Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
File:                     zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer (raw, json)
Hash identifier:          KbVjr9MQLdRPM+B3LTiPE0NMkV4pu7oXPhMPZshKzrw=
Subject key identifier:   CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A84
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 09:37:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37027
                          AS: 37084
                          IP: 41.188.128.0/18
                          IP: 41.221.32.0/20
                          IP: 196.45.32.0/20
                          IP: 2001:4258::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Oct 2024 00:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10884 (0x2a84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 20 09:37:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:42:40:1f:5f:79:28:92:cf:55:40:d2:2f:
                    4c:42:a5:ca:f1:05:21:35:29:74:44:22:3d:af:84:
                    40:f9:28:b7:3f:74:34:1a:9b:05:9c:c0:83:cd:48:
                    14:56:7b:88:de:38:c6:49:46:35:f6:b6:89:47:af:
                    a9:fa:ee:f3:88:17:08:df:25:36:41:e3:08:79:76:
                    4a:b4:e3:48:76:98:f9:b2:6c:db:ba:3d:68:6b:db:
                    49:75:07:82:6d:43:bc:2e:8b:35:34:ec:ce:33:03:
                    60:7c:5d:33:40:4f:74:e4:fc:e3:69:25:ab:18:a9:
                    1d:d5:63:f4:da:9a:08:49:6a:6f:d7:40:b2:ea:86:
                    a2:3c:8e:36:48:78:cc:b9:be:eb:13:82:6c:c9:d4:
                    f7:17:2a:07:74:a3:5b:ae:41:bc:32:bd:fe:b3:b6:
                    10:44:6a:e2:fd:8c:46:a1:8f:e3:d3:a1:a5:c3:5c:
                    3c:d6:a2:36:0a:e8:20:c6:ab:5f:b1:84:16:63:82:
                    43:29:78:3e:1d:63:77:90:72:10:8c:56:2e:5a:ae:
                    b9:56:17:61:ca:5f:99:c0:af:bb:23:01:35:ae:93:
                    31:d6:4a:48:46:35:1a:09:e4:16:99:e6:6e:4d:ea:
                    99:9c:25:76:54:ba:00:80:ed:b5:96:c1:60:08:7d:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37027
                  37084

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.188.128.0/18
                  41.221.32.0/20
                  196.45.32.0/20
                IPv6:
                  2001:4258::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:92:9a:f5:ca:c3:50:69:fc:a0:3c:2e:a8:44:df:ea:e5:
         ad:eb:b1:86:54:b7:e9:5f:0a:03:2a:a2:e9:14:96:51:28:9d:
         67:c3:e5:1d:70:5b:7b:63:ea:a8:2f:22:22:47:ab:8c:b9:dd:
         09:7c:75:86:ce:4b:da:ff:aa:61:98:c3:91:40:a5:4d:9b:1c:
         76:cb:27:74:e3:82:5a:21:80:90:f0:42:9d:9e:0e:1e:52:4e:
         de:4b:0a:28:45:5d:cb:41:f7:70:6d:7f:40:82:56:40:9c:cd:
         c8:d4:4f:e5:d0:4f:f7:40:96:a5:71:b7:74:6c:83:e0:8d:16:
         5f:22:86:38:07:92:ab:84:fc:98:93:30:1c:2c:9f:b4:8e:4f:
         fd:90:ed:74:fa:50:0a:1f:80:53:75:37:bf:35:0a:37:71:29:
         17:e8:8b:d1:a3:dc:c9:d0:b8:4e:94:e9:81:77:29:1e:5f:fb:
         eb:65:ca:83:2c:5b:59:a2:0e:e7:87:63:48:a5:c1:ae:88:63:
         d9:57:a1:33:3f:c7:4d:8e:e3:a8:73:61:d6:d5:66:3a:55:92:
         0d:70:64:39:0a:cb:a5:f7:a2:67:63:e6:ae:1a:46:a4:c5:b0:
         99:f2:2d:12:d9:01:fd:9c:11:a0:00:72:82:5d:dd:3e:4b:34:
         7c:83:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 01:26:36 2024 by rpki-client on console-fra.rpki-client.org