Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
File:                     JRG61AeNRnKs9DJCmSGM5IVdA50.cer (raw, json)
Hash identifier:          roBpOPfDesJHtP2U1wbfVmrssAORgpRgenxlxQvBs8U=
Subject key identifier:   25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2B7F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 08:48:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37680
                          IP: 102.132.128.0/17
                          IP: 102.223.148.0/22
                          IP: 154.0.0.0/20
                          IP: 2c0f:f9a8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11135 (0x2b7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 12 08:48:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:f8:a0:db:61:b3:68:fc:55:d2:31:11:8e:
                    d9:8d:83:0b:25:8a:e6:5d:f7:b4:43:ba:16:1c:71:
                    ae:36:17:c0:1e:49:40:9a:70:d6:a9:7e:81:4f:26:
                    64:24:68:50:19:b8:77:19:31:ab:c6:19:0e:57:28:
                    a5:53:d5:e6:c3:7c:0f:8a:3c:94:8f:fd:e9:bb:be:
                    44:e2:14:21:88:16:03:69:3e:10:64:b3:d7:bc:62:
                    6c:3f:73:9f:97:5d:82:e6:2b:94:32:7d:0a:21:0b:
                    20:67:44:73:f1:bf:e9:ac:4c:2f:e5:40:fa:8f:31:
                    14:38:2f:db:92:90:7e:8c:f6:4b:28:1f:aa:c6:41:
                    9d:51:6e:61:32:79:8a:9d:93:4f:d5:31:9d:79:48:
                    87:41:21:46:2f:a8:69:87:20:c8:13:1a:45:66:33:
                    ef:30:91:41:92:0c:02:b2:bb:2c:c2:8a:38:c0:1f:
                    42:c4:3d:7f:2d:d3:fc:49:e3:e6:93:82:8c:9e:a1:
                    44:7b:a4:53:6e:d2:b0:03:75:cd:bf:52:98:ba:c9:
                    d6:30:cf:4b:79:32:85:1c:74:92:1c:00:a1:f2:6d:
                    6d:f9:3b:f7:5c:84:c9:c7:5e:7e:64:e3:c8:b3:c2:
                    08:59:b7:70:35:42:a6:8b:eb:09:aa:f3:c0:30:29:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37680

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.128.0/17
                  102.223.148.0/22
                  154.0.0.0/20
                IPv6:
                  2c0f:f9a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:0f:80:ea:28:f7:19:bf:9f:3b:af:ba:c0:e6:de:13:a4:38:
         0c:c0:48:75:14:08:0f:5f:20:f2:14:ce:48:2e:ff:fb:b1:fb:
         9b:b0:34:8f:f3:60:23:1d:b2:02:9e:92:f7:31:da:5a:0d:aa:
         ab:77:af:70:be:c5:c1:f1:d4:48:09:dd:42:7d:4e:ba:23:66:
         b2:79:bb:ec:d7:d2:23:dc:77:e8:9f:83:36:c3:28:67:dd:d9:
         df:16:1c:bf:c0:e4:36:b6:ca:43:ec:c4:33:f6:29:07:fd:59:
         09:3d:a4:67:03:79:ac:0e:59:d3:f8:ce:df:24:ba:9a:26:b6:
         1b:b5:e3:32:6b:0c:3c:11:34:b3:5f:05:a8:4a:e9:11:3c:5e:
         23:5e:14:93:03:0e:fa:4b:ed:d5:23:03:92:f3:21:f9:8f:1d:
         a8:23:ac:d4:d3:f1:99:1d:84:48:6b:6d:11:22:91:84:1e:a1:
         c2:9d:76:7d:eb:c0:e3:1c:69:a1:2d:1a:f8:b7:41:1f:64:08:
         73:8a:07:3d:7d:2c:94:2a:63:73:4e:00:b9:19:90:25:7f:18:
         5c:11:27:df:bd:d1:c9:f6:45:36:89:63:a0:c1:4b:63:0f:1d:
         a2:2c:6b:55:f0:ad:87:ae:ab:bf:64:07:c1:19:80:3b:b1:a6:
         6e:97:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 01:53:57 2024 by rpki-client on console-ams.rpki-client.org