Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
File:                     F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer (raw, json)
Hash identifier:          IRWqBIonb+69x3Vn3jop+5gBdWrOx/5d9mxHWV7wfh0=
Subject key identifier:   17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C58
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 21 Nov 2024 08:48:30 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37012
                          AS: 328571
                          AS: 328983
                          IP: 41.222.232.0/22
                          IP: 196.61.32.0/20
                          IP: 197.159.128.0/20
                          IP: 2c0f:7700::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11352 (0x2c58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 21 08:48:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:1d:9b:2b:8a:6e:7c:eb:71:4f:d9:88:d4:
                    3a:ae:bb:18:d4:c5:fd:0b:60:c0:e5:3a:b4:21:be:
                    2d:15:3c:70:e1:b8:2e:42:42:59:a4:f4:7c:29:66:
                    b2:a2:cf:9c:0f:e9:e5:36:0b:ec:3e:48:5a:7a:58:
                    90:5b:00:84:63:dc:43:88:7e:fd:ab:f3:0b:b1:9f:
                    76:d3:ef:79:2e:5c:c1:13:2d:89:7a:d1:bc:28:03:
                    86:4e:7f:e6:73:84:a7:68:c8:f9:1e:71:f7:27:08:
                    c6:a5:79:9c:f2:76:80:3c:44:92:b6:c8:ac:bf:cf:
                    52:7c:0d:cd:02:bc:35:34:65:eb:34:19:0d:59:e3:
                    c3:8d:95:8c:2f:a4:52:d5:c1:aa:06:29:3a:ed:db:
                    32:2d:c8:51:d8:88:4f:41:73:00:21:4a:8d:32:95:
                    15:18:df:ed:07:7a:bf:f8:96:4c:4d:6d:44:dc:65:
                    26:1f:62:a3:42:b3:08:fe:59:f8:32:c2:29:60:d7:
                    7f:a7:ad:ea:1b:c9:cf:7e:45:e0:93:db:cf:b3:dd:
                    bf:24:c3:a5:1d:8f:13:a7:60:c9:3b:3d:b5:07:c3:
                    64:68:de:67:8e:c2:7b:c6:7b:7e:2b:38:4b:aa:cb:
                    06:ac:d7:6c:ce:cb:1d:41:b3:9c:42:eb:44:b7:45:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37012
                  328571
                  328983

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.232.0/22
                  196.61.32.0/20
                  197.159.128.0/20
                IPv6:
                  2c0f:7700::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:cd:84:2d:2d:0a:4f:5e:4e:43:72:a5:f8:52:bd:a8:4a:78:
         df:fe:b9:7e:75:66:6f:e3:80:05:f2:05:df:b2:98:f1:3b:6c:
         a7:d9:3e:5f:a9:04:25:7b:59:05:90:af:60:f5:32:58:f4:48:
         f5:47:ce:3c:34:c6:e3:48:57:c1:80:f0:00:23:89:71:99:49:
         0e:d2:f8:c7:f5:92:37:a2:fa:70:d7:a0:01:99:12:03:ee:c4:
         01:b0:05:3b:9f:02:01:c3:16:44:5b:bd:58:9b:fa:62:b4:2d:
         a4:7c:dc:73:59:8f:10:e9:f6:3a:13:ab:65:60:e3:e1:4f:33:
         8e:c5:54:41:df:c6:13:d4:ca:d9:ae:ac:b1:51:d8:be:62:04:
         6b:62:4c:ba:a5:0d:81:00:b4:50:60:8a:71:c0:11:75:a9:00:
         0a:8a:27:ad:ad:31:f7:6c:57:23:09:08:00:32:a3:30:e1:ae:
         1f:5a:e6:61:6c:44:0d:cc:65:ab:30:f8:c5:10:a7:77:f5:2d:
         e3:ec:dd:c1:95:e5:58:17:49:a0:72:8e:9c:2c:cd:5d:66:4f:
         d7:3c:b9:9a:97:bf:4d:0f:56:f9:61:62:c5:0f:df:14:3e:a3:
         f6:8f:79:93:a2:0e:b1:0b:af:4b:87:fb:2b:7a:a3:2b:99:82:
         92:fa:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org