Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json)
Hash identifier:          71MhqANRhwyd9kue35mVczQmF4td5MFEggWF/w5MnfI=
Subject key identifier:   24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2B58
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 07:03:14 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 2905
                          AS: 4178
                          AS: 4571
                          AS: 9129
                          AS: 11569
                          AS: 12091
                          AS: 16637
                          AS: 24788
                          AS: 28698
                          IP: 41.112.0.0/12
                          IP: 41.181.0.0/16
                          IP: 41.195.0.0/16
                          IP: 41.208.0.0/18
                          IP: 105.176.0.0/15
                          IP: 105.208.0.0/12
                          IP: 105.236.0.0/15
                          IP: 196.3.224.0/19
                          IP: 196.4.87.0 -- 196.4.93.255
                          IP: 196.7.0.0/16
                          IP: 196.11.239.0/24
                          IP: 196.13.228.0/22
                          IP: 196.22.64.0/18
                          IP: 196.30.0.0/15
                          IP: 196.41.160.0/19
                          IP: 196.44.0.0/19
                          IP: 196.47.0.0/18
                          IP: 197.64.0.0/12
                          IP: 2001:4218::/32
                          IP: 2001:4260::/32
                          IP: 2c0f:fb08::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11096 (0x2b58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug 28 07:03:14 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f:
                    a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33:
                    6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78:
                    72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30:
                    39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29:
                    00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17:
                    69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67:
                    4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8:
                    2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b:
                    c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc:
                    f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c:
                    09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a:
                    bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a:
                    aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec:
                    fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f:
                    dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e:
                    62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2905
                  4178
                  4571
                  9129
                  11569
                  12091
                  16637
                  24788
                  28698

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.112.0.0/12
                  41.181.0.0/16
                  41.195.0.0/16
                  41.208.0.0/18
                  105.176.0.0/15
                  105.208.0.0/12
                  105.236.0.0/15
                  196.3.224.0/19
                  196.4.87.0-196.4.93.255
                  196.7.0.0/16
                  196.11.239.0/24
                  196.13.228.0/22
                  196.22.64.0/18
                  196.30.0.0/15
                  196.41.160.0/19
                  196.44.0.0/19
                  196.47.0.0/18
                  197.64.0.0/12
                IPv6:
                  2001:4218::/32
                  2001:4260::/32
                  2c0f:fb08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:07:6a:38:49:13:ff:2a:48:64:6d:30:92:14:c2:14:cf:44:
         6a:38:8e:f4:2e:c1:e8:55:fd:fc:61:36:d0:d9:76:7f:69:67:
         30:28:62:8d:f2:62:80:44:3f:c8:f6:51:76:1a:5c:3f:67:aa:
         f0:28:8e:6a:16:22:6c:e2:78:e2:8a:2a:38:67:83:26:d2:a3:
         6a:a9:23:96:52:ae:95:ff:3d:0b:8b:f4:b0:3b:ee:48:9f:7d:
         27:bd:23:93:4c:c5:2f:19:cc:98:5e:27:ef:2d:8c:de:c4:29:
         6d:33:d3:c3:d7:ed:ca:21:72:6e:03:eb:28:f7:f1:df:dd:e2:
         b1:b1:55:88:b9:ac:27:23:97:d1:8d:e8:1e:18:d1:e8:ca:84:
         a2:35:99:9e:ea:24:a0:04:45:68:69:81:35:9d:ac:d1:42:a7:
         0a:e1:aa:58:14:de:2a:b5:83:09:d7:0c:6b:67:92:40:f5:ec:
         1a:7f:c2:6b:9b:e6:eb:69:09:7b:bd:eb:84:21:31:fc:f1:76:
         71:b4:a4:02:23:81:39:ba:86:73:7a:5d:a2:52:50:90:9b:bf:
         85:fb:cb:36:16:3a:1a:0b:0f:76:b1:60:dc:54:31:fb:79:27:
         79:96:40:b1:4b:54:dd:9b:df:53:83:d2:7f:20:be:2a:0b:c8:
         91:fe:cf:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 23 02:15:35 2024 by rpki-client on console-fra.rpki-client.org