Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.cer (raw, json)
Hash identifier:          wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=
Subject key identifier:   9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0F00
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:47:46 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 80.240.192.0/20
                          IP: 217.21.112.0/20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3840 (0xf00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC
        Validity
            Not Before: Jan  1 00:47:46 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3668037RI
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:cf:0b:1e:92:6d:e8:59:c4:b4:ef:43:f8:
                    10:ac:2f:43:fc:fc:95:b0:17:a6:3c:fd:71:89:77:
                    81:a8:36:b8:de:51:e6:05:85:3c:4b:b1:74:00:fb:
                    b1:40:03:d6:f2:1b:57:9f:37:cb:3e:4a:cb:c9:79:
                    3c:d6:e7:c2:5a:51:b4:ef:c0:b3:c4:c6:5a:70:df:
                    58:0b:b5:ab:a9:4c:21:00:0a:da:be:5e:02:65:2f:
                    db:b0:e7:93:73:85:4e:0b:04:73:4d:e3:9b:80:e9:
                    ab:b3:5c:a1:d9:1e:ac:50:c1:fd:7d:cd:05:3b:bb:
                    b9:e9:2c:56:e6:a3:c9:19:da:ec:18:ef:b9:d5:c9:
                    a6:b4:52:b6:e6:e1:fd:8c:14:b4:0b:9c:67:30:c1:
                    48:cc:42:6b:cc:00:1e:92:14:d2:4d:f4:7a:2a:0f:
                    c8:51:97:56:35:62:e3:c4:3e:86:31:11:93:f4:4d:
                    3b:f7:a0:1f:82:38:9e:f5:45:f6:00:28:84:34:83:
                    8e:e7:3e:7f:22:eb:df:4c:e6:5d:16:a4:cf:99:1e:
                    df:22:ee:94:ac:e2:6e:cf:eb:78:84:73:5a:06:cd:
                    86:43:d7:ae:85:3f:36:20:23:fd:47:99:72:01:f5:
                    e6:e0:b8:3f:95:6e:ba:98:36:eb:ad:b0:33:83:d6:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.240.192.0/20
                  217.21.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:5f:98:a6:08:88:5f:62:ae:16:00:85:16:e3:42:6b:8c:
         b1:27:24:d7:7b:00:23:0e:9d:74:c7:b5:c9:0f:38:82:64:bc:
         28:e6:bf:ae:95:98:52:28:23:52:34:49:81:32:6d:4c:d8:08:
         5a:86:9b:01:e4:37:b9:05:ec:73:24:ea:02:d3:85:e7:21:fb:
         91:e9:af:9b:4e:e8:05:f0:a8:bd:2f:c6:46:43:db:15:04:f2:
         3c:2f:58:c4:40:c9:f4:1c:37:87:50:37:2b:ea:31:68:3e:e9:
         16:33:66:d3:e4:8b:f9:37:5f:2c:7c:3e:7c:76:8e:6b:60:a1:
         19:69:8d:29:5f:f6:b8:5d:b1:22:69:7c:c6:90:05:de:b0:cd:
         9c:24:24:64:52:38:0c:05:a7:3a:d2:da:d0:4b:05:5e:07:f7:
         27:ac:30:79:43:af:30:49:f3:79:c3:c8:d9:fe:63:6f:73:64:
         a9:1d:e4:48:43:80:cb:2d:46:a8:73:70:6f:3a:09:30:a0:8a:
         24:84:f9:4a:af:94:e9:21:e1:8f:67:ca:16:84:30:ce:c9:84:
         42:56:3f:cf:95:cf:10:33:3b:b9:20:ca:e9:1f:d0:fe:ec:74:
         f2:87:3a:5d:9d:a3:49:fa:ee:4b:34:e2:6f:4f:eb:a7:43:40:
         98:c7:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:09 2025 by rpki-client