Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
File:                     DRUACGUUibpRRLPxfr7M37lFZAs.cer (raw, json)
Hash identifier:          pwsxMb6BSIdXVfFklQrDokudWu4RsBbejCSjIi6tw6c=
Subject key identifier:   0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28AF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:37:34 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37575
                          IP: 41.79.124.0/22
                          IP: 102.222.140.0/22
                          IP: 2c0f:f498::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10415 (0x28af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:37:34 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:ef:b6:01:97:f7:b8:fa:ab:bc:eb:a1:44:
                    42:04:bf:09:79:22:70:b6:5a:8e:90:e9:af:ab:79:
                    81:91:e1:03:96:7e:f0:dd:b8:d7:53:53:75:60:b9:
                    aa:c7:7c:6c:12:71:58:76:c1:92:46:38:65:3d:cf:
                    26:40:cf:aa:41:a0:0c:31:c3:f1:de:89:d5:d1:07:
                    2f:13:12:0f:fe:f0:c9:2d:2b:12:62:45:b2:a2:05:
                    e4:a6:8c:ad:e3:c9:b9:f9:5c:12:bc:7c:a1:ea:fa:
                    b4:f8:cf:fc:cd:bf:03:cc:3f:77:84:63:ba:f3:23:
                    f0:cc:f8:cc:5c:01:97:85:3a:a3:15:0e:e5:dd:54:
                    5e:d5:d8:75:b3:c7:43:d3:f9:e1:a7:be:c4:b5:2d:
                    15:6f:e1:de:18:05:d2:76:66:29:84:2a:5b:8f:a6:
                    99:af:8d:0b:49:aa:a3:4c:ff:52:8f:99:bf:77:8c:
                    87:90:46:41:77:13:67:32:8d:d1:32:7e:0c:13:ce:
                    5b:79:25:0e:ab:12:2b:ed:bb:dd:b1:91:dc:ba:5c:
                    1f:0e:a0:61:8f:54:39:70:9f:18:5a:40:54:75:27:
                    81:92:26:1b:23:ad:62:2d:17:ba:6a:b7:1b:8e:61:
                    f6:4e:a3:f6:62:3d:f4:dc:ee:60:45:f3:a7:0c:e5:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37575

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.124.0/22
                  102.222.140.0/22
                IPv6:
                  2c0f:f498::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:b3:54:26:99:87:57:a6:9d:c5:34:ef:74:a0:1d:04:26:
         79:58:0c:aa:d3:0d:68:88:7c:6c:8e:a0:75:f0:08:3e:01:b1:
         d7:23:2e:17:a2:5f:e2:a7:8c:c6:39:11:ea:35:45:93:71:3d:
         22:2c:69:89:fc:c8:cc:1a:fd:d7:45:d2:84:50:13:25:af:e5:
         69:2f:43:68:9f:ed:48:8b:81:db:fd:ca:48:54:48:59:ae:9d:
         ba:62:d3:05:2a:43:0f:f8:5d:98:37:bd:15:e4:f9:4f:74:9c:
         e8:53:9d:98:77:44:9f:b3:19:90:43:b1:00:ff:dc:a7:d8:02:
         0a:d6:8a:d0:88:9c:30:fd:b1:af:f5:c7:8c:c6:c1:c1:21:bb:
         6b:bb:6a:32:08:75:5a:21:3b:fd:d8:77:4f:7b:87:5f:16:39:
         c8:c2:33:94:7e:74:b4:42:e9:03:b7:b2:11:b8:3e:ba:42:13:
         67:e6:ca:89:aa:07:6e:ab:af:17:2a:63:d9:eb:a3:74:01:fd:
         ca:c3:08:ce:75:98:3e:81:ba:9e:79:f1:cd:c1:62:a8:06:9e:
         21:24:a1:a1:ab:c6:5e:22:82:f4:26:f3:49:ec:45:77:e8:99:
         84:79:21:e5:03:05:78:2d:bd:22:45:0f:9c:85:9b:90:45:6f:
         6a:a5:d7:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:41 2024 by rpki-client on console-fra.rpki-client.org