Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.cer (raw, json)
Hash identifier:          KPtMW3V1V5K5jFFawSkVfKgkNDAnCvA63Uq1x1cxQJ0=
Subject key identifier:   F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2890
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:32:40 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328180
                          IP: 2001:43f8:d80::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10384 (0x2890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:32:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F5D39AF/serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:fb:d7:36:3a:ad:f2:c9:59:6c:fc:08:13:
                    43:07:8d:20:08:db:4e:37:96:89:68:bc:5d:0d:07:
                    e9:fe:4d:61:f5:08:dc:35:fb:8b:b7:61:70:5f:f1:
                    ff:ca:04:d9:10:da:6e:99:e8:70:75:5c:21:c1:1e:
                    b9:5d:25:fb:04:72:38:e2:9b:a7:f8:1f:fe:0c:52:
                    3f:10:ba:d0:8a:36:f9:14:d4:eb:7e:a9:3a:ae:56:
                    f1:f7:91:75:f0:fb:47:94:22:77:af:a1:3c:17:21:
                    1e:92:03:c7:a1:2f:50:e8:66:7a:ce:5e:79:72:bd:
                    64:87:95:5d:f5:4c:23:8b:8a:30:1a:73:40:5d:4c:
                    73:8e:58:32:d0:6f:b0:2d:55:77:99:d7:19:85:39:
                    73:03:b8:9c:71:ee:1e:ff:a4:3f:db:9d:aa:38:ae:
                    0e:31:7b:38:a9:52:38:3c:9a:5a:0e:0f:20:ba:7f:
                    2c:22:bb:33:67:13:35:6a:7b:2e:03:b2:c9:86:ed:
                    1c:11:a2:5f:37:04:1e:99:49:f0:4a:50:b3:cd:73:
                    9e:4b:67:b5:3d:76:29:86:79:10:09:57:17:56:6c:
                    66:a4:5b:54:57:01:ac:f7:32:bb:ed:a0:c5:6d:8b:
                    d3:8c:52:62:6b:06:ca:09:4b:47:64:5e:de:ac:ea:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328180

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:0f:48:f6:1a:73:76:97:4c:b8:99:28:f7:5b:89:77:dc:
         c5:94:e4:a8:b7:e6:b7:16:7f:b6:1d:bc:5d:29:92:8f:5f:e3:
         5c:09:c8:01:ad:43:7a:37:d9:6a:1c:9a:aa:03:e8:e9:ce:38:
         20:1b:d6:22:e1:6f:e2:0a:25:13:35:7e:22:c8:72:80:7f:37:
         41:88:55:6d:28:09:20:8e:0e:17:33:6f:ee:54:89:dd:49:80:
         2c:72:2b:7d:68:58:73:a4:a2:ae:c7:22:7d:24:a3:01:f8:81:
         0c:0e:b5:cf:93:c9:d1:13:a5:06:9d:b3:aa:ca:ae:c0:8e:9c:
         fa:88:0a:e0:6a:dd:3e:3e:62:2b:9c:98:ad:b5:1a:03:a3:66:
         40:32:49:11:ca:bb:a5:e1:9a:ce:17:17:24:4a:cd:58:0f:72:
         12:78:a5:1c:bb:27:a0:25:0c:d0:37:cd:ea:87:40:c0:c4:78:
         b7:f1:7a:2b:50:32:42:e5:dc:c5:9e:89:00:31:78:79:7e:4f:
         23:5d:55:cb:86:94:a8:6e:1d:92:16:e1:1c:b2:e7:b6:93:43:
         a0:10:ac:ad:e3:83:57:4f:8b:5d:00:25:ad:37:c3:4d:86:4e:
         9b:8f:17:82:27:a0:70:65:43:09:b1:ee:d7:36:b5:8a:64:75:
         8c:7f:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org