Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
File:                     0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer (raw, json)
Hash identifier:          zO3QG5srnWBd/Ext5y18jhy4xkdNGV0UmFXQ9f+EwuA=
Subject key identifier:   D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       264F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:04:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37334
                          IP: 41.76.96.0/21
                          IP: 197.221.96.0/19
                          IP: 2c0f:ff30::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9807 (0x264f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:04:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36862C7AF/serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:1a:78:2c:bd:0a:c4:1f:be:53:22:21:cd:
                    58:f2:b0:83:c5:06:cf:d1:98:31:e0:ae:a0:5e:50:
                    ff:54:f0:a4:dd:55:bd:f1:2e:b7:e3:8d:48:82:85:
                    67:fe:c2:57:a8:e0:15:3a:a5:a3:62:09:05:ec:26:
                    a0:3d:58:be:15:02:c9:bf:38:c2:be:a0:f2:c9:28:
                    22:3a:90:d5:ad:48:4b:db:a1:f7:2c:b5:c6:96:a1:
                    3c:96:5b:2c:de:f7:ee:e4:81:9b:e9:dd:0d:f5:ac:
                    13:63:6a:56:78:64:d3:93:6f:a0:32:46:88:43:9f:
                    55:91:2f:00:eb:9a:44:26:27:fd:13:a8:12:08:68:
                    93:a2:f0:96:48:34:8d:4a:7d:c6:3c:09:ab:d8:f3:
                    b6:56:04:f7:f8:d3:d6:41:38:6d:e9:87:e1:72:af:
                    24:f3:66:e3:bf:c4:70:72:c8:1f:b8:31:58:38:65:
                    44:c7:9c:79:53:f0:88:fe:3b:d9:96:16:b3:b7:6f:
                    06:89:3b:97:75:11:ec:73:a1:9e:75:b0:44:3a:5a:
                    c4:8b:e2:db:ee:de:53:58:19:ec:87:01:26:34:b3:
                    4b:41:34:5f:59:f6:b4:42:b3:60:b9:b4:1f:d7:09:
                    34:96:4a:b3:d3:df:79:3e:06:18:25:08:b0:19:fd:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37334

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.96.0/21
                  197.221.96.0/19
                IPv6:
                  2c0f:ff30::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:c1:c5:c2:6b:e4:f2:aa:33:45:2f:f1:24:f4:37:04:55:88:
         dc:52:f6:94:66:37:7b:1b:f0:a3:40:4a:ea:95:0a:aa:77:b5:
         d3:0c:f4:5d:d1:b8:aa:bb:46:de:2f:0d:85:67:cf:2a:98:0a:
         18:d0:d3:f4:e4:6a:d0:47:47:db:90:df:5e:4b:53:2a:5b:1f:
         ca:f5:db:9b:9d:24:74:50:4c:17:fc:ff:aa:4d:17:8d:96:0e:
         83:3f:4f:95:7c:72:6c:33:8e:41:b4:2e:a4:97:f9:dc:33:df:
         67:e6:5d:d0:11:99:97:18:df:2e:ec:a5:c5:b5:c6:0d:14:81:
         ed:a5:9e:b9:d2:90:52:46:eb:db:91:3e:c2:b9:3a:4b:e1:99:
         ce:b0:c6:a2:bd:91:00:e0:37:b2:45:90:14:18:89:23:67:66:
         46:d5:57:84:91:09:0f:13:9e:67:4a:77:bc:34:7b:f4:5d:0a:
         b2:e5:16:0c:bd:31:dc:44:29:c4:b5:bf:8c:81:e4:54:40:34:
         92:8c:48:42:18:bc:c9:1f:29:ce:8a:54:48:c1:c7:22:0c:60:
         98:04:2c:e7:4e:ec:5d:e3:cf:86:e8:b5:94:fe:a1:cc:f5:0f:
         57:27:c8:8d:7f:66:9a:e6:56:2c:93:56:87:1a:c9:54:50:de:
         52:58:c4:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:25 2024 by rpki-client on console-ams.rpki-client.org