Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
File:                     5VXdlA8xUBhdWRwtquKfKOrq9XU.cer (raw, json)
Hash identifier:          duoK6glwOeuz+gRX34DYQUp00SKXLz9sZCCBC02uHl4=
Subject key identifier:   E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23EC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:01:03 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37658
                          AS: 37670
                          AS: 327954
                          IP: 41.77.48.0/21
                          IP: 154.66.144.0/21
                          IP: 196.50.1.0/24
                          IP: 2c0f:fbc0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9196 (0x23ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:01:03 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:b0:24:93:7c:73:0c:8e:cb:ae:66:cd:d7:
                    79:95:37:db:00:87:71:64:98:a1:52:5c:3b:0d:23:
                    65:33:b9:f6:ab:90:f2:9b:94:58:51:13:13:a3:13:
                    8f:fa:c1:52:79:07:02:a6:b2:72:b0:55:84:e7:e9:
                    26:a5:c1:73:6a:79:a1:1e:bb:b1:4d:17:b0:e8:cb:
                    2a:0e:19:e4:e8:89:57:18:04:79:50:ac:8d:c6:fe:
                    7a:54:25:d6:9b:b0:0c:f1:73:ee:9e:27:d0:b9:f3:
                    7a:53:67:aa:3f:02:76:09:f8:ff:ef:61:ec:7f:55:
                    fe:b6:8b:e0:59:34:84:a7:d0:62:f6:cd:e9:80:60:
                    ac:e0:27:15:36:ad:e0:da:69:f2:c4:5c:74:05:d7:
                    26:2b:3d:30:b8:f7:e3:67:39:40:d8:ed:0a:70:6f:
                    4d:9d:4a:d7:dd:3e:92:b9:a5:6c:9e:1c:70:ee:92:
                    31:f3:f6:9b:c1:0b:dd:9c:e6:d7:fb:5d:e3:29:49:
                    64:65:85:8e:ef:0e:07:ba:8c:73:57:fa:50:d7:66:
                    3e:92:30:ea:4a:43:39:37:3c:62:d6:05:c8:57:51:
                    3e:00:14:29:94:c4:d2:5b:c5:4d:a8:cc:01:61:b2:
                    1e:be:bf:49:b7:13:d3:a0:f3:8f:23:19:d4:ed:13:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37658
                  37670
                  327954

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.48.0/21
                  154.66.144.0/21
                  196.50.1.0/24
                IPv6:
                  2c0f:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:f9:13:12:73:14:b0:15:e9:5c:61:6e:f5:93:2a:0d:2a:f2:
         61:ce:a0:3e:3f:7c:ac:17:b0:70:f7:0c:9f:9d:5a:82:5d:5a:
         79:ab:bc:73:08:13:bf:12:c6:14:f2:b1:82:73:ff:5a:c4:b2:
         14:21:d7:91:44:27:7c:57:bc:40:a1:10:96:42:53:ed:48:65:
         25:36:eb:b5:05:13:c0:f6:45:59:71:0a:86:e5:da:3b:91:6e:
         34:59:77:9a:b9:62:b5:08:b8:70:59:5a:48:cb:a8:ff:ce:be:
         3a:bf:d0:11:39:c5:50:d0:d1:82:00:f1:cd:9e:1a:f7:da:03:
         3c:0b:f6:d9:b6:a0:95:2c:00:59:9f:b7:e9:07:e9:91:ba:74:
         d3:08:37:42:8b:9a:78:5b:10:f2:b0:af:c9:3b:fe:5c:03:61:
         20:bd:74:b4:f3:ad:ea:50:c4:d9:b1:12:f9:8b:2d:c5:33:03:
         73:9d:32:de:c2:33:01:1d:a8:02:49:ae:62:64:00:c7:45:bf:
         37:ee:90:6b:3b:67:0a:77:63:db:c2:e6:0f:60:09:85:5d:f3:
         92:7e:9f:7b:ee:53:0e:fd:d6:1d:95:e5:21:59:eb:ae:f1:4c:
         d9:65:19:19:a4:31:27:b0:7f:9f:b1:0c:c3:10:c0:09:1b:13:
         cf:de:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:22 2024 by rpki-client on console-fra.rpki-client.org