Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
File:                     Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer (raw, json)
Hash identifier:          2UafzbqfBX3Mh6NrF7nDagVbvK9IyevgyiWaO00ehvA=
Subject key identifier:   05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       32EC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:35:29 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328192
                          IP: 196.6.229.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13036 (0x32ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:35:29 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36D65B9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:da:9c:cd:82:60:4f:c6:8f:6d:86:1b:bb:
                    9d:5e:bb:cf:9e:19:aa:59:70:38:2d:11:67:cd:d1:
                    f8:55:99:59:de:38:ca:da:eb:8f:60:5c:08:03:0c:
                    1d:aa:9e:85:0d:16:26:05:3f:d4:9f:b0:0c:27:1f:
                    26:c7:18:40:98:a7:53:62:21:97:64:38:db:e5:7b:
                    b7:39:9f:a5:b4:8e:0b:46:04:56:1b:54:e0:e0:21:
                    13:4e:46:da:aa:35:76:d9:a5:fe:58:82:21:3c:97:
                    fa:51:8d:fe:28:6e:c0:47:97:d3:34:cb:e8:ab:94:
                    4f:aa:9b:2f:8b:d3:fc:a9:bf:53:58:1d:c7:a0:5b:
                    f0:50:53:36:b4:63:f1:f8:5a:96:b4:6f:4c:de:75:
                    e2:a4:bb:ab:17:13:86:80:0c:45:d4:e4:99:c8:d6:
                    49:a7:6c:96:5e:42:ad:83:94:d9:c8:30:a5:20:7c:
                    15:68:bd:66:42:d3:62:a7:42:57:96:00:d8:bc:ca:
                    cf:42:55:88:70:cf:e3:af:f0:93:06:0d:94:b6:17:
                    0f:c9:ca:c3:2e:54:89:fb:fb:00:de:23:13:ee:11:
                    7d:f3:7b:bd:d1:26:09:10:59:12:42:7b:74:8b:2e:
                    62:64:a3:b1:cb:7f:cb:db:af:70:37:9b:5e:6f:1b:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328192

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:15:c2:b5:8e:ad:63:53:11:f0:fb:04:8c:f4:f0:1f:6e:38:
         b6:80:ca:8e:16:41:9a:66:a7:8f:51:76:07:06:c9:8b:45:8a:
         13:a3:8b:9a:17:d9:5d:9f:7d:e5:09:ca:11:69:91:e6:d3:66:
         9c:ab:f8:52:1f:67:e5:bb:b7:78:40:71:8d:a5:9b:f0:ba:2e:
         13:fa:b5:e8:df:78:42:1c:8d:f6:1f:36:1a:b4:58:96:bc:c5:
         fb:87:20:98:0a:8f:53:91:19:4b:c6:55:bc:fb:74:02:4f:62:
         54:b8:b4:d5:d5:cb:40:89:10:40:25:38:be:c1:f6:b0:19:a2:
         8e:a4:7d:f8:6a:fa:79:9b:3d:85:83:16:42:35:3d:d0:a2:0c:
         89:8b:e7:14:43:01:83:ef:66:f8:ae:4c:e6:de:f3:5b:3e:4b:
         e4:68:95:bb:62:b4:00:9a:56:ec:57:60:d7:b5:7a:4e:af:b4:
         ae:ad:10:2c:35:a0:ca:bf:08:ef:f2:4f:82:33:34:6d:e9:4e:
         13:e6:a5:f2:42:a0:e8:1e:82:ab:15:bc:98:97:08:80:69:9e:
         3a:e6:26:d4:d1:ec:99:38:c2:b3:2e:e7:c8:03:21:df:1b:af:
         b8:bb:a7:e6:cb:e9:35:3f:77:f6:b1:bc:e6:e3:ab:9b:81:d8:
         cc:fa:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:29:47 2025 by rpki-client