Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
File:                     2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer (raw, json)
Hash identifier:          ljAUOVC8SG4XfI3xj7BI4XnM878Zo17VU587J5nDprg=
Subject key identifier:   D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2654
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:05:30 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37887
                          AS: 327866
                          IP: 196.49.13.0/24
                          IP: 196.223.41.0/24
                          IP: 2001:43f8:a10::/47

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9812 (0x2654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:05:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:2a:c8:54:09:12:d3:c2:03:7b:8d:dc:bb:
                    c9:10:d8:8f:80:47:6a:9c:6e:d5:7d:a2:7f:91:9b:
                    c0:78:a2:9f:d7:f1:1c:f7:d4:84:61:0f:ca:dd:f3:
                    2a:01:20:d2:a4:e7:81:0c:cc:ff:23:3a:92:45:ed:
                    9d:ef:77:5b:c2:7f:b4:69:b8:41:28:f0:04:70:ca:
                    e6:27:55:e2:f4:d9:0c:7e:ce:60:38:77:a4:39:cb:
                    a1:bc:03:57:c2:0a:a9:21:7b:9e:a8:f4:41:a7:fc:
                    5c:a2:b0:cb:1e:ae:f2:42:ec:0e:5e:34:9c:a3:f0:
                    38:61:a7:b3:1c:f9:00:04:0b:d7:09:cb:71:16:2f:
                    2f:d5:cb:fa:7b:4a:1c:80:c3:0e:2a:bb:91:1c:46:
                    02:c7:54:f8:c5:39:eb:66:24:f0:67:41:54:4f:ec:
                    f9:fc:c9:9c:40:00:d9:0a:39:3e:c1:6f:b5:6d:b8:
                    49:ba:b1:b7:3e:29:45:b8:3e:dd:05:14:04:81:dc:
                    61:50:f9:2a:e6:b1:d0:49:b8:f5:32:f5:2d:f2:88:
                    f8:39:00:89:bc:35:86:24:1e:fb:ec:2a:02:23:86:
                    2f:9c:df:e9:93:eb:54:db:2b:17:b1:2b:52:ce:52:
                    f3:c0:79:b6:93:d4:37:b6:31:bb:bb:74:86:a7:01:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37887
                  327866

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.13.0/24
                  196.223.41.0/24
                IPv6:
                  2001:43f8:a10::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:77:ac:2a:e9:0a:ab:78:ee:d6:40:4f:cb:5a:1e:e9:d5:
         9a:08:d3:7f:33:8d:dc:76:77:44:ba:01:73:63:c7:fd:6e:7a:
         30:af:61:63:64:64:ee:e1:5d:f2:f4:8d:67:71:9e:93:83:d8:
         31:c9:c0:c8:c3:7e:8f:c0:f6:ba:ee:69:09:8a:76:5e:82:65:
         73:df:1d:96:a6:c2:63:bb:a7:1b:65:48:97:83:09:a9:3e:b0:
         27:4f:87:55:8c:60:46:3f:d6:bd:c9:7e:b3:06:c4:f7:7a:c8:
         26:8a:fb:56:e1:59:92:96:1e:6d:10:d8:12:ae:0a:37:f4:a4:
         15:f7:e2:e8:57:8d:36:f9:2a:1d:e3:a2:6c:24:46:a4:20:c9:
         ab:f5:54:01:74:f4:b3:02:b7:c0:eb:b3:7c:f6:d2:aa:ff:96:
         49:47:ab:cf:6b:f6:e5:00:d0:37:9a:92:55:f6:2d:d4:9b:b7:
         28:49:94:05:2c:0b:c0:9a:84:06:c0:b4:c2:a1:3e:bb:f7:f2:
         9d:c3:f3:1e:a8:32:2b:36:3d:fe:4b:44:f4:7e:f3:44:e9:66:
         7f:fa:27:1e:9a:6c:18:30:71:88:fa:c7:cb:b8:03:6a:54:44:
         c0:0c:bf:9e:e9:98:60:b8:48:01:b0:49:1f:62:8b:cc:65:92:
         62:81:3e:56
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgICJlQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzA1MzBaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjg2Rjc1QUYxMTAvBgNVBAUTKEQ5OTc3MEY4RjlCNjJERDAzNkVERTc0
MUYyNzAyQ0RERDY0MERFMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8cyrIVAkS08IDe43cu8kQ2I+AR2qcbtV9on+Rm8B4op/X8Rz31IRhD8rd8yoB
INKk54EMzP8jOpJF7Z3vd1vCf7RpuEEo8ARwyuYnVeL02Qx+zmA4d6Q5y6G8A1fC
Cqkhe56o9EGn/FyisMservJC7A5eNJyj8Dhhp7Mc+QAEC9cJy3EWLy/Vy/p7ShyA
ww4qu5EcRgLHVPjFOetmJPBnQVRP7Pn8yZxAANkKOT7Bb7VtuEm6sbc+KUW4Pt0F
FASB3GFQ+SrmsdBJuPUy9S3yiPg5AIm8NYYkHvvsKgIjhi+c3+mT61TbKxexK1LO
UvPAebaT1De2Mbu7dIanAQGtAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQU2Zdw+Pm2
LdA27edB8nAs3dZA3h4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4NkY3NS9BNjA3ODA5NjFEMzUx
MUVDQjUxMDM0MEFEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODZGNzUvQTYwNzgwOTYxRDM1MTFFQ0I1MTAzNDBBRDhBMDE0Q0UvMlpkdy1Q
bTJMZEEyN2VkQjhuQXMzZFpBM2g0Lm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAk/8CAwUAujA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxDQMEAMTf
KTAPBAIAAjAJAwcBIAFD+AoQMA0GCSqGSIb3DQEBCwUAA4IBAQAZrnesKukKq3ju
1kBPy1oe6dWaCNN/M43cdndEugFzY8f9bnowr2FjZGTu4V3y9I1ncZ6Tg9gxycDI
w36PwPa67mkJinZegmVz3x2WpsJju6cbZUiXgwmpPrAnT4dVjGBGP9a9yX6zBsT3
esgmivtW4VmSlh5tENgSrgo39KQV9+LoV402+Sod46JsJEakIMmr9VQBdPSzArfA
67N89tKq/5ZJR6vPa/blANA3mpJV9i3Um7coSZQFLAvAmoQGwLTCoT679/Kdw/Me
qDIrNj3+S0T0fvNE6WZ/+icemmwYMHGI+sfLuANqVETADL+e6ZhguEgBsEkfYovM
ZZJigT5W
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:17:13 2024 by rpki-client on console-ams.rpki-client.org