Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer (raw, json)
Hash identifier:          mns5O94Ove1SsNxkxx7BkXzopYqFfX7MFZFa/1tyRy8=
Subject key identifier:   1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       29ED
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 24 Apr 2024 12:18:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37088
                          IP: 41.216.160.0/20
                          IP: 102.135.192.0/19
                          IP: 2c0f:6400::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10733 (0x29ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 24 12:18:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:76:ed:62:77:1c:15:21:d3:01:86:c9:f2:
                    0c:67:ac:85:35:11:97:a3:02:6b:12:c2:1b:ef:bf:
                    11:f2:57:3a:03:d9:15:a9:96:a2:3f:de:40:33:c0:
                    16:5f:4c:36:01:e7:3c:46:6b:af:7e:3d:0a:34:87:
                    1a:8d:a6:d4:0f:83:15:e2:17:31:a4:1a:de:57:db:
                    71:9b:db:5d:ef:f6:04:3b:73:63:a6:15:2e:a0:34:
                    8a:a5:d3:5b:ad:54:6c:24:55:55:f5:26:e9:fc:e7:
                    84:ba:39:bc:74:11:c7:a3:36:41:8e:ef:b0:2e:8e:
                    38:6d:a6:2f:5e:6a:b8:35:d9:87:6e:b7:81:21:20:
                    65:aa:17:dd:1e:84:57:27:6c:14:e6:71:80:aa:78:
                    d4:20:0f:2d:19:23:9f:eb:39:8b:18:41:5a:27:df:
                    bd:64:c1:5a:d0:45:02:72:06:5a:21:07:d3:08:eb:
                    86:44:cf:e9:7d:be:52:9b:5d:d4:80:1e:85:ef:0f:
                    33:40:1e:b4:d4:2e:42:f1:87:8f:07:67:1f:e1:00:
                    f1:ee:52:f1:9f:c7:b9:0e:f3:26:ca:c8:bc:4a:4c:
                    4b:89:8d:8d:76:e3:65:58:cc:31:c0:8c:6c:78:f2:
                    12:2b:b1:cc:dd:82:c2:b5:0f:5f:74:22:2d:cc:12:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37088

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.160.0/20
                  102.135.192.0/19
                IPv6:
                  2c0f:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:01:92:0f:77:fe:13:05:16:c4:f2:f8:8f:2e:70:0a:ab:08:
         a8:64:a2:7c:d1:9e:81:ac:c1:7f:0d:bb:e6:b0:82:8a:d4:75:
         3d:7f:c7:69:66:33:8e:5b:ca:9c:5a:6b:ad:f1:1b:6a:cc:b4:
         16:7d:0d:20:ee:39:0c:d5:dd:07:8d:68:2c:7d:8e:9c:d5:0a:
         6e:70:ea:5e:19:78:dd:15:0a:d6:bf:b2:26:98:df:aa:01:b4:
         7c:89:d8:c9:99:97:2a:c1:2c:19:95:36:3d:79:13:29:d0:f8:
         77:30:47:c8:b4:6d:41:55:1a:1d:da:91:84:bd:01:e9:ba:b9:
         28:54:b9:20:ba:19:9b:ca:c1:45:8c:a1:22:ef:42:64:a9:1e:
         2f:46:3b:fb:42:b0:74:4c:0e:d9:f7:6b:78:fb:55:9d:55:bd:
         bf:9f:db:47:94:96:0e:b1:02:67:a3:fa:52:7e:7e:a6:3b:a2:
         76:11:55:3e:ca:c4:71:2e:5e:e7:21:75:79:e0:4e:60:04:c1:
         53:c9:02:40:3d:17:ca:32:61:d9:95:3c:78:72:49:48:d1:ac:
         36:93:0d:f0:d3:dd:7a:67:a5:48:16:9e:50:82:61:38:fd:59:
         5c:69:f6:af:a8:a0:dc:c2:ae:5d:9d:ed:ae:06:c3:04:ca:90:
         c1:ca:3f:02
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICKe0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDA0MjQxMjE4NDZaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjEzMjU0QUYxMTAvBgNVBAUTKDFGNDBGQ0M1N0MyNkE2RERCNjA1Rjc3
OThBNEI1M0MwOUQyQjYyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTaXbtYnccFSHTAYbJ8gxnrIU1EZejAmsSwhvvvxHyVzoD2RWplqI/3kAzwBZf
TDYB5zxGa69+PQo0hxqNptQPgxXiFzGkGt5X23Gb213v9gQ7c2OmFS6gNIql01ut
VGwkVVX1Jun854S6Obx0EcejNkGO77Aujjhtpi9earg12Ydut4EhIGWqF90ehFcn
bBTmcYCqeNQgDy0ZI5/rOYsYQVon371kwVrQRQJyBlohB9MI64ZEz+l9vlKbXdSA
HoXvDzNAHrTULkLxh48HZx/hAPHuUvGfx7kO8ybKyLxKTEuJjY1242VYzDHAjGx4
8hIrsczdgsK1D190Ii3MEtNnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUH0D8xXwm
pt22Bfd5iktTwJ0rYiAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxMzI1NC9DOTAxMkFERTAyMzQx
MUVGQTA5NjUwNUYwMTcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTMyNTQvQzkwMTJBREUwMjM0MTFFRkEwOTY1MDVGMDE3MDAxQjEvSDBEOHhY
d21wdDIyQmZkNWlrdFR3SjByWWlBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkOAwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAQp2KADBAVmh8AwDQQC
AAIwBwMFACwPZAAwDQYJKoZIhvcNAQELBQADggEBADEBkg93/hMFFsTy+I8ucAqr
CKhkonzRnoGswX8Nu+awgorUdT1/x2lmM45bypxaa63xG2rMtBZ9DSDuOQzV3QeN
aCx9jpzVCm5w6l4ZeN0VCta/siaY36oBtHyJ2MmZlyrBLBmVNj15EynQ+HcwR8i0
bUFVGh3akYS9Aem6uShUuSC6GZvKwUWMoSLvQmSpHi9GO/tCsHRMDtn3a3j7VZ1V
vb+f20eUlg6xAmej+lJ+fqY7onYRVT7KxHEuXuchdXngTmAEwVPJAkA9F8oyYdmV
PHhySUjRrDaTDfDT3XpnpUgWnlCCYTj9WVxp9q+ooNzCrl2d7a4GwwTKkMHKPwI=
-----END CERTIFICATE-----
Generated at Mon May 6 17:42:30 2024 by rpki-client on console-ams.rpki-client.org