Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.cer (raw, json)
Hash identifier:          ashVAjR2Ez3lmGPx5h3Z4gDtPuK+79zAM9VphvNZ0zc=
Subject key identifier:   16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A93
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 27 Jun 2024 10:38:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37183
                          IP: 41.85.192.0/19
                          IP: 196.29.32.0/21
                          IP: 2001:43f0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10899 (0x2a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 27 10:38:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:fc:83:79:1d:76:d7:4f:e0:96:b1:e6:2a:
                    59:cc:d4:98:32:c0:54:b4:b0:8c:89:9c:5e:50:b3:
                    4a:3d:96:e7:75:19:74:4f:ce:e2:60:b5:56:14:bf:
                    4e:5d:40:0f:e6:4d:1a:1d:1a:82:b5:67:33:17:a7:
                    70:ae:4c:86:c9:0d:b9:22:9e:4f:f1:86:af:79:5b:
                    68:5b:05:7a:f0:d3:a5:f2:a2:54:56:1b:5c:2c:4f:
                    9b:12:24:32:57:0c:0f:12:14:07:de:80:34:90:ba:
                    64:36:dc:42:79:8d:0f:e8:bc:02:a4:ec:26:49:20:
                    93:52:48:44:03:8f:3f:b7:c8:a0:01:8f:ac:af:b2:
                    c4:9c:41:8d:bb:9f:d5:b9:a5:e0:ff:94:89:a5:0a:
                    30:34:cb:f3:84:f4:18:90:ff:ef:9f:ca:d1:72:bd:
                    7a:2f:e8:15:a8:63:e3:4f:19:48:d5:ef:e5:e2:44:
                    35:54:7f:ae:c5:58:70:ac:35:9a:9a:63:cc:41:19:
                    7c:f9:df:5e:4e:ed:17:da:d3:3b:fb:b1:a0:18:70:
                    a6:ce:33:5c:8a:bb:fb:e0:bf:ab:61:44:dc:08:cd:
                    a3:58:d2:fa:7c:40:01:b4:ce:fd:a2:8e:8b:11:fc:
                    bd:29:e5:f7:2a:ed:6e:12:72:d3:f1:b8:8e:02:ca:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37183

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.192.0/19
                  196.29.32.0/21
                IPv6:
                  2001:43f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:bc:70:8c:c3:d9:aa:d8:93:70:75:3a:75:c3:c5:1f:53:bf:
         58:02:3d:3d:6d:9e:93:d7:f3:30:00:4e:06:d3:af:df:73:35:
         04:bb:a2:10:59:ba:24:76:96:ce:35:5e:84:f8:93:73:3b:55:
         16:bd:66:90:38:aa:6c:c5:a3:c9:ea:f4:3e:00:32:b6:44:ec:
         86:e3:a2:d2:e8:bd:15:88:b3:d6:07:ec:fb:6b:cb:b0:54:e5:
         d8:8f:e2:7a:65:99:88:cb:3b:db:36:a2:46:26:48:fe:94:7e:
         2b:48:8c:cf:3a:19:85:22:53:9a:30:3e:10:40:6c:b7:9f:a6:
         18:d1:79:76:7a:84:4e:63:11:52:35:1e:03:c7:c3:48:09:35:
         06:c8:2d:47:75:b2:ce:ed:a6:35:34:c7:c7:88:45:d3:fc:44:
         6e:05:3b:63:78:bd:a7:07:6b:a6:16:b8:06:33:64:43:c3:5a:
         7b:90:38:f3:df:ac:0d:53:ea:d8:5b:e2:4b:d8:d4:df:ed:6d:
         43:1c:d2:9a:d2:cd:1a:05:0c:d4:5c:d0:0e:19:3e:d7:e7:96:
         d9:55:47:49:2a:92:97:d3:33:dc:0b:e8:9c:2c:f0:80:b8:a3:
         b2:75:a7:bb:88:99:fd:a4:4d:cb:07:24:53:91:4d:78:5b:3a:
         ba:f1:e7:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 24 01:53:57 2024 by rpki-client on console-ams.rpki-client.org