Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.cer (raw, json)
Hash identifier:          qQwEiJ2ZMWndBk8eEaoaGwkKxOlto0/Asczrt4mLEPk=
Subject key identifier:   F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3386
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:12:11 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328180
                          IP: 2001:43f8:d80::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13190 (0x3386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:12:11 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36F5D39AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:fb:d7:36:3a:ad:f2:c9:59:6c:fc:08:13:
                    43:07:8d:20:08:db:4e:37:96:89:68:bc:5d:0d:07:
                    e9:fe:4d:61:f5:08:dc:35:fb:8b:b7:61:70:5f:f1:
                    ff:ca:04:d9:10:da:6e:99:e8:70:75:5c:21:c1:1e:
                    b9:5d:25:fb:04:72:38:e2:9b:a7:f8:1f:fe:0c:52:
                    3f:10:ba:d0:8a:36:f9:14:d4:eb:7e:a9:3a:ae:56:
                    f1:f7:91:75:f0:fb:47:94:22:77:af:a1:3c:17:21:
                    1e:92:03:c7:a1:2f:50:e8:66:7a:ce:5e:79:72:bd:
                    64:87:95:5d:f5:4c:23:8b:8a:30:1a:73:40:5d:4c:
                    73:8e:58:32:d0:6f:b0:2d:55:77:99:d7:19:85:39:
                    73:03:b8:9c:71:ee:1e:ff:a4:3f:db:9d:aa:38:ae:
                    0e:31:7b:38:a9:52:38:3c:9a:5a:0e:0f:20:ba:7f:
                    2c:22:bb:33:67:13:35:6a:7b:2e:03:b2:c9:86:ed:
                    1c:11:a2:5f:37:04:1e:99:49:f0:4a:50:b3:cd:73:
                    9e:4b:67:b5:3d:76:29:86:79:10:09:57:17:56:6c:
                    66:a4:5b:54:57:01:ac:f7:32:bb:ed:a0:c5:6d:8b:
                    d3:8c:52:62:6b:06:ca:09:4b:47:64:5e:de:ac:ea:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328180

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:71:a9:ad:50:75:59:c4:1b:ea:0d:33:50:2d:59:53:fd:
         98:ae:fc:79:ee:30:03:b3:58:0d:c3:5c:0b:3d:20:e9:25:39:
         62:4f:ad:b5:f7:02:7b:18:5d:86:e2:cb:8c:ad:52:6d:27:7d:
         4d:67:ab:dc:6a:cc:2e:40:c5:3d:4e:bc:eb:e6:d6:db:04:17:
         de:25:12:a4:73:86:63:cf:cc:d7:16:a6:b7:a9:67:65:f7:0d:
         20:9e:74:e6:48:c7:8a:a1:2c:8a:55:8f:66:1c:88:3e:4a:fc:
         8d:9b:37:9f:ec:a6:f4:2a:0e:c3:1f:61:91:d0:50:12:0d:e3:
         bd:a7:56:c9:57:f2:9e:08:08:6c:5e:55:2c:00:74:fe:06:fd:
         99:6e:a6:e6:3c:47:e1:55:6c:95:a4:41:fb:a1:43:6d:96:ef:
         87:6e:ed:f9:0a:4c:94:4f:e8:b5:a1:41:86:f0:ab:3f:da:40:
         ed:75:db:b6:3e:6f:b3:1c:aa:c4:82:8a:8e:1f:a7:d9:40:eb:
         93:88:fb:89:b9:31:e4:6e:2c:e2:94:90:6f:b9:aa:52:85:9a:
         81:08:ed:2e:5c:2f:4f:65:21:cb:3b:90:86:ec:ba:0b:07:49:
         80:12:de:65:eb:84:db:fb:26:2e:db:c0:e2:e4:8b:2d:46:5c:
         84:aa:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:34 2025 by rpki-client