Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.cer (raw, json)
Hash identifier:          Gbb7nVPXnFwcORiMcX+QWCc8cXKZNIJjp4QB57W2cCY=
Subject key identifier:   D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24E6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:02:34 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36955
                          IP: 41.211.96.0/19
                          IP: 2c0f:f7d0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9446 (0x24e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:02:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:a7:24:c2:26:22:5d:79:b6:9c:83:94:7f:
                    6f:fe:ee:f5:f6:3b:ac:71:50:f9:68:b3:09:02:47:
                    bf:4f:55:e4:c6:57:9a:6e:48:1e:c3:2b:b1:12:ba:
                    6d:aa:af:e6:fd:b1:f4:70:6e:88:df:e0:0e:a0:46:
                    05:2e:22:81:b7:e7:e3:e5:bf:e8:5a:09:07:c0:a5:
                    cf:be:92:89:8d:10:f2:bb:d3:f1:e4:f2:d3:f9:3b:
                    d2:7d:a0:27:b4:1d:47:d2:b8:ed:06:af:32:aa:89:
                    0a:b5:9a:e1:da:d9:25:d4:a5:a2:57:01:ee:3d:cb:
                    69:37:ec:0b:c5:4b:1a:8a:35:d4:bc:a7:83:14:20:
                    52:61:a9:84:d3:a4:bf:5a:4b:58:5f:e3:d6:35:3a:
                    22:fb:99:c2:f5:e4:c8:8c:4f:24:a6:e5:6b:d9:4b:
                    4f:5b:f6:db:0a:47:3b:db:bc:89:77:3d:c1:b3:8a:
                    5b:d8:6d:ab:f2:17:e0:e4:17:a5:42:16:db:0b:ac:
                    97:dc:eb:da:9c:53:62:b9:64:3a:49:02:06:71:13:
                    7b:1b:46:bc:44:a6:44:27:94:be:b9:3d:4b:dd:82:
                    83:0e:c2:17:c2:95:ee:a9:15:d5:b8:e9:3e:30:16:
                    93:08:54:52:91:1e:d5:92:e4:2e:af:4d:94:87:2d:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36955

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.211.96.0/19
                IPv6:
                  2c0f:f7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:bb:03:af:cf:c5:55:7e:6d:2a:45:f4:c9:47:3b:f1:29:
         e0:79:35:c3:eb:2c:4b:1a:99:c3:34:91:58:d4:8a:0c:b8:ba:
         d3:48:c6:63:28:d4:fd:9b:65:5b:e7:85:40:24:02:0a:c2:af:
         2b:3a:ef:db:b7:6b:d3:77:08:2c:bd:e0:09:d6:19:55:74:df:
         57:c7:a9:54:d5:8b:18:cc:17:0a:26:50:c6:9b:2f:f9:d0:19:
         2c:54:0f:01:5e:07:b3:28:dd:57:e7:68:c1:d9:a8:28:dc:8a:
         86:3e:5b:b7:cb:d1:47:a3:bd:db:7d:04:4c:99:47:62:40:a9:
         fd:59:0c:08:1a:f9:ab:a8:c9:8a:6b:25:13:59:b2:76:35:3a:
         e5:04:cc:bc:26:84:bb:68:42:6d:9c:07:81:95:5c:8f:64:36:
         2e:48:c1:e2:4f:b5:01:cf:d8:b5:6b:75:7e:5e:af:d4:2c:37:
         00:df:23:a0:4e:65:57:b2:1a:78:8e:4f:3a:f0:2f:8b:b2:a6:
         4a:05:00:61:cf:87:45:5c:fe:f0:b3:27:fc:53:cd:56:9f:d8:
         fe:a6:a2:84:94:f2:f8:50:8f:7a:74:46:3e:c8:dd:6b:00:4c:
         34:b7:4f:4f:94:67:6c:05:97:48:02:d1:cb:96:75:06:8f:f9:
         6e:6d:a2:d7
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICJOYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMjAyMzRaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjU2Mzg3QUYxMTAvBgNVBAUTKEQxQzY1NzgwMUFERkNFMjU2OTRERkJC
MUE5NUM2Q0RBNDQ3RTNCQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmfqckwiYiXXm2nIOUf2/+7vX2O6xxUPloswkCR79PVeTGV5puSB7DK7ESum2q
r+b9sfRwbojf4A6gRgUuIoG35+Plv+haCQfApc++komNEPK70/Hk8tP5O9J9oCe0
HUfSuO0GrzKqiQq1muHa2SXUpaJXAe49y2k37AvFSxqKNdS8p4MUIFJhqYTTpL9a
S1hf49Y1OiL7mcL15MiMTySm5WvZS09b9tsKRzvbvIl3PcGzilvYbavyF+DkF6VC
FtsLrJfc69qcU2K5ZDpJAgZxE3sbRrxEpkQnlL65PUvdgoMOwhfCle6pFdW46T4w
FpMIVFKRHtWS5C6vTZSHLcRLAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU0cZXgBrf
ziVpTfuxqVxs2kR+O7owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NjM4Ny9DNzhFRUY5MDkwQ0Qx
MUVDOEI3QjI5QTA1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTYzODcvQzc4RUVGOTA5MENEMTFFQzhCN0IyOUEwNUE0MEQ1NzcvMGNaWGdC
cmZ6aVZwVGZ1eHFWeHMya1ItTzdvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkFswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAUp02AwDQQCAAIwBwMF
ACwP99AwDQYJKoZIhvcNAQELBQADggEBALwcuwOvz8VVfm0qRfTJRzvxKeB5NcPr
LEsamcM0kVjUigy4utNIxmMo1P2bZVvnhUAkAgrCrys679u3a9N3CCy94AnWGVV0
31fHqVTVixjMFwomUMabL/nQGSxUDwFeB7Mo3VfnaMHZqCjcioY+W7fL0Uejvdt9
BEyZR2JAqf1ZDAga+auoyYprJRNZsnY1OuUEzLwmhLtoQm2cB4GVXI9kNi5IweJP
tQHP2LVrdX5er9QsNwDfI6BOZVeyGniOTzrwL4uypkoFAGHPh0Vc/vCzJ/xTzVaf
2P6mooSU8vhQj3p0Rj7I3WsATDS3T0+UZ2wFl0gC0cuWdQaP+W5totc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org