Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer (raw, json)
Hash identifier:          T72bc6GRUOUwi5qazMLI6CtsaZasGtMV0LhftSd0JVk=
Subject key identifier:   F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       286D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:26:47 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327688
                          IP: 41.57.0.0/18
                          IP: 41.57.128.0/18
                          IP: 2c0f:fd68::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10349 (0x286d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:26:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:8f:f1:96:6f:13:7a:e3:4d:cf:39:ed:4d:
                    86:4b:5c:00:0f:1f:f1:e7:ae:bf:fd:e0:1e:7d:3f:
                    cc:f3:f6:d1:2e:68:c1:da:6b:e9:b8:0b:44:6f:ed:
                    2e:5b:d6:06:9e:31:15:3b:d0:83:23:f1:e7:10:00:
                    07:72:1c:65:85:ed:78:d6:1f:97:bb:00:40:82:ea:
                    0c:66:7a:f4:f8:05:e8:ef:1a:c1:db:dc:13:28:a5:
                    ea:2f:4c:19:28:27:b9:e4:67:4f:a8:34:c2:1f:6d:
                    11:77:73:14:57:ba:0a:ed:22:23:c6:aa:a7:86:f5:
                    b8:d2:84:c4:f6:ad:89:5f:26:1d:2e:3d:92:99:65:
                    fb:4f:ee:29:7c:72:89:e7:79:33:0c:81:57:42:1e:
                    fe:05:43:0a:e1:fc:75:11:1e:67:0c:b7:00:bf:b8:
                    ac:72:80:3d:f1:41:93:50:d5:6c:04:7e:76:86:be:
                    93:4c:cc:0b:fb:03:58:c9:9f:2b:d2:f3:54:f7:97:
                    ad:f0:d1:ef:77:4e:1d:60:db:5d:c3:37:cc:04:ab:
                    f0:df:7c:e1:53:8d:e5:ff:97:dd:f1:70:c3:fd:0b:
                    ae:7f:25:79:c9:e9:48:94:4c:54:78:3c:3f:d0:10:
                    e2:d2:b2:f6:2d:de:e5:70:7a:d9:92:59:e1:fa:1a:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327688

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.57.0.0/18
                  41.57.128.0/18
                IPv6:
                  2c0f:fd68::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:81:c3:e0:5a:13:36:41:8b:2d:06:97:5f:84:66:74:09:
         e1:ac:f8:03:53:a5:13:d8:cd:0a:2e:be:70:28:47:51:b9:46:
         3c:ec:c9:40:b1:19:a6:9d:94:0b:69:92:f2:76:48:e1:e3:c6:
         c6:e4:0f:81:a0:2a:65:37:60:af:bd:1b:c5:50:38:11:f8:6a:
         7d:79:ff:07:05:c8:9f:f1:7c:45:72:79:21:60:54:36:24:59:
         b3:5e:71:fb:ac:11:27:2c:44:b4:f8:0f:db:40:88:2c:cf:9a:
         db:bf:44:ed:4d:10:e9:0d:6c:b9:82:a7:34:23:04:90:34:e4:
         3f:dc:72:cb:0d:15:0d:29:4d:21:21:5e:49:59:2a:cc:2d:b5:
         eb:20:7c:66:ad:d6:0a:27:40:f5:3f:67:94:74:1c:f3:39:96:
         91:93:b8:23:25:6a:5f:1d:79:10:19:37:78:0a:06:d5:56:4f:
         00:bd:3a:ea:19:c5:55:30:c6:bb:88:1a:e1:98:16:86:f8:9a:
         00:6c:02:02:35:a9:5e:05:68:9b:7d:96:a3:68:1e:f9:43:6a:
         8e:76:06:18:15:40:3e:0d:f9:51:ca:bf:03:9d:38:53:a6:73:
         85:c3:55:b9:2e:bd:f4:16:ee:ef:3f:94:eb:9e:8b:6d:a4:b2:
         2e:4b:2e:c1
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICKG0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDI2NDdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkVFRDNFQUYxMTAvBgNVBAUTKEY1OTI4NEQ3NjY3ODg1MUY3QUE3NDNC
MTNGNkMwNjc0Nzk1NTAwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3SI/xlm8TeuNNzzntTYZLXAAPH/Hnrr/94B59P8zz9tEuaMHaa+m4C0Rv7S5b
1gaeMRU70IMj8ecQAAdyHGWF7XjWH5e7AECC6gxmevT4BejvGsHb3BMopeovTBko
J7nkZ0+oNMIfbRF3cxRXugrtIiPGqqeG9bjShMT2rYlfJh0uPZKZZftP7il8conn
eTMMgVdCHv4FQwrh/HURHmcMtwC/uKxygD3xQZNQ1WwEfnaGvpNMzAv7A1jJnyvS
81T3l63w0e93Th1g213DN8wEq/DffOFTjeX/l93xcMP9C65/JXnJ6UiUTFR4PD/Q
EOLSsvYt3uVwetmSWeH6GrtjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU9ZKE12Z4
hR96p0OxP2wGdHlVAHQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRUQzRS8yQUY4RkI2NjBBQTMx
MUVFQUYyQ0ZBNDM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUVEM0UvMkFGOEZCNjYwQUEzMTFFRUFGMkNGQTQzNEFEOUU2RkMvOVpLRTEy
WjRoUjk2cDBPeFAyd0dkSGxWQUhRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAAgwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAYpOQADBAYpOYAwDQQC
AAIwBwMFACwP/WgwDQYJKoZIhvcNAQELBQADggEBAIqFgcPgWhM2QYstBpdfhGZ0
CeGs+ANTpRPYzQouvnAoR1G5RjzsyUCxGaadlAtpkvJ2SOHjxsbkD4GgKmU3YK+9
G8VQOBH4an15/wcFyJ/xfEVyeSFgVDYkWbNecfusEScsRLT4D9tAiCzPmtu/RO1N
EOkNbLmCpzQjBJA05D/ccssNFQ0pTSEhXklZKswttesgfGat1gonQPU/Z5R0HPM5
lpGTuCMlal8deRAZN3gKBtVWTwC9OuoZxVUwxruIGuGYFob4mgBsAgI1qV4FaJt9
lqNoHvlDao52BhgVQD4N+VHKvwOdOFOmc4XDVbkuvfQW7u8/lOuei22ksi5LLsE=
-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org