Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
File:                     HIATGRbyhVyxdDXLrvJmjeFVlsE.cer (raw, json)
Hash identifier:          gImSkEO5mDjSj3DrNz3u1ksyS8Z77q3i1XLUOQ4qiIw=
Subject key identifier:   1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       27C0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:00:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37085
                          IP: 196.216.247.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10176 (0x27c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:00:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36CB8DFAF/serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:06:0c:29:f1:ec:8d:77:27:a9:5b:49:2b:
                    0f:4b:dc:3c:49:58:66:68:5d:59:79:e9:ba:b9:d6:
                    97:21:43:14:9f:19:8d:7e:0e:9c:f7:16:21:63:9b:
                    25:2b:36:f7:08:a4:43:91:50:4f:c6:7c:b7:f7:2c:
                    22:d5:78:05:9d:5b:2d:ab:1f:d9:53:cc:63:79:07:
                    f4:df:e1:a0:8a:a5:ba:47:77:17:f8:06:43:f6:c8:
                    25:52:96:e7:1e:3b:2b:e5:5b:b2:a0:ca:b1:ac:13:
                    91:21:3f:35:9c:4e:3e:97:6d:f7:db:f8:c3:48:45:
                    ed:85:ab:fd:28:a0:3a:b1:9c:5b:f5:17:b3:5c:13:
                    e7:b1:e4:3d:71:53:fc:dd:91:06:b1:16:13:8f:26:
                    25:bf:f7:30:9c:dd:d9:29:0a:3d:e4:40:c7:f2:1c:
                    84:6b:a1:62:0c:e8:55:b5:bd:d2:07:a7:43:37:ce:
                    76:96:03:cb:c6:ce:0b:fd:43:74:1b:4e:18:44:52:
                    e2:76:88:39:69:7c:3c:fe:2e:62:0d:25:d4:05:1c:
                    1f:5a:3e:39:fa:22:59:cb:29:35:06:13:7b:c6:97:
                    9a:bf:72:7c:c6:58:32:64:f3:bc:fa:55:cc:92:d8:
                    66:e9:6b:a5:ba:57:65:ad:75:06:73:cb:d2:2b:6f:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37085

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:19:cf:e7:7e:23:21:51:75:27:a6:b9:a2:92:4c:8b:7f:
         f3:17:9b:50:be:e9:36:4c:d9:6e:9e:52:06:07:f6:ff:ae:5a:
         41:78:35:74:28:e6:d8:4a:b4:d1:bb:bf:57:f9:14:2d:08:29:
         c0:1f:e8:c6:fe:30:7a:19:c6:2b:a5:06:10:95:b2:d2:6a:a0:
         bb:91:98:e6:f3:86:9b:ff:e3:3e:92:7d:e8:ee:24:29:1d:95:
         aa:09:6e:07:23:c6:61:d2:fe:dd:9a:e4:25:36:86:c4:fa:e5:
         a6:c1:1b:d3:20:36:52:f6:8d:fc:f2:3a:c7:b5:f4:11:22:d1:
         9a:90:b6:28:54:35:b9:17:45:2b:1e:27:89:52:63:91:fc:7e:
         3d:15:d3:1a:6d:81:a8:ca:a0:bc:e0:74:ef:ce:67:1d:8d:0a:
         9a:dc:9c:b3:36:18:e5:3a:95:9d:86:44:b5:8a:12:e0:38:65:
         5b:c1:15:d8:ba:05:60:23:8a:8a:75:10:d3:9f:05:cd:fd:25:
         47:a3:be:14:6a:34:b8:f8:40:13:8b:06:33:03:6d:1f:8c:da:
         59:f6:95:c6:2e:8e:70:9e:e5:25:d5:24:4c:b0:37:35:89:7c:
         80:f0:9f:ff:f9:89:1a:9f:3d:86:84:36:7c:60:63:b2:67:c8:
         ff:e4:63:db
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJ8AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDAwNTZaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkNCOERGQUYxMTAvBgNVBAUTKDFDODAxMzE5MTZGMjg1NUNCMTc0MzVD
QkFFRjI2NjhERTE1NTk2QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXEwYMKfHsjXcnqVtJKw9L3DxJWGZoXVl56bq51pchQxSfGY1+Dpz3FiFjmyUr
NvcIpEORUE/GfLf3LCLVeAWdWy2rH9lTzGN5B/Tf4aCKpbpHdxf4BkP2yCVSluce
OyvlW7KgyrGsE5EhPzWcTj6Xbffb+MNIRe2Fq/0ooDqxnFv1F7NcE+ex5D1xU/zd
kQaxFhOPJiW/9zCc3dkpCj3kQMfyHIRroWIM6FW1vdIHp0M3znaWA8vGzgv9Q3Qb
ThhEUuJ2iDlpfDz+LmINJdQFHB9aPjn6IlnLKTUGE3vGl5q/cnzGWDJk87z6VcyS
2Gbpa6W6V2WtdQZzy9Irb/WHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUHIATGRby
hVyxdDXLrvJmjeFVlsEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQjhERi81NEM1N0M1ODhBNDYx
MUVFOEZGQTlGMEU0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0I4REYvNTRDNTdDNTg4QTQ2MTFFRThGRkE5RjBFNEFEOUU2RkMvSElBVEdS
YnloVnl4ZERYTHJ2Sm1qZUZWbHNFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkN0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE2PcwDQYJKoZIhvcN
AQELBQADggEBAKkQGc/nfiMhUXUnprmikkyLf/MXm1C+6TZM2W6eUgYH9v+uWkF4
NXQo5thKtNG7v1f5FC0IKcAf6Mb+MHoZxiulBhCVstJqoLuRmObzhpv/4z6Sfeju
JCkdlaoJbgcjxmHS/t2a5CU2hsT65abBG9MgNlL2jfzyOse19BEi0ZqQtihUNbkX
RSseJ4lSY5H8fj0V0xptgajKoLzgdO/OZx2NCprcnLM2GOU6lZ2GRLWKEuA4ZVvB
Fdi6BWAjiop1ENOfBc39JUejvhRqNLj4QBOLBjMDbR+M2ln2lcYujnCe5SXVJEyw
NzWJfIDwn//5iRqfPYaENnxgY7JnyP/kY9s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org