Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (raw, json)
Hash identifier:          n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=
Subject key identifier:   E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0F10
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:50:43 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 82.101.128.0/18
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3856 (0xf10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC
        Validity
            Not Before: Jan  1 00:50:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3695CC5RI
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:b3:87:23:f9:45:99:2e:ef:ed:89:5d:75:
                    e7:a9:7a:fc:1d:91:c1:60:37:28:5d:bf:94:4b:ab:
                    a4:ef:cb:ac:cf:48:62:e4:53:28:b4:eb:b1:75:23:
                    28:77:4f:75:f6:95:82:b2:b8:46:75:26:17:7f:4b:
                    bf:33:24:ba:80:79:c1:38:05:a4:5f:21:1a:a3:e3:
                    f8:3e:c2:8a:f8:f8:e2:ac:a9:83:87:a0:c6:71:6d:
                    10:95:58:fb:16:2b:8e:51:33:f6:85:2a:60:f1:28:
                    c3:02:df:7a:24:75:3b:48:25:20:51:2e:3a:8b:d3:
                    21:9c:14:0d:2f:19:b0:e1:14:0b:fa:d1:01:c7:26:
                    81:5e:7b:6b:67:0e:5f:98:d8:2e:c0:99:eb:37:0f:
                    77:db:27:3a:31:4a:ef:f9:8d:c2:99:97:26:02:90:
                    1f:ae:cd:63:1b:19:98:0e:17:32:67:f8:38:fd:27:
                    fe:17:90:6e:76:66:8c:a2:43:c4:b7:2c:53:06:06:
                    45:71:42:b5:c7:66:fc:61:6f:e7:12:9e:56:0e:38:
                    22:29:71:39:01:68:7a:78:47:5b:3f:ee:4a:bd:5f:
                    4e:42:d9:1c:01:c9:f2:dd:c9:4f:01:8d:72:e3:5b:
                    fb:60:4e:22:f4:69:db:cd:80:cf:75:b2:39:55:a2:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.101.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:36:5f:a1:bd:d5:c5:73:00:c4:ec:20:bf:20:40:46:43:
         85:ee:4a:ee:0c:f5:85:26:d6:51:9b:a5:f1:2c:d6:66:7f:a0:
         23:cd:6e:3c:fc:70:54:07:ce:e3:2d:8e:4f:e5:dc:aa:3e:a9:
         a6:37:8c:53:1f:2f:93:63:df:13:2b:17:16:d6:b1:f1:c2:3b:
         34:52:0e:1c:a1:08:3e:f2:ad:03:0a:9b:de:d5:8e:11:10:46:
         ac:78:16:06:77:98:62:a5:a1:99:1b:38:fb:6c:66:d1:67:a3:
         b6:b0:fc:ca:e7:ef:f4:c8:8f:86:a3:9c:76:6c:e1:77:fc:cc:
         01:fc:45:be:66:a9:a1:51:69:be:ef:94:76:8b:5f:17:dc:d5:
         d7:20:ab:ad:dc:73:0d:7f:76:d2:7f:91:46:67:c5:87:0f:0e:
         2f:5e:c9:93:8b:87:cf:e2:50:f0:dd:4b:d3:00:e9:68:0d:de:
         01:cb:cd:ef:46:a7:8f:da:a3:f1:8d:7b:e4:c1:99:b0:b5:b4:
         f1:b6:aa:ab:cc:64:3f:a3:69:74:2a:e7:03:6a:87:10:51:1c:
         68:d5:80:26:8d:84:c5:28:11:92:71:57:07:0c:39:f6:bc:99:
         86:c7:12:49:00:59:0e:d1:53:bb:8e:1a:12:30:df:a6:bf:d3:
         82:c6:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:19 2025 by rpki-client