Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.cer (raw, json)
Hash identifier:          L+qEs777DrF3UeUfKuhrV1wghRE9JNs3OQvUdcTAtyY=
Subject key identifier:   DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       255D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:28 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37266
                          IP: 196.32.232.0/21
                          IP: 196.45.16.0/20
                          IP: 2c0f:fdd8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9565 (0x255d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:30:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:d5:cb:69:ac:2e:e2:10:7d:62:2b:32:b6:
                    54:10:e7:fc:d9:bd:d8:27:fa:a3:fa:f6:e0:c5:16:
                    a9:06:cd:a9:ed:22:b5:a3:ff:ad:3d:8d:4e:cb:c5:
                    aa:b0:ef:2d:63:e3:10:b9:bd:3b:b4:55:28:3b:31:
                    68:fc:ed:6d:00:d4:82:a0:78:6d:20:b1:e1:f0:78:
                    28:60:70:0a:ce:9a:c1:90:a7:62:bb:82:56:42:17:
                    c3:35:74:87:f0:21:c6:36:a1:46:03:7d:45:6d:82:
                    e2:d1:bf:a4:37:66:94:b7:c1:14:7f:44:1b:8e:43:
                    92:0d:75:81:02:a3:cd:dd:00:c8:bc:45:3f:33:fb:
                    7d:49:19:68:7b:ea:c2:97:7a:20:26:94:c4:7b:92:
                    54:24:c8:9a:0b:37:71:73:b3:a9:c2:8c:9c:43:40:
                    89:0e:a3:70:1d:3f:3c:1b:5b:32:99:9a:e0:05:1e:
                    fe:97:d2:86:de:7c:99:19:45:ac:86:af:bb:22:89:
                    79:48:d6:47:be:9e:57:49:40:ec:ec:6a:98:44:a0:
                    fe:9a:3b:8d:0c:19:cd:82:61:3f:0f:dd:6e:a0:6c:
                    08:a4:45:c9:6c:f0:f0:4c:fc:e7:b3:df:b5:32:51:
                    6a:b1:56:56:31:27:0c:2c:cd:53:8a:2c:57:96:8e:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37266

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.232.0/21
                  196.45.16.0/20
                IPv6:
                  2c0f:fdd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:3a:62:80:41:46:16:ae:ef:08:8c:94:98:59:ed:e9:62:
         bb:62:6d:6d:d5:f7:04:c8:e6:8b:bb:ed:71:42:44:59:3e:55:
         a2:e9:d7:8a:19:71:ab:8d:e0:c7:64:19:b4:48:82:6e:44:22:
         c3:ed:88:46:7f:50:16:51:9e:13:93:50:db:bf:ea:7f:fd:bd:
         e1:6d:38:a5:f7:91:e2:92:f4:f1:59:6b:04:da:42:b5:56:99:
         27:b6:9d:68:6c:8e:a7:2d:42:9d:27:4c:ac:2d:25:84:ae:cf:
         79:3b:d8:c6:ab:ca:b4:ee:e9:19:2c:26:21:8c:45:a1:23:f9:
         9c:c1:03:47:89:d6:b2:36:b8:b9:1f:06:70:a2:b8:22:00:a3:
         66:f1:25:93:2a:da:1b:68:eb:3e:ad:bb:0e:4c:f8:4c:88:55:
         18:fa:4d:5e:b3:a8:08:a4:e2:5b:9e:a1:80:28:51:69:56:fa:
         5c:cf:5f:75:a8:af:2a:81:fd:33:93:fe:18:3a:41:c8:44:cf:
         59:cd:b2:27:b3:4e:bf:4f:42:ff:f5:d8:41:7f:f6:ac:f9:87:
         56:80:ef:ff:e3:72:9d:e0:6e:a0:8a:84:44:c8:e1:8c:04:6f:
         7f:13:43:80:84:ca:71:d2:53:ae:01:e9:20:17:bf:94:63:97:
         a1:07:e4:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org