Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
File:                     JV9qID5NQpmXaROm9i3oxI7sk70.cer (raw, json)
Hash identifier:          qsGDQcQpucIMlYZKSW1ED5gcdQOL/t0moEt0G5kD3Lc=
Subject key identifier:   25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C20
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 01 Nov 2024 14:53:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36976
                          IP: 41.223.164.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11296 (0x2c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov  1 14:53:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363460FAF/serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:d0:2d:64:92:58:8e:c7:28:1e:b0:22:92:
                    64:08:32:ca:f0:d4:4d:44:79:cc:1c:10:1e:41:8e:
                    25:02:a2:a5:cc:bf:9d:e5:20:85:eb:ff:89:e8:68:
                    d9:3b:35:54:cd:ce:56:a3:ad:1b:b8:14:a7:ac:fc:
                    39:c9:18:ee:65:e3:4e:3e:87:6c:c6:b6:53:3b:37:
                    be:f0:1a:88:e0:6f:3d:ea:b6:d0:73:00:d7:1b:40:
                    d0:f1:40:e5:fa:79:d3:d1:f9:1d:c5:3a:09:e9:26:
                    1d:78:dc:04:0b:a1:94:34:27:a0:20:96:cf:0a:64:
                    14:1f:e8:75:6f:7d:90:60:fd:0d:54:04:4e:10:f1:
                    0b:a7:d1:d4:c0:ad:e3:de:e0:85:e7:c5:92:1b:d3:
                    5a:47:e9:16:6b:18:2a:1c:6b:b7:1d:af:15:9c:fa:
                    40:d5:4e:61:88:f8:ab:d5:e4:91:9b:b9:15:c9:73:
                    81:de:3f:8f:35:f9:14:f3:97:b4:a1:03:a8:d4:92:
                    7c:9a:79:a1:ae:cb:fa:c6:84:cf:f0:4e:ca:36:dc:
                    c1:91:35:db:97:24:76:e0:7e:79:93:b8:9d:57:c0:
                    96:00:35:51:71:d6:28:2f:25:9a:80:60:6c:f9:8f:
                    9f:4e:9e:f3:5e:52:05:ce:23:b0:25:8e:58:e9:52:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36976

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:9c:66:6f:e3:b8:bd:1a:37:d9:9d:35:37:a1:50:a3:f3:df:
         48:c8:52:d4:7a:27:24:cb:62:8d:70:63:14:95:21:3c:ea:2a:
         b4:1d:de:7b:fb:4b:cd:36:34:0c:cf:9c:7a:d6:45:bf:29:ce:
         8c:59:39:ff:1d:3f:15:86:45:02:a1:f6:7d:78:41:d2:a9:c6:
         ee:8a:6e:cb:79:7f:5f:3b:ff:9e:c4:4c:57:7d:b5:9e:cd:6f:
         c5:db:d1:7d:17:f8:60:84:7e:67:1e:b5:7e:b6:86:ae:0a:17:
         2a:c4:66:3d:15:03:28:89:80:af:fc:22:75:0f:78:fb:27:aa:
         f3:a3:10:d6:e0:36:a3:cd:41:73:34:ed:bf:7d:dd:07:77:7a:
         fa:2f:47:00:75:4e:f8:2f:1b:8b:6c:ce:db:94:5a:ab:46:a5:
         f7:73:09:97:24:c3:d1:32:6e:75:0a:2d:1f:e6:0b:cb:cb:ba:
         42:b9:0c:ac:0b:74:77:8d:56:18:e1:a1:44:11:3b:9b:e3:19:
         c0:b7:c8:c0:39:1d:64:c2:c9:53:b2:10:12:c7:0b:1f:4c:5e:
         2b:84:f1:6a:35:d3:4b:7d:b7:05:64:d1:43:49:a9:d6:5e:40:
         6b:54:6f:78:ce:40:99:67:5d:8e:e9:74:ea:ce:e1:8d:e1:7c:
         8b:62:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org