
Subject key identifier:   40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0DFC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:35:09 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 200.16.8.0/21
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3580 (0xdfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC
        Validity
            Not Before: Jan  1 00:35:09 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367B216LA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:3b:34:f8:71:1a:34:c6:bc:f3:64:93:72:
                    dc:8a:42:e2:64:48:9b:16:20:12:30:b5:af:9f:82:
                    1c:d6:f9:b4:95:fb:85:3e:40:4a:7e:d4:20:f8:fa:
                    fa:1b:40:48:bb:15:83:fc:8a:f2:7c:fd:19:3a:4b:
                    0c:0b:9f:83:4f:24:5e:c8:c6:f7:e4:ac:64:aa:e2:
                    11:97:b1:4e:0d:fa:2a:57:35:75:36:8b:f7:f3:7c:
                    a6:0c:5d:f0:dc:68:ea:bc:b7:6a:dd:fa:5e:74:f4:
                    b7:3c:6c:31:69:59:37:1e:8b:48:6a:6f:cc:14:ec:
                    8a:96:65:16:f5:f1:a3:c0:b6:9a:dd:ca:29:fb:23:
                    87:d9:90:98:e4:68:e7:e4:87:54:e9:d7:ef:6c:c6:
                    cf:42:69:26:a1:3a:bd:7a:ea:d5:ef:ba:28:ad:3d:
                    d2:93:a7:60:40:61:aa:fd:c8:b6:54:ec:70:de:5f:
                    58:c7:ee:5c:04:de:8b:83:72:e1:34:72:0c:28:46:
                    bb:90:fa:1d:c6:c5:df:62:82:a2:6d:ad:c4:9c:1a:
                    b7:c1:03:53:0b:c3:df:65:67:46:71:87:28:e4:fc:
                    ee:08:64:a4:14:31:11:8e:07:d1:a3:bb:60:c0:26:
                    be:0e:53:a8:a7:65:2b:b7:29:99:b2:78:3b:55:b6:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:b1:7c:fc:48:cb:65:89:75:ea:46:99:7a:0d:bb:ef:1a:
         8e:1b:b7:e2:84:75:b3:f0:92:a7:40:2a:e2:de:3e:43:1c:25:
         2b:48:21:09:ea:0a:4d:4c:68:6f:e0:98:43:39:bd:14:db:23:
         52:c3:01:d1:ac:29:e0:f3:74:65:ea:69:d8:bc:a0:32:37:dd:
         47:f6:9d:d5:f2:8e:3b:d3:00:f9:51:2c:72:36:a8:ca:c4:d4:
         44:5c:1a:e2:9b:00:52:10:9c:58:7d:54:ec:16:d9:8e:f2:a1:
         e6:25:8b:3d:d8:42:27:22:f5:fb:ba:c5:fa:ac:b7:b1:11:a2:
         2b:df:76:c6:20:72:a1:8e:87:cf:12:90:60:bb:de:9a:8a:7e:
         41:d9:b6:dc:17:d2:2f:f6:a5:43:66:06:da:43:14:c1:4e:ad:
         eb:38:ce:4d:59:62:53:4b:f5:9d:57:88:4a:b3:b6:a7:34:a5:
         69:39:b3:82:fb:fa:86:84:28:3b:16:eb:73:f7:68:dd:dd:89:
         cd:a5:1b:de:0f:a2:9f:8e:9e:bb:a2:8c:0d:1e:92:98:eb:53:
         a2:71:12:a9:01:7a:5d:43:2c:78:c2:16:fd:b5:9e:00:19:37:
         c9:e6:f9:05:61:4b:67:5a:51:e8:6b:c2:a6:1a:83:f9:f7:ad:
         b6:13:13:e7
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD
TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF
M0JERDg1QkNEMzlEMkVCMB4XDTI1MDEwMTAwMzUwOVoXDTI2MDMzMTAwMDAwMFow
SDETMBEGA1UEAxMKRjM2N0IyMTZMQTExMC8GA1UEBRMoNDAzQUQwMTQwNUU5N0Iz
ODhDQjgzRTY5NkQwQjlEODBCQkEwQjhCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANK+OzT4cRo0xrzzZJNy3IpC4mRImxYgEjC1r5+CHNb5tJX7hT5A
Sn7UIPj6+htASLsVg/yK8nz9GTpLDAufg08kXsjG9+SsZKriEZexTg36Klc1dTaL
9/N8pgxd8Nxo6ry3at36XnT0tzxsMWlZNx6LSGpvzBTsipZlFvXxo8C2mt3KKfsj
h9mQmORo5+SHVOnX72zGz0JpJqE6vXrq1e+6KK090pOnYEBhqv3ItlTscN5fWMfu
XATei4Ny4TRyDChGu5D6HcbF32KCom2txJwat8EDUwvD32VnRnGHKOT87ghkpBQx
EY4H0aO7YMAmvg5TqKdlK7cpmbJ4O1W2ie8CAwEAAaOCAvUwggLxMB0GA1UdDgQW
BBRAOtAUBel7OIy4PmltC52Au6C4uDAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj
vdhbzTnS6zAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBbBgNVHR8E
VDBSMFCgTqBMhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9s
YWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLmNybDB2BggrBgEFBQcB
AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBv
c2l0b3J5LzA0RThCMEQ4MEY0RDExRTBCNjU3RDg5MzEzNjdBRTdEL2xhY25pYy10
by1hZnJpbmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYB
BQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCC
AUUGCCsGAQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5h
ZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdCMjE2
LzQ2NUU0OEJFODdENTExRUI5NTU1NDI0N0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsG
AQUFBzAKhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY3QjIxNi80NjVFNDhCRTg3RDUxMUVCOTU1NTQyNDdG
OEFFQTIyOC9RRHJRRkFYcGV6aU11RDVwYlF1ZGdMdWd1TGcubWZ0MB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDyBAIMA0GCSqGSIb3DQEBCwUAA4IBAQALcLF8
/EjLZYl16kaZeg277xqOG7fihHWz8JKnQCri3j5DHCUrSCEJ6gpNTGhv4JhDOb0U
2yNSwwHRrCng83Rl6mnYvKAyN91H9p3V8o470wD5USxyNqjKxNREXBrimwBSEJxY
fVTsFtmO8qHmJYs92EInIvX7usX6rLexEaIr33bGIHKhjofPEpBgu96ain5B2bbc
F9Iv9qVDZgbaQxTBTq3rOM5NWWJTS/WdV4hKs7anNKVpObOC+/qGhCg7Futz92jd
3YnNpRveD6Kfjp67oowNHpKY61OicRKpAXpdQyx4whb9tZ4AGTfJ5vkFYUtnWlHo
a8KmGoP59622ExPn
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:39:55 2025 by rpki-client