Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.cer (raw, json)
Hash identifier:          XBPTvVp8Rj2NG/5sWCFjFMHK9u4dtS5sqwUXb3TcGAM=
Subject key identifier:   01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26C2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:21:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 15706
                          IP: 41.209.64.0/18
                          IP: 41.218.0.0/18
                          IP: 196.1.192.0/18
                          IP: 196.202.128.0/19
                          IP: 197.252.0.0/16
                          IP: 2001:4228::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9922 (0x26c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:21:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:37:96:46:01:4e:be:f9:44:77:03:ce:83:
                    4a:12:b1:9a:57:0a:24:d7:0a:ec:50:d8:28:7a:4c:
                    e1:06:fe:5d:e1:c0:d3:a9:3e:c3:1b:18:cc:fa:99:
                    a0:f3:7e:97:39:0d:cf:f0:89:30:6c:d7:8e:a4:5b:
                    c8:f1:f5:14:1b:36:d1:fd:c4:94:ef:2b:e1:93:0d:
                    06:6c:b1:48:31:9c:7e:e9:11:29:8f:d3:a3:24:39:
                    18:04:1f:88:a3:f8:07:87:43:2e:4b:b6:3f:f0:a8:
                    93:60:20:11:81:cd:15:27:fd:35:db:ba:4d:97:79:
                    22:67:02:94:fe:92:97:70:63:2e:e7:13:f9:22:98:
                    f7:5a:5a:9a:6f:02:53:38:34:23:a5:89:8e:46:ae:
                    10:cd:32:7e:ab:b1:9b:ac:6a:f5:f9:c3:5e:f5:fd:
                    79:b5:f7:78:31:fd:f4:8c:98:3f:99:36:e1:57:bc:
                    4b:6c:1b:0e:2b:c9:e1:ef:00:15:5b:ad:ac:04:3f:
                    ce:a4:f0:6e:ff:47:bb:e8:e8:70:28:10:94:47:8b:
                    41:3b:26:7e:24:5a:58:a3:4f:72:a9:c3:58:1e:8a:
                    42:3f:fa:fa:18:cd:fa:d1:6a:64:46:49:e3:fa:35:
                    da:ad:85:e1:8c:2d:e7:37:e7:cc:a3:14:52:31:1f:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15706

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.209.64.0/18
                  41.218.0.0/18
                  196.1.192.0/18
                  196.202.128.0/19
                  197.252.0.0/16
                IPv6:
                  2001:4228::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:0a:82:e6:7d:75:8b:c1:90:ff:96:83:6f:45:8f:aa:d9:c4:
         c3:d5:ae:39:90:cc:a7:28:8e:d4:15:29:76:42:36:cb:36:c1:
         ef:b1:80:27:a6:fd:98:a8:de:e4:b2:39:c8:49:01:b2:86:7b:
         6a:0f:e4:55:3c:a3:5e:29:39:0b:0e:13:14:59:7e:fb:ed:84:
         c9:6f:eb:da:f9:2d:0b:69:b9:ec:51:6f:bb:72:82:b8:aa:2e:
         da:c2:84:0f:6c:50:d7:c3:d4:1b:43:0b:a3:d9:75:09:cf:1b:
         2d:bb:6e:f0:22:b5:34:4a:c8:6a:27:9b:22:4d:1f:c6:f1:7e:
         b4:83:38:ae:c2:ec:3a:13:94:5e:c2:50:f0:3f:1b:dc:ed:d7:
         35:65:fa:f5:98:ff:15:e4:8a:af:1f:9c:73:9d:9c:9a:56:96:
         77:3f:11:5a:5e:ee:e7:f8:df:ee:fe:5f:3e:8c:f1:db:05:bb:
         23:f9:a8:b9:84:e1:9c:1e:ec:dd:21:13:ec:dc:20:10:f2:09:
         e5:4e:78:a1:d5:85:79:96:1e:82:5f:12:76:9a:27:b1:e4:e7:
         2e:c5:d4:f2:1d:b2:80:fa:d5:a9:26:36:88:e9:2f:a2:79:b5:
         c4:42:19:a2:2c:7f:85:b8:b3:87:ec:65:f9:d5:34:d3:92:d8:
         1d:38:3a:65
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgICJsIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzIxNTZaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjlDNzM4QUYxMTAvBgNVBAUTKDAxRTYxQzNGOTY0NjZBNTkwOTk4NTQ3
NkU4ODQ3OUJCN0Q0MTEyRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDh3TeWRgFOvvlEdwPOg0oSsZpXCiTXCuxQ2Ch6TOEG/l3hwNOpPsMbGMz6maDz
fpc5Dc/wiTBs146kW8jx9RQbNtH9xJTvK+GTDQZssUgxnH7pESmP06MkORgEH4ij
+AeHQy5Ltj/wqJNgIBGBzRUn/TXbuk2XeSJnApT+kpdwYy7nE/kimPdaWppvAlM4
NCOliY5GrhDNMn6rsZusavX5w171/Xm193gx/fSMmD+ZNuFXvEtsGw4ryeHvABVb
rawEP86k8G7/R7vo6HAoEJRHi0E7Jn4kWlijT3Kpw1geikI/+voYzfrRamRGSeP6
NdqtheGMLec358yjFFIxH5jLAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUAeYcP5ZG
alkJmFR26IR5u31BEvYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5QzczOC83QTBBQkYwMEVFQTkx
MUVBQTI4N0Q5MUJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUM3MzgvN0EwQUJGMDBFRUE5MTFFQUEyODdEOTFCRjhBRUEyMjgvQWVZY1A1
WkdhbGtKbUZSMjZJUjV1MzFCRXZZLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgI9WjBFBggrBgEFBQcBBwEB/wQ2MDQwIwQCAAEwHQMEBinRQAMEBinaAAMEBsQB
wAMEBcTKgAMDAMX8MA0EAgACMAcDBQAgAUIoMA0GCSqGSIb3DQEBCwUAA4IBAQC8
CoLmfXWLwZD/loNvRY+q2cTD1a45kMynKI7UFSl2QjbLNsHvsYAnpv2YqN7ksjnI
SQGyhntqD+RVPKNeKTkLDhMUWX777YTJb+va+S0LabnsUW+7coK4qi7awoQPbFDX
w9QbQwuj2XUJzxstu27wIrU0SshqJ5siTR/G8X60gziuwuw6E5RewlDwPxvc7dc1
Zfr1mP8V5IqvH5xznZyaVpZ3PxFaXu7n+N/u/l8+jPHbBbsj+ai5hOGcHuzdIRPs
3CAQ8gnlTnih1YV5lh6CXxJ2miex5OcuxdTyHbKA+tWpJjaI6S+iebXEQhmiLH+F
uLOH7GX51TTTktgdODpl
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org