Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
File:                     DV2bCS_jnIf5O8uUysP2yR0WyOs.cer (raw, json)
Hash identifier:          hie1zMjkRYzGKzA1Rf3eM42hN7pb6JK95tn1f6TzVYg=
Subject key identifier:   0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25E3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:49:28 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37186
                          AS: 37195
                          IP: 196.10.141.0/24
                          IP: 196.46.25.0/24
                          IP: 196.60.8.0/22
                          IP: 196.60.70.0/23
                          IP: 2001:43f8:6d0::/46

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9699 (0x25e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:49:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:15:05:bb:94:ec:d1:aa:3a:45:69:36:f3:
                    3f:9a:94:5e:c6:e5:bd:4a:85:0f:c5:b3:d7:f2:5b:
                    18:16:61:1f:55:0f:68:18:19:65:40:42:1b:f8:0d:
                    8f:02:36:3a:ec:7b:47:7e:07:cb:be:f6:09:a3:a4:
                    a0:1b:c5:81:7c:00:9f:9b:96:99:68:0d:0a:7e:79:
                    99:22:56:ed:86:3c:22:4e:1e:61:9e:2d:e2:8c:fa:
                    b7:88:b7:39:ae:11:a3:b0:9a:44:e2:e6:ca:e2:9e:
                    e6:5a:c6:55:fc:b9:65:e5:e2:6d:70:71:b7:b2:63:
                    6d:9b:c2:fc:23:3d:73:48:6a:d0:cc:bf:df:83:68:
                    6d:86:1a:04:34:79:b8:f0:de:41:a6:d5:e7:c2:f4:
                    3d:d4:83:02:59:6e:fe:d0:54:9c:55:fe:b2:c1:02:
                    4d:2a:61:3d:e5:5c:14:5d:98:09:01:70:d7:5e:c4:
                    da:1d:06:31:22:59:e3:0c:ae:d2:01:06:e5:1a:93:
                    9e:a3:b5:1a:8d:8c:bc:3a:60:22:26:52:63:b4:fe:
                    0a:f5:8e:d7:05:e9:af:39:8a:ff:9b:82:1c:1a:f8:
                    5b:6c:4c:58:26:cc:5a:e1:3e:d4:fb:82:8e:49:53:
                    76:4e:ae:4a:bf:63:91:ec:47:8c:42:eb:a7:73:85:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37186
                  37195

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.10.141.0/24
                  196.46.25.0/24
                  196.60.8.0/22
                  196.60.70.0/23
                IPv6:
                  2001:43f8:6d0::/46

    Signature Algorithm: sha256WithRSAEncryption
         13:06:dd:18:46:19:9e:7b:f3:41:f2:71:50:96:2a:ae:f7:c4:
         a0:c9:b2:20:65:c5:14:3f:5a:8e:5c:80:3f:c2:b5:44:fa:1a:
         98:7f:23:98:7b:c4:b1:5c:4b:1d:d9:0c:db:3a:ac:94:ce:97:
         80:76:23:13:b2:0e:71:2d:24:dd:2e:1b:a6:3a:9b:7b:d3:29:
         99:bc:bc:a2:50:4b:d5:12:f5:86:b6:e5:91:d4:97:eb:f8:2e:
         64:2a:34:d6:29:08:d5:38:1d:ae:12:0d:e0:fc:60:00:a3:dc:
         37:3f:1b:ac:59:ea:a8:2a:23:42:40:fa:eb:23:8c:45:a8:a7:
         20:a5:c4:a4:7c:39:2e:e4:a0:a2:cb:2d:83:83:27:be:3f:9e:
         74:a2:a4:3c:11:a1:e9:d1:ee:24:21:21:91:88:a2:3d:9d:8b:
         45:61:12:6e:b4:2e:d3:db:95:d4:30:17:c2:54:aa:50:fd:e5:
         c4:29:7a:40:7f:c1:31:38:90:d9:8c:f6:e4:43:04:e9:5f:96:
         1c:93:9b:ff:cb:07:af:96:1c:61:c2:fa:1f:30:cb:03:ba:dd:
         60:a5:b8:df:53:10:8c:be:11:b5:b9:dd:de:76:95:57:b0:0d:
         83:f5:c3:b4:85:b6:92:36:7d:9d:85:95:70:04:0a:d5:c1:f8:
         86:92:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:41 2024 by rpki-client on console-ams.rpki-client.org