Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (raw, json)
Hash identifier:          QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=
Subject key identifier:   E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0F20
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:53:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 62.173.32.0/19
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3872 (0xf20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC
        Validity
            Not Before: Jan  1 00:53:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36CC8EBRI
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:bd:cf:bf:05:da:f0:41:18:c5:d7:4c:0d:
                    1f:95:2b:74:a3:32:be:3f:ee:72:e1:6f:af:81:9f:
                    22:30:67:b9:77:7e:1c:cf:35:af:63:75:fa:41:c9:
                    66:8c:4f:f9:b0:dc:04:e6:e2:02:c4:1d:e5:7d:68:
                    30:fb:c8:e7:28:da:9f:34:f7:4a:52:b9:6e:90:f6:
                    04:9e:02:1e:e5:29:5c:c1:17:91:dc:e5:1d:c4:72:
                    41:38:6d:15:00:90:bd:bc:3a:9e:aa:11:90:31:09:
                    f4:0f:18:1a:27:87:70:f9:7a:c2:ff:ae:f7:5c:01:
                    d4:24:bf:ef:1a:71:57:55:54:53:25:da:e5:fe:67:
                    45:d3:e5:3b:c9:ab:48:e9:3f:35:31:18:a0:0c:20:
                    d0:10:aa:88:9b:49:06:f8:77:0b:ed:eb:7a:11:c4:
                    97:39:53:21:b4:95:6d:83:aa:43:ba:22:f5:1b:04:
                    2f:da:b9:3c:11:d1:31:84:78:1c:8e:e6:88:78:74:
                    c9:a2:cc:32:dd:2b:f0:be:60:9b:cd:df:57:6f:b4:
                    4d:97:58:7c:eb:a3:ba:d7:1b:18:5d:97:1c:09:b4:
                    26:c5:b3:f3:bf:8c:98:7a:05:73:30:a5:f6:5b:8e:
                    e2:8e:1d:f5:84:4e:d0:30:25:08:6f:e6:7e:01:04:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.173.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:0d:4c:5a:18:08:22:10:93:62:da:68:72:28:03:58:aa:f5:
         8e:bd:5f:e0:3e:e4:73:de:ed:bc:4b:69:2d:78:d5:59:69:84:
         ff:4e:48:6e:3f:d7:e7:87:55:39:26:07:2d:66:85:1b:41:ce:
         5d:22:b8:37:d5:74:69:b5:e2:9b:b0:44:6b:ca:ce:ae:18:da:
         e8:1d:72:b4:bd:8a:11:7f:37:d4:da:8a:d3:2d:97:a2:90:07:
         b9:f5:19:50:a8:9e:c6:fb:b3:5b:29:db:8c:b3:82:d2:96:07:
         50:7c:7d:e3:dd:25:6b:b8:ba:41:17:88:63:cc:4a:ee:48:02:
         dc:25:68:64:37:54:4e:99:3b:8c:db:2c:43:49:e3:ab:8d:3c:
         52:39:f4:72:9b:ff:55:ca:ba:27:1a:56:d8:e1:01:1b:41:65:
         bc:d8:27:0b:ee:a9:4f:b0:5d:bc:41:10:77:c4:b8:88:81:4d:
         80:ef:ec:74:45:c0:88:4c:ac:6f:f9:90:6b:3a:34:97:8c:6f:
         9b:5a:85:ee:0f:60:45:8d:5f:c7:d1:0b:82:ad:38:11:f1:a1:
         ad:4c:42:8a:9f:78:86:8f:32:bc:66:7e:f9:87:a4:35:56:62:
         1f:51:5f:15:e3:82:bc:a0:f2:50:9e:c3:c7:f3:da:96:bc:7a:
         29:94:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----