Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.cer (raw, json)
Hash identifier:          wGZYS+Tw15VjfMujFtkXo1vDBQn93xoHSqHf61sFt/4=
Subject key identifier:   22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2417
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:12:27 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328029
                          IP: 196.61.240.0/20
                          IP: 2c0f:eb80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9239 (0x2417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:12:27 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:e0:36:1e:89:7d:4d:87:d2:ca:b3:cd:b8:
                    8b:8b:8a:bb:48:be:7b:ed:21:ef:eb:3d:e9:d4:95:
                    10:5a:c8:72:88:2d:02:bd:fb:0c:31:a6:1c:b2:da:
                    89:26:9c:ac:8c:e8:60:ea:84:14:e2:a2:0b:5e:dd:
                    bd:91:0c:4f:1d:91:cf:7c:e4:ee:7f:8f:b5:f1:7e:
                    6f:c3:cc:c4:62:00:aa:a2:96:5d:1a:aa:32:93:a5:
                    8a:aa:e6:9d:f0:3a:85:29:07:94:fc:87:b7:95:b6:
                    17:0a:89:8c:53:12:8b:79:97:23:9c:8b:55:5e:37:
                    2f:f9:7f:dc:7d:f2:d3:ae:3c:9c:13:72:8b:0b:4e:
                    2f:8d:1f:ff:6e:2a:b7:8a:9a:0d:8c:8a:65:8c:40:
                    b4:83:ed:0b:3e:6d:bb:e0:81:14:af:3b:0e:19:2f:
                    38:25:3e:52:07:15:e6:12:69:8b:92:f9:cd:5f:d2:
                    26:ee:a5:c1:9a:3b:c3:05:dc:7a:7d:72:e5:7e:48:
                    80:47:4d:d2:4d:61:4a:96:75:0c:0e:7c:de:3f:4b:
                    7e:8a:29:d6:4f:e6:0a:e2:9b:37:fd:dc:d2:f3:49:
                    5e:43:67:fb:7e:bc:1b:1a:56:4c:50:31:bc:40:44:
                    cd:81:fb:61:e6:3f:5d:b9:70:d1:39:2d:ad:81:18:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328029

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.61.240.0/20
                IPv6:
                  2c0f:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:42:b3:58:a0:2a:55:44:84:a6:57:4e:85:a1:8f:80:06:e6:
         2a:8d:c6:82:bc:2c:3a:45:88:b5:61:61:24:18:82:fc:4a:83:
         b9:c6:a5:eb:a6:9e:92:08:2c:94:f8:6c:14:b5:53:55:83:a8:
         58:20:48:a9:eb:23:d3:ea:ce:85:4f:e9:e0:e9:98:0c:65:5c:
         1b:92:5c:8b:4c:ca:e3:38:9e:f6:92:43:3b:a1:99:9a:cd:c8:
         fa:01:42:cb:39:31:15:f8:bd:c4:fa:c3:84:c4:e5:b9:7d:cd:
         b6:2c:74:2c:d5:8d:69:61:24:90:74:5f:8b:46:b7:aa:c6:7a:
         ae:8b:fc:7b:0d:4d:2f:64:e3:7c:a5:c8:4f:a5:0d:82:7b:84:
         33:1a:42:9c:de:97:e4:13:f5:3e:2d:90:c2:72:f7:e6:a5:08:
         bd:1d:d0:aa:b5:12:54:ba:d5:49:a1:c7:54:42:fc:2d:21:c1:
         05:ea:6c:3d:ce:aa:aa:63:44:d9:99:d1:f4:7f:7b:46:53:3b:
         db:1c:d5:8a:0b:0d:a4:a1:d5:15:aa:5e:64:e7:36:54:de:de:
         51:6d:48:e6:75:db:66:c4:00:6f:28:e7:e9:76:66:0f:a2:15:
         98:4c:75:1b:57:b7:b7:a2:39:eb:8d:46:7c:52:0e:9b:85:91:
         65:1a:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org