Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
File:                     IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer (raw, json)
Hash identifier:          9srjv3wWT+9VcbGl/1qFV+wavP8czETyFx4sHL24qmc=
Subject key identifier:   21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       32A8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:20:51 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 37794
                          AS: 329158
                          IP: 196.49.92.0/24
                          IP: 196.60.106.0/24
                          IP: 2001:43f8:16a0::/47
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12968 (0x32a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 05:20:51 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C7A1BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:df:cb:47:9e:22:d7:df:a1:d0:31:f2:3c:
                    2a:b5:6d:9c:f2:3f:5d:3d:a2:f6:1c:da:bf:ea:69:
                    5d:19:cf:27:dc:3a:5f:88:c0:62:1a:5d:3a:83:fd:
                    16:a6:ee:65:6a:0f:d0:f3:6d:f9:63:71:92:1c:c8:
                    34:25:b8:10:f5:7c:22:15:e0:27:88:02:9d:8e:cf:
                    a3:ac:a1:59:cf:de:06:ff:80:09:f8:5a:bf:3f:1c:
                    47:45:9d:8e:64:7e:5b:75:10:57:6d:ac:41:b9:79:
                    16:f2:73:a2:5c:23:1b:0c:a5:64:7b:be:4f:55:c6:
                    c4:48:91:e3:cf:8d:e9:4f:48:10:11:06:c6:4c:93:
                    14:80:23:b7:47:48:26:6c:d3:ac:4c:ce:65:fb:8f:
                    4b:9b:69:29:ea:08:17:d6:f4:05:37:10:02:d2:9e:
                    a7:77:c6:05:f0:36:f3:a9:e4:76:52:af:7b:85:ea:
                    7e:a0:a8:79:aa:13:ef:4e:90:bf:99:c7:19:af:00:
                    16:d6:ca:d5:a2:bc:2e:8c:63:44:3a:c2:3f:f8:3a:
                    6b:e4:9c:36:c8:93:ba:86:4c:ce:e9:91:a7:4f:17:
                    63:4d:d5:7f:53:11:dd:90:a9:ab:62:b4:14:b0:06:
                    90:4b:58:16:c6:e0:ab:c8:9e:8f:3a:d2:50:66:01:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37794
                  329158

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.92.0/24
                  196.60.106.0/24
                IPv6:
                  2001:43f8:16a0::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:ab:37:9c:39:ff:06:9e:61:b3:79:b3:a9:fa:f6:f1:43:
         27:c9:75:eb:62:19:ae:3f:90:f5:f4:9e:96:3f:77:9b:d3:d4:
         db:6e:0f:1c:24:44:f4:b1:be:91:b2:69:57:49:b7:67:2b:59:
         c1:96:68:6c:76:bd:35:07:4a:b5:b5:4b:69:59:99:e1:e4:cf:
         3b:23:d9:4d:84:65:a8:7b:52:53:31:d2:e4:53:ff:25:f7:d6:
         02:a2:b3:e0:95:e9:1a:c2:01:57:4e:0b:28:db:42:bb:35:80:
         e5:30:77:e5:11:38:d7:9c:8a:74:37:0e:ea:f7:7e:56:0e:36:
         1b:75:c3:0d:74:41:bf:e8:fe:98:20:47:9c:c6:fe:a1:5c:16:
         d5:ed:a7:43:c6:9a:ea:a1:9d:17:84:2d:93:3f:e4:0b:b5:77:
         73:96:c3:64:3b:a6:0e:66:15:f9:77:a3:33:48:53:54:83:c5:
         73:99:be:23:dc:de:39:60:cc:be:9d:26:36:33:c1:ac:80:26:
         24:8a:90:3b:6f:c0:aa:19:65:6c:da:2d:61:ff:fc:7e:a4:2e:
         49:b4:38:11:30:29:40:d6:79:96:95:38:db:50:11:b9:e6:1b:
         69:3a:fc:b8:15:b6:7d:2f:57:43:a2:fa:53:95:40:79:cf:2a:
         cc:c6:86:ab
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgICMqgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNTIwNTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkM3QTFCQUYxMTAvBgNVBAUTKDIxODYyQTgwNEE4RTUyNTFEM0Y0RDU1
MTU1MzI0Q0FCQ0IxQjJDRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZvd/LR54i19+h0DHyPCq1bZzyP109ovYc2r/qaV0ZzyfcOl+IwGIaXTqD/Ram
7mVqD9DzbfljcZIcyDQluBD1fCIV4CeIAp2Oz6OsoVnP3gb/gAn4Wr8/HEdFnY5k
flt1EFdtrEG5eRbyc6JcIxsMpWR7vk9VxsRIkePPjelPSBARBsZMkxSAI7dHSCZs
06xMzmX7j0ubaSnqCBfW9AU3EALSnqd3xgXwNvOp5HZSr3uF6n6gqHmqE+9OkL+Z
xxmvABbWytWivC6MY0Q6wj/4OmvknDbIk7qGTM7pkadPF2NN1X9TEd2QqatitBSw
BpBLWBbG4KvIno860lBmAbhvAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUIYYqgEqO
UlHT9NVRVTJMq8sbLNEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDN0ExQi84QkYzNkVCMkE3MEYx
MUVEOEUxM0EzQUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzdBMUIvOEJGMzZFQjJBNzBGMTFFRDhFMTNBM0FCRjEyMjI0NjgvSVlZcWdF
cU9VbEhUOU5WUlZUSk1xOHNiTE5FLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAk6ICAwUFxjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxXAMEAMQ8
ajAPBAIAAjAJAwcBIAFD+BagMA0GCSqGSIb3DQEBCwUAA4IBAQBS6Ks3nDn/Bp5h
s3mzqfr28UMnyXXrYhmuP5D19J6WP3eb09Tbbg8cJET0sb6RsmlXSbdnK1nBlmhs
dr01B0q1tUtpWZnh5M87I9lNhGWoe1JTMdLkU/8l99YCorPglekawgFXTgso20K7
NYDlMHflETjXnIp0Nw7q935WDjYbdcMNdEG/6P6YIEecxv6hXBbV7adDxprqoZ0X
hC2TP+QLtXdzlsNkO6YOZhX5d6MzSFNUg8Vzmb4j3N45YMy+nSY2M8GsgCYkipA7
b8CqGWVs2i1h//x+pC5JtDgRMClA1nmWlTjbUBG55htpOvy4FbZ9L1dDovpTlUB5
zyrMxoar
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:00 2025 by rpki-client