Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
File:                     19cqZIe9d2qLv61POGE8OxU1CYM.cer (raw, json)
Hash identifier:          ZE+f94zT9VMf84p1mgIdwQkVqeFHryH6txO+zMTlYaQ=
Subject key identifier:   D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2896
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:33:33 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 6083
                          AS: 327683
                          IP: 2001:42a0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10390 (0x2896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:33:33 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:3f:0b:d5:29:06:96:1a:c8:7a:99:f3:5d:
                    94:5c:8e:26:4d:55:9d:4d:0e:1a:fb:32:30:1f:c7:
                    88:8c:fe:06:5d:e1:aa:5e:3c:84:08:cb:7a:03:a9:
                    15:6d:16:05:82:5d:49:7f:75:a0:ea:45:12:27:65:
                    21:d1:73:07:b3:fe:f9:83:a4:57:7b:70:af:90:93:
                    a9:46:cb:c7:96:35:8f:85:ea:20:fe:aa:d0:ba:2e:
                    f5:c6:08:4d:4d:ed:3f:98:cc:4c:32:c5:0e:ec:34:
                    f1:13:b5:ce:59:e9:40:77:2b:66:04:90:24:b4:38:
                    a9:d2:04:17:5a:42:0d:46:35:19:e5:bd:16:75:8c:
                    2a:f0:54:20:f8:d1:69:51:35:06:55:ae:66:28:d4:
                    5c:58:dc:8a:6e:d1:3a:19:35:ac:28:88:67:15:48:
                    39:eb:d8:02:32:3f:1a:50:ef:db:b9:27:5f:ff:4a:
                    3d:02:74:ea:b1:cd:97:56:ba:88:7c:96:35:31:02:
                    2b:dd:23:31:18:85:ff:85:8c:bc:77:a1:cf:be:94:
                    a1:b6:2b:ed:b1:35:0a:ef:06:06:53:a9:c8:11:2e:
                    60:17:5d:96:f2:e7:d1:6c:0b:aa:02:7d:10:05:e9:
                    29:88:13:f8:51:01:f8:d2:9f:e0:2a:67:e5:3e:cb:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6083
                  327683

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:42a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:92:8e:39:84:ec:bd:cf:c6:91:b3:c2:7b:b4:16:c3:5c:93:
         db:fa:f3:df:a5:ba:8a:40:94:9b:1d:54:e1:f2:44:66:59:5b:
         06:92:68:29:a9:91:ee:db:20:96:f6:7a:bb:f6:39:8c:8d:d3:
         f5:b9:31:c3:6e:e4:c6:76:c0:c0:63:49:d0:7c:ff:ef:0d:e9:
         e6:01:20:6f:b6:3b:b6:5e:90:ef:d9:fb:e8:b3:ae:24:ec:21:
         05:c4:39:28:e7:f3:b1:37:ba:f0:81:4e:55:f5:fc:df:f8:b2:
         68:ee:17:80:32:3c:70:aa:06:bf:c7:b0:c4:db:fc:9e:59:06:
         26:43:ac:1d:ff:8a:07:c0:5b:23:d8:5f:7b:a2:e7:89:96:26:
         02:42:84:03:39:a5:7c:1b:52:4c:1d:50:96:40:ee:c3:37:d3:
         cd:68:4a:3e:11:0b:b6:65:bc:70:7e:cf:b3:5a:70:dd:b8:c0:
         4d:a0:e0:05:02:b6:21:e1:a6:37:68:e8:a5:be:9d:0c:0d:fe:
         65:d1:e3:05:ee:95:10:2e:ff:20:bc:7e:61:75:ef:77:2e:29:
         76:22:8e:a6:e8:1b:e4:09:32:8a:3e:47:de:34:8e:2a:d8:79:
         a2:58:5d:dd:d8:09:fd:9e:6e:6c:fb:ce:28:44:ce:3b:28:f8:
         71:ee:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org