Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
File:                     WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer (raw, json)
Hash identifier:          cmf6G9CmB6estm6gF6pOCbR5hoNrzRT61OJ+1hmuVEw=
Subject key identifier:   5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2330
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:09:30 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37215
                          IP: 41.70.0.0/17
                          IP: 2c0e:7e80::/28
                          IP: 2c0f:ea60::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9008 (0x2330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:09:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36152D2AF/serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:c1:ae:12:bc:1f:68:e5:1d:93:a5:e9:cb:
                    83:90:62:07:e8:11:00:6e:ed:dc:f5:a2:0d:02:5a:
                    01:d3:ef:66:22:c5:ce:0e:c0:d0:f9:23:90:f7:83:
                    81:ab:ea:f2:4d:71:4e:0e:2f:f0:fb:73:8b:5a:33:
                    f4:89:af:02:c6:b7:7f:ae:c6:38:43:0e:53:db:7f:
                    61:7c:cc:53:ee:b5:25:79:bd:bc:98:0e:1e:0f:f3:
                    c0:55:9f:4c:38:56:ce:34:27:f0:13:41:96:ac:08:
                    7c:9c:b9:35:8a:8a:c6:82:eb:17:5f:2d:77:f3:6c:
                    5f:63:dc:0d:4a:7c:b2:99:b5:7f:32:c4:09:29:8d:
                    9b:dd:25:bc:82:50:16:52:e5:3f:a4:aa:d4:90:7e:
                    2a:6e:b4:a7:6a:11:72:79:5a:02:a7:40:1d:98:43:
                    5d:23:14:cb:5a:79:5e:87:6c:4c:31:98:39:6b:34:
                    c2:bb:23:13:bb:e6:13:86:a7:27:ef:ba:fc:61:1d:
                    9e:a1:af:5b:74:c9:7b:e1:c1:23:38:df:bb:4f:e6:
                    bf:f6:2d:db:09:0d:1f:d9:b5:b4:1d:49:3a:b0:18:
                    4c:0e:12:95:65:16:ee:c7:fd:08:b4:85:f6:af:4e:
                    06:5d:33:b6:e6:2b:44:fd:91:c8:ce:52:f7:73:f0:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37215

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.70.0.0/17
                IPv6:
                  2c0e:7e80::/28
                  2c0f:ea60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:77:14:b5:bc:ab:59:4f:78:ab:83:b7:f5:5e:60:b9:5b:8d:
         b3:6d:c5:ad:2a:4d:85:c2:cd:c0:65:bf:c7:07:48:fb:a6:b3:
         fc:9e:21:9b:cf:5d:31:c1:d1:0a:06:3e:1c:62:83:2d:e7:4f:
         10:89:e5:09:50:34:0a:c3:67:95:02:d6:36:24:f7:5d:85:ac:
         0e:5c:60:17:8c:55:a4:87:85:b7:e7:85:1c:1a:80:00:4c:2e:
         0f:7b:2e:2d:3c:99:5a:d9:ec:e7:6a:c2:a1:33:7f:38:98:2e:
         c1:a8:f9:57:b3:78:1b:0b:d6:48:51:dc:38:15:11:7d:90:60:
         83:3f:ae:a5:f2:81:0f:e8:0a:e7:10:21:fc:b3:f8:64:7f:a7:
         8e:13:2f:24:46:c0:63:64:86:71:1c:92:15:cf:2b:80:21:bf:
         35:3d:66:9e:c2:1f:18:cb:a1:08:fc:a8:39:69:0f:be:40:c6:
         d4:74:7f:46:ec:12:81:12:4a:7c:18:63:01:5a:f7:d8:42:6e:
         b3:4b:0c:36:f9:68:72:26:7b:25:cc:46:7a:aa:59:30:7b:ac:
         e9:3a:92:94:81:d9:b3:d7:a1:07:15:10:21:01:5e:f6:da:1a:
         ec:76:c9:c6:96:43:92:ec:3e:fd:3f:a7:57:4d:d6:b3:d0:91:
         e6:1e:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:32 2024 by rpki-client on console-fra.rpki-client.org