Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
File:                     Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer (raw, json)
Hash identifier:          VmQcVZ+jr146PD5mWvVgU6Ae2BCaCC3cjxwo/0e2fT0=
Subject key identifier:   05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2ABB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 11 Jul 2024 05:29:01 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328192
                          IP: 196.6.229.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10939 (0x2abb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 11 05:29:01 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D65B9AF/serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:da:9c:cd:82:60:4f:c6:8f:6d:86:1b:bb:
                    9d:5e:bb:cf:9e:19:aa:59:70:38:2d:11:67:cd:d1:
                    f8:55:99:59:de:38:ca:da:eb:8f:60:5c:08:03:0c:
                    1d:aa:9e:85:0d:16:26:05:3f:d4:9f:b0:0c:27:1f:
                    26:c7:18:40:98:a7:53:62:21:97:64:38:db:e5:7b:
                    b7:39:9f:a5:b4:8e:0b:46:04:56:1b:54:e0:e0:21:
                    13:4e:46:da:aa:35:76:d9:a5:fe:58:82:21:3c:97:
                    fa:51:8d:fe:28:6e:c0:47:97:d3:34:cb:e8:ab:94:
                    4f:aa:9b:2f:8b:d3:fc:a9:bf:53:58:1d:c7:a0:5b:
                    f0:50:53:36:b4:63:f1:f8:5a:96:b4:6f:4c:de:75:
                    e2:a4:bb:ab:17:13:86:80:0c:45:d4:e4:99:c8:d6:
                    49:a7:6c:96:5e:42:ad:83:94:d9:c8:30:a5:20:7c:
                    15:68:bd:66:42:d3:62:a7:42:57:96:00:d8:bc:ca:
                    cf:42:55:88:70:cf:e3:af:f0:93:06:0d:94:b6:17:
                    0f:c9:ca:c3:2e:54:89:fb:fb:00:de:23:13:ee:11:
                    7d:f3:7b:bd:d1:26:09:10:59:12:42:7b:74:8b:2e:
                    62:64:a3:b1:cb:7f:cb:db:af:70:37:9b:5e:6f:1b:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328192

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:32:a6:2a:a2:7b:20:c0:95:3a:81:0d:a2:54:44:7c:8d:
         04:1c:df:bd:4b:e6:eb:4f:b2:c7:df:d2:a5:a6:23:db:cf:6c:
         95:49:65:87:43:16:83:c3:b4:b6:e8:d7:f3:d1:2f:32:8c:eb:
         6a:c5:57:ae:51:0f:a2:8c:ee:73:59:9a:0a:70:5d:1d:a3:f3:
         7d:86:36:71:04:5b:4f:e0:0f:66:e0:9b:d9:31:c1:c9:69:14:
         7c:ae:5b:60:75:0c:04:eb:9c:e4:ef:76:7f:c1:20:d3:0e:11:
         bc:07:9a:05:97:f7:27:b9:d3:cf:ef:2e:30:d0:28:c8:ae:d4:
         73:49:a0:58:2f:ac:b5:82:94:65:d9:2b:27:fa:2e:25:a2:76:
         50:06:90:b9:50:5d:aa:82:8d:54:0e:0d:e2:04:f1:90:d2:fc:
         f8:71:25:3c:2b:c9:12:35:6a:1c:d9:e0:e9:14:e8:09:3e:a6:
         96:36:10:c8:0d:77:81:a6:be:cb:bc:76:32:4b:3d:9f:1b:c6:
         6b:81:23:aa:7e:88:5c:03:ca:10:09:30:3d:b0:c6:c1:e4:6c:
         d7:04:f3:80:8a:a6:e9:54:97:73:1a:71:4f:dd:9a:5c:27:05:
         f4:39:aa:d1:2f:73:6b:b9:6e:bb:f7:16:e0:21:62:61:2b:de:
         d3:57:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 01:53:57 2024 by rpki-client on console-ams.rpki-client.org