Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6U6GBCqbsleb1VHH6_5X4j-rwrU.cer
File:                     6U6GBCqbsleb1VHH6_5X4j-rwrU.cer (raw, json)
Hash identifier:          tS8m/EeIZaOJko1bVZHEoWUFpJiLX8n8z+/4iSEGs2k=
Subject key identifier:   E9:4E:86:04:2A:9B:B2:57:9B:D5:51:C7:EB:FE:57:E2:3F:AB:C2:B5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       299F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/6U6GBCqbsleb1VHH6_5X4j-rwrU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 19 Mar 2024 15:04:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37183
                          IP: 41.85.192.0/19
                          IP: 196.29.32.0/21
                          IP: 2001:43f0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10655 (0x299f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 19 15:04:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36505B2AF/serialNumber=E94E86042A9BB2579BD551C7EBFE57E23FABC2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:73:a5:7f:1f:da:54:67:91:c6:f1:3c:36:
                    03:18:2b:3c:21:ec:c4:cc:06:61:d4:90:ba:24:80:
                    55:14:ce:ed:7b:18:48:07:da:00:33:5b:74:31:a2:
                    3c:b2:93:66:ce:4f:9b:2d:4b:cb:09:08:87:85:66:
                    a4:ae:c7:e5:0e:0f:eb:18:7c:7c:9f:e4:01:42:08:
                    d9:9a:23:03:40:08:63:4b:20:f6:1c:78:2c:e7:fd:
                    c3:0f:bb:47:65:ed:80:25:25:65:08:2d:0b:ab:19:
                    8a:2f:9f:85:78:75:51:a5:e6:1c:a2:ae:d3:89:86:
                    cb:1d:5c:7f:21:65:2d:0c:e2:80:80:e6:b2:5b:93:
                    0c:e6:4c:87:3c:4a:03:02:60:5c:35:f4:b8:e1:0c:
                    20:b1:68:39:90:dc:26:0d:6a:b8:4f:8d:04:53:78:
                    9a:0b:7d:5d:12:b4:59:6d:93:05:a9:71:c5:c9:68:
                    ae:ea:ee:40:4f:de:3e:46:54:ae:f8:f9:75:1f:7c:
                    0b:07:ca:b0:bc:be:d1:91:7f:3c:1a:66:98:a3:66:
                    ef:f3:d1:8e:fb:a1:ae:a9:34:43:1b:44:1b:98:21:
                    2a:c5:d1:09:22:47:af:c7:9e:31:78:d6:6b:9e:d3:
                    70:0c:ac:72:b6:4a:71:10:70:00:cd:33:40:b7:48:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:86:04:2A:9B:B2:57:9B:D5:51:C7:EB:FE:57:E2:3F:AB:C2:B5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/6U6GBCqbsleb1VHH6_5X4j-rwrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37183

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.192.0/19
                  196.29.32.0/21
                IPv6:
                  2001:43f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:ac:ab:49:96:00:d8:73:f3:93:69:4b:9d:45:26:e9:82:
         71:24:be:16:a8:f3:af:1c:03:72:41:a4:01:12:da:29:3a:87:
         14:a8:81:69:fc:ff:20:29:1a:b4:58:98:1f:87:2c:c8:d5:6f:
         12:c0:92:67:ae:b6:95:6c:84:7b:b8:9d:48:b3:d4:4b:db:4c:
         26:60:e2:7b:5c:b7:93:5d:ff:4e:75:5c:0d:09:4c:7a:62:05:
         41:17:d5:b0:c3:55:68:5a:8e:7c:e5:43:48:ea:4b:ed:cc:7e:
         52:5e:c3:39:d6:1f:55:57:4d:b8:89:2d:3b:0e:90:cb:92:dd:
         4b:10:6c:e1:82:ae:e4:84:f0:f5:b2:1d:2f:91:bb:3b:79:23:
         5b:fb:3c:37:86:61:cd:f3:bd:32:65:10:4c:76:22:ed:1b:5b:
         44:1b:d0:5f:f5:10:29:a1:20:3f:ba:d1:b3:ab:25:ce:f4:28:
         71:76:07:74:b3:e5:31:69:66:1e:42:b8:3f:cf:e3:8c:ab:a4:
         57:2d:8f:e6:a9:f1:4a:6b:eb:f7:33:6d:f0:44:ae:6c:87:a0:
         87:8e:85:7b:45:9e:47:5a:ad:07:85:eb:05:dc:15:1c:8c:f8:
         3d:2b:34:7b:ea:82:15:4f:98:d1:95:e8:b6:8e:08:be:5a:46:
         11:0e:f1:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 00:47:55 2024 by rpki-client on console-ams.rpki-client.org