Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer (raw, json)
Hash identifier:          s6UwNPWTxcaw+BAhxhnWJmxqZxIMwl+oFPITByhwJRU=
Subject key identifier:   DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28A4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:35:48 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 41.208.64.0/18
                          IP: 41.252.0.0/14
                          IP: 2c0f:fb10::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10404 (0x28a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:35:48 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:aa:44:cb:3c:e2:90:5b:cb:de:b2:bd:88:
                    68:52:5a:15:01:fe:ec:1e:94:ad:4e:0d:e9:b3:67:
                    d2:e9:06:e9:55:67:1d:68:c2:e9:1e:7a:90:75:ca:
                    c4:2c:3c:fe:25:61:1b:04:e2:0d:37:40:1b:c6:8e:
                    b4:d4:3f:9b:44:1e:22:fc:7c:8c:97:38:1b:62:cc:
                    98:7a:b9:ed:9e:06:9a:49:4d:13:65:f9:a9:e5:80:
                    ab:44:20:b2:3e:7b:b7:bc:07:ff:f9:ff:2e:18:8a:
                    a9:81:79:9a:46:a6:d0:e2:50:c6:1a:c5:d8:28:b3:
                    4e:e4:c0:97:73:36:6e:f2:4f:b7:df:cb:62:5d:c2:
                    e1:50:20:8f:df:dd:fc:fe:6d:75:d9:b3:fc:dc:96:
                    f9:ae:a4:25:6b:b7:ac:9f:83:d5:fe:07:8d:6c:3a:
                    11:2d:f2:34:62:74:9a:b8:f8:73:7a:2b:ce:33:3a:
                    eb:b2:c1:93:00:73:f3:ce:cb:6e:f2:43:34:7d:ba:
                    1c:d1:4f:c4:a3:75:84:c4:ee:a3:d3:c8:75:d3:2f:
                    48:72:72:c1:91:13:54:93:66:18:9f:5a:3d:ab:05:
                    0c:8d:9e:72:22:4e:76:b6:96:f6:5a:b5:ad:b2:ec:
                    59:a9:65:0b:91:e0:a2:d3:37:9d:fa:2c:f6:99:d4:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.208.64.0/18
                  41.252.0.0/14
                IPv6:
                  2c0f:fb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:6a:aa:58:e7:6f:63:9f:ae:c5:f9:8f:8f:3a:b8:f2:9b:6e:
         6d:46:03:79:32:9e:f8:3d:43:0e:65:84:63:53:1f:dd:39:9e:
         59:36:d1:70:f8:c9:eb:b4:e2:fd:2e:af:d1:cc:c9:70:78:2a:
         f5:74:49:cc:69:46:37:f3:90:0f:63:aa:db:ee:82:a8:1e:c9:
         3a:55:b4:37:07:10:28:63:a1:01:00:43:7b:cd:b1:1b:59:db:
         4e:36:ff:b0:9a:db:28:c1:74:64:29:5b:44:41:12:37:bb:c4:
         dd:5e:45:bc:6f:0a:5f:6b:94:d8:07:dd:df:96:98:77:f5:b3:
         60:28:46:2c:8f:f0:b9:a5:cc:f5:61:4b:b8:87:9c:bc:cc:51:
         88:1f:0b:99:c8:16:b2:33:f8:ad:25:5d:e6:bb:80:88:a2:14:
         aa:ed:e8:ab:74:31:a7:8c:72:01:74:d6:0b:61:f4:88:c3:19:
         53:1b:11:f7:16:90:d5:3f:4d:71:a6:31:d8:19:d7:fa:56:80:
         88:cb:9d:2b:61:1e:3c:47:b9:6c:54:04:00:f1:80:22:ab:13:
         e4:12:75:11:1f:be:c6:0e:3c:68:ab:a6:fc:14:2d:4a:cd:6b:
         8c:3c:45:ef:29:0c:a7:58:a5:69:17:db:c5:d2:3d:1c:a5:2b:
         32:b7:f0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org