Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
File:                     IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer (raw, json)
Hash identifier:          MgsvKi0bnvDG/KkThEeOoIhEkm3E1HINhJv0QfvjJwU=
Subject key identifier:   21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       27B1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:58:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37794
                          AS: 329158
                          IP: 196.49.92.0/24
                          IP: 196.60.106.0/24
                          IP: 2001:43f8:16a0::/47

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10161 (0x27b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:58:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:df:cb:47:9e:22:d7:df:a1:d0:31:f2:3c:
                    2a:b5:6d:9c:f2:3f:5d:3d:a2:f6:1c:da:bf:ea:69:
                    5d:19:cf:27:dc:3a:5f:88:c0:62:1a:5d:3a:83:fd:
                    16:a6:ee:65:6a:0f:d0:f3:6d:f9:63:71:92:1c:c8:
                    34:25:b8:10:f5:7c:22:15:e0:27:88:02:9d:8e:cf:
                    a3:ac:a1:59:cf:de:06:ff:80:09:f8:5a:bf:3f:1c:
                    47:45:9d:8e:64:7e:5b:75:10:57:6d:ac:41:b9:79:
                    16:f2:73:a2:5c:23:1b:0c:a5:64:7b:be:4f:55:c6:
                    c4:48:91:e3:cf:8d:e9:4f:48:10:11:06:c6:4c:93:
                    14:80:23:b7:47:48:26:6c:d3:ac:4c:ce:65:fb:8f:
                    4b:9b:69:29:ea:08:17:d6:f4:05:37:10:02:d2:9e:
                    a7:77:c6:05:f0:36:f3:a9:e4:76:52:af:7b:85:ea:
                    7e:a0:a8:79:aa:13:ef:4e:90:bf:99:c7:19:af:00:
                    16:d6:ca:d5:a2:bc:2e:8c:63:44:3a:c2:3f:f8:3a:
                    6b:e4:9c:36:c8:93:ba:86:4c:ce:e9:91:a7:4f:17:
                    63:4d:d5:7f:53:11:dd:90:a9:ab:62:b4:14:b0:06:
                    90:4b:58:16:c6:e0:ab:c8:9e:8f:3a:d2:50:66:01:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37794
                  329158

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.92.0/24
                  196.60.106.0/24
                IPv6:
                  2001:43f8:16a0::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:73:cf:9e:5d:33:87:83:63:ad:a8:14:45:79:d3:65:e8:
         20:2a:09:e5:75:80:66:f6:b1:9a:68:a3:e5:1e:d2:f7:26:80:
         e3:5a:8f:fb:fa:19:f2:4c:c1:56:af:7a:1c:3d:9b:74:b6:22:
         9b:1c:8f:38:8a:14:13:f2:af:47:14:8e:87:45:1e:f9:34:09:
         c5:a8:28:12:f5:23:12:75:db:45:b0:4d:e9:0b:ab:ed:9f:dd:
         2f:5a:97:ec:6a:b1:d7:15:d1:81:fb:d7:73:d1:e4:6b:8d:bd:
         86:cc:5e:ae:7c:06:74:22:9c:21:01:00:74:89:38:9f:3f:a7:
         2c:5a:21:da:75:8b:ca:4d:de:e8:e6:76:f4:a2:3f:03:1b:f4:
         92:5b:7b:1b:2f:36:44:d5:da:9c:a4:78:02:1f:ab:22:8b:6c:
         2d:5c:5f:f0:1e:4e:d8:da:08:ce:b0:4b:24:e7:f3:92:1d:0d:
         47:e5:8e:88:e4:42:5a:04:b2:e5:e2:7b:8a:4d:81:e3:f3:ec:
         23:67:25:a2:13:6e:4d:aa:8b:da:3f:de:c8:9f:b3:fc:bf:c6:
         83:2a:41:f4:81:60:7c:37:22:8b:a6:cb:92:91:3f:0c:3d:40:
         90:87:95:bb:c3:30:fb:d1:fa:fe:e8:1d:4e:f6:c3:9a:a5:44:
         92:85:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org