Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
File:                     I_gUu0fVw67dUQPzb124opvj1x0.cer (raw, json)
Hash identifier:          V2gUL06Iy5N5k3mBkRlATZFGkVaoFslP46kFxiire3E=
Subject key identifier:   23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2393
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:39:28 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 32653
                          AS: 37394
                          IP: 41.77.152.0/21
                          IP: 41.222.48.0/21
                          IP: 102.164.121.0/24
                          IP: 154.72.96.0/20
                          IP: 2001:43f8:1180::/48
                          IP: 2c0f:fbf0::/28

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 13 May 2024 00:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9107 (0x2393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:39:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:25:82:8f:b8:ba:4b:12:9f:f4:87:a1:4b:
                    6a:6a:94:ad:2b:8a:7d:fb:a8:e1:6b:b8:ff:0e:17:
                    47:f5:de:59:a6:53:42:f0:a5:32:ee:18:dd:71:e1:
                    85:9f:ba:d8:2b:2f:44:bf:7d:3c:e5:ad:3d:3e:d5:
                    6c:54:cb:50:9a:d1:6e:b1:53:a1:46:a2:a2:f6:d8:
                    f0:54:9c:26:e0:c0:03:74:a1:06:06:07:94:f1:b7:
                    5c:87:ff:db:99:88:8b:a8:4a:eb:7d:a2:d5:0d:9a:
                    14:2d:1f:c1:36:97:fb:d2:fe:c4:d6:1c:91:c0:eb:
                    84:f3:fd:69:66:35:77:ea:2e:87:22:97:c5:64:83:
                    03:d0:2c:5d:33:b8:4b:4b:4f:95:e3:a2:de:cc:06:
                    18:f8:d6:bf:17:1a:76:e6:07:e0:1a:7d:ea:47:13:
                    47:22:31:18:ae:b4:ce:b3:74:c3:fe:b8:4e:69:2d:
                    c3:c2:52:16:4c:80:1a:da:61:40:68:21:86:0e:ac:
                    b0:4f:ca:65:33:fc:1a:1d:e6:4e:b7:88:f6:64:0e:
                    4a:e6:13:d0:7c:6d:99:4b:23:21:fa:43:d2:c2:6e:
                    7f:68:38:ba:25:02:83:e3:9f:a9:b3:cf:de:fd:52:
                    4f:58:59:4b:b1:1d:0f:2f:9c:43:b8:9d:85:c4:55:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32653
                  37394

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.152.0/21
                  41.222.48.0/21
                  102.164.121.0/24
                  154.72.96.0/20
                IPv6:
                  2001:43f8:1180::/48
                  2c0f:fbf0::/28

    Signature Algorithm: sha256WithRSAEncryption
         53:85:07:8b:28:b9:18:93:49:d8:59:a8:82:dc:18:49:fe:38:
         47:d2:6a:a0:08:70:61:fd:0a:6c:8a:61:b0:22:b1:e3:4f:88:
         17:5d:a2:04:90:b6:eb:40:1b:36:f7:ad:a9:48:c1:52:72:21:
         67:f7:7f:c5:31:d3:c1:84:19:21:70:4f:8e:a6:97:14:3a:55:
         bb:69:07:fe:4a:d1:5f:e9:1c:49:8a:27:b4:d1:ed:3e:d5:09:
         af:58:e7:fa:f3:4f:2b:7b:2d:f5:07:89:fc:d3:33:49:56:d2:
         a1:d4:3a:c1:a1:e6:0b:3a:15:1c:cf:45:6b:29:ad:40:0d:3e:
         4c:8a:f6:79:c6:34:f7:b0:01:e4:31:32:53:74:a7:63:d8:a8:
         5a:98:1e:21:f7:0f:31:b1:7b:a1:f3:96:ab:6f:42:bf:42:89:
         0f:2a:91:35:47:7d:71:86:2d:d0:c8:a9:16:70:ea:5f:39:b6:
         f5:04:2a:d3:da:47:72:64:30:75:3f:02:72:4d:3a:bf:cd:b4:
         c9:24:18:ca:b9:4d:b7:ab:0f:28:db:b7:44:2b:97:97:d1:20:
         78:ab:bd:dc:ba:76:88:b3:a4:8a:0f:22:e6:59:fd:0a:13:fd:
         ad:0f:10:0e:56:dc:21:6a:70:14:bb:ce:4d:7b:3a:15:0d:a7:
         b4:28:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:29:45 2024 by rpki-client on console-ams.rpki-client.org