Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
File:                     KT5c_1MDCLfw9rieE_cMZPXhCZo.cer (raw, json)
Hash identifier:          JkIvc9mrJ5wWCiyzH37MDP8ipYQ8JKCS5kNtDWthghM=
Subject key identifier:   29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2756
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:44:37 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37558
                          AS: 37791
                          AS: 37795
                          AS: 328615
                          IP: 196.60.90.0/24
                          IP: 196.60.110.0/24
                          IP: 197.215.128.0/19
                          IP: 2001:43f8:50::/48
                          IP: 2001:43f8:16b0::/48
                          IP: 2c0f:3200::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10070 (0x2756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:44:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:66:65:94:b8:a6:be:9f:93:ed:18:72:89:
                    3a:00:82:40:6b:4b:96:cd:fc:50:10:54:14:92:82:
                    ad:3d:09:ac:1b:0b:91:0f:84:ca:a6:1d:8a:fc:e5:
                    93:d3:17:24:eb:bd:e3:6e:d5:0d:90:84:5d:3d:cb:
                    ef:11:73:a0:58:92:43:73:61:80:e0:74:c2:32:2a:
                    a2:8c:1f:5c:c6:76:06:64:17:45:3b:b2:d8:ba:45:
                    48:a6:a4:f2:a3:f7:3c:da:42:20:cd:db:ad:a5:d8:
                    32:13:fe:30:d3:01:4c:53:76:48:80:30:fb:73:7a:
                    0e:58:81:96:2f:6d:5e:92:52:f2:2e:74:d9:7c:90:
                    91:a6:ea:5c:c3:27:77:6a:ed:32:8b:de:c5:28:ab:
                    58:60:91:6e:e9:0b:36:26:f8:3e:e8:fd:36:17:c0:
                    40:db:83:b5:66:aa:f5:7b:fa:43:93:08:7c:bc:24:
                    04:b4:47:c0:75:f8:7f:b9:7b:89:59:f8:13:b2:a7:
                    ac:be:9b:5f:b8:cf:0f:cf:e3:d2:8e:a9:58:21:0b:
                    07:af:d9:7c:26:89:27:ee:e0:6c:9e:72:69:24:28:
                    19:04:8f:f8:3f:85:db:fb:fb:1b:23:e0:71:d8:1c:
                    a6:33:48:5e:d0:14:92:d7:42:c8:ca:4f:17:f3:fd:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37558
                  37791
                  37795
                  328615

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.90.0/24
                  196.60.110.0/24
                  197.215.128.0/19
                IPv6:
                  2001:43f8:50::/48
                  2001:43f8:16b0::/48
                  2c0f:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:67:9c:20:04:bc:c1:1b:38:b8:d1:7e:97:fb:b4:8d:31:
         7b:65:5a:8c:86:42:fa:0e:41:91:4c:48:7f:5c:d5:8c:4f:c6:
         03:ce:9d:79:fa:d1:39:d8:15:c6:b1:45:91:dc:01:24:72:a6:
         c8:d1:db:95:2e:8a:b8:6a:6d:38:98:c3:67:45:40:a3:1c:28:
         b7:84:e5:df:f7:2b:c9:64:d9:dd:ce:f9:1c:af:5b:df:04:64:
         26:8f:41:5d:73:f2:d7:19:9c:23:4d:c9:b4:34:c9:cc:88:ce:
         52:a1:94:6f:8c:0d:ec:40:98:78:70:3b:5d:4d:e2:d9:6e:f4:
         e2:4a:a4:c2:ce:8c:73:bf:2e:00:db:6c:f3:b1:48:31:63:ab:
         25:7d:f6:12:df:b7:56:ba:e0:a4:e8:82:b8:12:1a:26:6b:a4:
         4e:15:a5:3e:2d:51:25:4d:58:59:aa:cf:64:23:a5:db:65:26:
         fb:07:6f:de:95:f8:c2:f8:2d:e3:24:13:fa:e9:ac:fd:bc:d0:
         0c:51:01:cd:e0:15:3a:66:ef:77:68:f6:e0:b2:a0:43:fc:e5:
         a2:cf:f6:57:78:28:43:41:2f:3f:e0:81:8b:ef:8c:63:7a:b1:
         13:f3:96:30:b1:e0:3a:37:96:ab:c9:32:8a:24:64:33:b8:2c:
         78:2d:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org