Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
File:                     7GwN3it-gbOk5sxGye8OxVb-0zo.cer (raw, json)
Hash identifier:          V52z4FNRLsEtCUl31jubHxsbbr6pS6gzP9Ne+BS7Yfw=
Subject key identifier:   EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       236C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:27:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37157
                          IP: 41.78.36.0/22
                          IP: 102.128.136.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9068 (0x236c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:27:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3620624AF/serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:f6:89:6b:44:ae:d0:ff:02:17:b2:60:08:
                    26:51:b1:62:6c:d6:00:87:aa:10:8b:82:e6:58:43:
                    1a:de:ed:d9:3b:9d:7b:56:79:5a:d2:94:b4:fe:7e:
                    54:04:87:57:e2:41:23:4e:19:80:b1:6c:c0:a9:5d:
                    2a:fc:4f:5c:31:88:75:31:12:7b:f4:b3:a8:37:ae:
                    66:1b:65:73:6b:58:98:47:d6:57:81:29:d3:c0:96:
                    bf:83:ff:cf:13:88:aa:27:f3:2f:5a:32:ec:27:83:
                    f6:14:42:52:ae:70:b8:8c:47:1e:99:99:f6:b0:49:
                    78:72:d3:99:bb:bd:31:e5:9f:51:e0:74:9d:9b:a7:
                    14:d3:13:b4:60:01:e7:f1:90:98:54:80:fb:d9:a5:
                    f0:0c:be:d6:27:01:f8:15:4c:9c:92:e1:ce:f5:ba:
                    8a:db:8b:f5:9f:ef:88:fd:92:8e:9c:c1:92:1b:a0:
                    49:be:38:93:c9:31:f7:4f:bb:13:74:29:b9:aa:45:
                    53:3b:76:c5:18:6e:4d:73:7f:ea:58:ea:aa:83:95:
                    78:ff:55:a0:39:70:dd:f0:c0:8e:9e:fd:34:fa:da:
                    eb:ab:87:81:5b:01:5a:f3:e7:4a:d5:df:99:cf:04:
                    b7:8f:86:01:fc:9b:c9:7f:77:70:f8:c4:d4:d6:04:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37157

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.36.0/22
                  102.128.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:21:d5:6f:81:27:fd:18:8e:96:ce:e5:47:b5:e9:a4:3c:9c:
         05:72:7e:e9:2b:32:8e:95:8b:51:e3:47:7a:ab:83:d4:e6:e5:
         fb:86:1d:e1:37:8c:aa:c1:6e:68:fd:33:8b:07:ad:a4:27:82:
         d1:ae:91:6b:46:b9:b1:0a:3b:13:bb:ea:cf:14:2b:26:f0:fa:
         e4:b8:54:2f:cb:cd:80:67:77:78:1b:10:20:89:f1:22:ba:3d:
         6a:05:41:ea:82:00:46:e5:dc:a3:70:c4:57:8e:02:6a:13:c5:
         e8:0b:8c:96:bf:2e:9b:3b:b2:b3:2b:3a:da:0e:1f:5f:91:82:
         41:23:df:6c:dd:72:ac:27:98:52:a1:74:01:5f:25:af:c7:a5:
         92:4f:6a:3e:90:98:ef:81:b3:9b:b4:bc:5a:e3:51:04:1a:dd:
         9c:c3:8c:96:8a:e8:e6:d2:97:b9:c3:c5:5d:7b:d4:a1:7d:87:
         fd:81:1a:91:7a:96:cd:4a:fe:1d:4f:5e:b9:0d:ea:7b:9a:ae:
         2c:1a:27:ff:6b:97:21:29:6f:d0:0b:b4:48:21:1f:bb:46:ff:
         4f:01:86:f5:60:11:38:97:3d:7e:45:8f:14:ef:31:2d:bb:b3:
         6e:bb:59:f2:b4:a7:45:73:cf:9d:2c:a1:f0:0e:7f:2c:07:1a:
         59:29:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:42:30 2024 by rpki-client on console-ams.rpki-client.org