Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
File:                     B0rky8vOb02Yhv7yEVKxOmrac9Y.cer (raw, json)
Hash identifier:          P8wLFWjf7zxR11N2UjPCa0XfLstKzfCT+x3zgSPZIBM=
Subject key identifier:   07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       250E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:12:40 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37511
                          AS: 327777
                          AS: 328013

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9486 (0x250e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:12:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:25:fe:60:ff:de:f0:9e:3b:e3:b2:b2:6a:
                    84:1f:f8:39:4a:b5:57:30:d7:d5:0d:de:cf:79:ba:
                    03:f1:df:96:c2:9c:63:ee:74:2c:17:c6:bd:12:53:
                    1e:1d:03:23:df:59:f5:4b:ca:8e:5e:68:0d:0f:64:
                    ea:82:bf:3a:58:26:aa:32:46:b2:fe:c9:71:3f:55:
                    58:a3:5a:a2:ac:a7:ef:9a:05:ef:dd:e2:1e:4d:a5:
                    25:07:b0:b8:a7:80:12:ae:6a:72:c9:53:8d:67:e4:
                    cb:b0:11:ea:9f:c4:ea:23:c7:98:cc:26:5b:64:ef:
                    12:a1:17:59:17:86:ca:32:bb:ab:e5:fc:5c:78:5c:
                    7a:0a:a5:0d:83:54:36:b5:0a:5e:48:ec:39:dd:0a:
                    26:74:e7:46:1f:66:2c:d2:85:25:1d:42:2a:80:c6:
                    04:75:6f:73:d2:fc:5b:f0:f7:14:1b:26:3c:f0:fd:
                    a5:2c:8a:5f:12:b2:00:a3:6b:c6:17:78:42:01:95:
                    99:90:38:a1:5b:4f:68:ed:62:69:44:85:46:b8:69:
                    ee:83:81:f1:2c:63:f0:30:92:44:f9:3a:89:44:18:
                    dd:1c:22:e8:e8:6e:58:fb:34:35:50:56:fa:5f:44:
                    4d:a2:d5:e7:b5:df:03:91:b6:b8:e1:1e:b8:f4:f8:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37511
                  327777
                  328013

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:d4:be:19:41:42:3e:40:51:33:e4:43:5a:4e:f1:38:a8:
         6d:f4:fa:1a:e8:8b:a1:75:cc:1b:7b:9c:00:7a:12:a1:cb:66:
         57:04:51:c7:87:2f:e7:28:63:12:73:a9:ab:24:2e:3d:f4:67:
         4b:74:02:3f:27:12:35:bb:50:f5:dd:6f:02:26:10:ad:4c:ea:
         ac:64:72:3a:48:7f:b3:e7:8b:db:b7:51:4a:a0:71:10:54:0b:
         f1:d4:53:6e:7a:35:67:c8:d5:6d:58:70:da:24:1a:5e:a9:21:
         c9:2d:a8:ec:ac:02:c7:73:52:5c:6e:c1:11:d7:19:bf:6c:6b:
         1f:33:0a:50:dc:29:6a:7c:10:6e:0f:d0:bf:e1:e8:b5:71:06:
         82:c2:a7:99:6b:cc:44:16:91:96:be:dd:d6:9b:db:d9:9a:6c:
         69:41:16:75:6e:8d:32:04:0d:fb:60:75:89:be:19:fd:08:ba:
         09:53:d0:0c:55:8d:82:c8:bb:4e:25:3d:dc:41:fa:3e:d0:e7:
         83:25:7e:e4:96:ce:89:07:36:00:25:e0:b9:e2:5c:2b:d5:21:
         e4:fa:b4:0d:79:a5:ca:fd:13:3f:1c:95:51:c3:3c:88:35:76:
         92:07:1a:4f:3e:66:cf:2a:f0:85:56:a5:c4:76:34:6e:23:8b:
         4e:51:ba:93
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgICJQ4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMjEyNDBaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjU5RjlDQUYxMTAvBgNVBAUTKDA3NEFFNENCQ0JDRTZGNEQ5ODg2RkVG
MjExNTJCMTNBNkFEQTczRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSxCX+YP/e8J4747KyaoQf+DlKtVcw19UN3s95ugPx35bCnGPudCwXxr0SUx4d
AyPfWfVLyo5eaA0PZOqCvzpYJqoyRrL+yXE/VVijWqKsp++aBe/d4h5NpSUHsLin
gBKuanLJU41n5MuwEeqfxOojx5jMJltk7xKhF1kXhsoyu6vl/Fx4XHoKpQ2DVDa1
Cl5I7DndCiZ050YfZizShSUdQiqAxgR1b3PS/Fvw9xQbJjzw/aUsil8SsgCja8YX
eEIBlZmQOKFbT2jtYmlEhUa4ae6DgfEsY/AwkkT5OolEGN0cIujoblj7NDVQVvpf
RE2i1ee13wORtrjhHrj0+MjdAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUB0rky8vO
b02Yhv7yEVKxOmrac9YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1OUY5Qy8zMjFCMDIwMjdBMDkx
MUVEQUNBNjQ4ODVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTlGOUMvMzIxQjAyMDI3QTA5MTFFREFDQTY0ODg1RjEyMjI0NjgvQjBya3k4
dk9iMDJZaHY3eUVWS3hPbXJhYzlZLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP
AgMAkocCAwUAYQIDBQFNMA0GCSqGSIb3DQEBCwUAA4IBAQCLq9S+GUFCPkBRM+RD
Wk7xOKht9Poa6Iuhdcwbe5wAehKhy2ZXBFHHhy/nKGMSc6mrJC499GdLdAI/JxI1
u1D13W8CJhCtTOqsZHI6SH+z54vbt1FKoHEQVAvx1FNuejVnyNVtWHDaJBpeqSHJ
LajsrALHc1JcbsER1xm/bGsfMwpQ3ClqfBBuD9C/4ei1cQaCwqeZa8xEFpGWvt3W
m9vZmmxpQRZ1bo0yBA37YHWJvhn9CLoJU9AMVY2CyLtOJT3cQfo+0OeDJX7kls6J
BzYAJeC54lwr1SHk+rQNeaXK/RM/HJVRwzyINXaSBxpPPmbPKvCFVqXEdjRuI4tO
UbqT
-----END CERTIFICATE-----
Generated at Tue Apr 16 01:10:24 2024 by rpki-client on console-fra.rpki-client.org