Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.cer (raw, json)
Hash identifier:          dXYBT7l9eypyj4GxEgrlMy7Zjv1Xbjut/NUfCMiospA=
Subject key identifier:   2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       235A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:22:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37199
                          IP: 41.76.128.0/21
                          IP: 197.155.0.0/19
                          IP: 2c0f:fb18::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9050 (0x235a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:22:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:c8:23:2f:23:d5:55:4d:3e:c2:f3:00:f1:
                    82:ad:c8:18:2d:8b:71:6c:35:25:fe:3d:1d:d1:1f:
                    f2:e0:40:18:08:0f:18:3c:5c:10:20:e8:cc:f8:57:
                    4e:c0:b6:71:03:97:4f:be:f5:25:b1:46:1f:41:b7:
                    6b:d2:fc:25:88:94:35:a6:cf:8f:f0:3e:dd:42:8e:
                    10:ca:54:1c:36:95:0f:bd:3e:1f:31:fc:07:d6:24:
                    82:d4:8d:c9:03:5b:57:65:a7:ff:28:ed:db:88:52:
                    00:1b:0a:3a:91:79:a7:99:07:47:ff:62:bc:67:fe:
                    3d:a7:a3:ef:89:28:ac:ea:d3:46:7b:eb:fd:78:e3:
                    ad:09:5c:7b:a7:7c:c6:3f:85:f3:d0:0f:63:f0:10:
                    1b:6e:59:4f:79:02:0b:50:e3:6b:59:e0:c2:d1:52:
                    8f:d2:ee:0a:83:13:46:c2:57:01:2e:42:be:62:db:
                    1c:41:05:5d:09:a4:ec:5b:ac:fb:33:38:c5:02:a4:
                    88:5a:e4:e7:fb:12:c5:7e:b2:17:23:d3:c0:32:5e:
                    d3:f2:54:e6:fa:84:79:69:71:5c:a8:f0:6b:31:31:
                    af:3c:0c:0c:0f:39:d1:c6:bc:c1:c0:a1:69:af:8c:
                    15:eb:a9:6f:e2:58:fe:ad:94:48:a1:37:0d:be:13:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37199

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.128.0/21
                  197.155.0.0/19
                IPv6:
                  2c0f:fb18::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:f3:dc:7e:c3:6c:e7:88:c9:02:1b:60:db:59:f5:7d:9b:
         c6:b5:88:de:f2:fa:ac:ca:79:01:67:76:5b:e1:8d:cf:f0:70:
         df:a5:8a:0b:4a:44:92:e1:b5:73:0a:a7:02:33:59:fc:cd:be:
         93:a4:28:6a:27:e0:c4:6c:bd:8d:54:9b:00:52:2a:0d:79:00:
         38:cb:bb:93:a5:0a:fb:51:a2:33:7e:a8:3f:b8:4f:b6:d3:00:
         ba:c3:23:93:e1:74:18:93:2d:04:30:42:92:d6:cc:77:2f:85:
         f9:b0:23:62:76:ce:3a:e7:5c:49:d8:ee:20:97:90:19:15:8d:
         20:a0:f8:50:75:13:56:5e:7f:d8:b3:47:b2:4c:12:c8:65:9a:
         44:76:42:d5:c2:50:bf:f9:c2:d0:29:53:b2:ed:97:4e:55:45:
         20:1f:b5:52:c3:c6:46:6d:78:7f:1f:77:5c:c7:87:f4:8d:d5:
         45:82:92:08:1b:9f:d6:cc:74:07:6a:5c:d1:8a:d3:26:0d:7c:
         83:15:4c:a4:57:b6:27:c0:f8:7a:b9:d4:9d:37:63:b3:08:e8:
         77:09:fe:e9:d7:6a:d6:3e:c8:40:a9:84:d3:19:8c:31:48:61:
         70:c5:87:0b:7e:10:b7:31:5d:de:68:63:41:12:e5:6c:e4:34:
         fd:7a:d6:dd
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICI1owDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMDIyMzFaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjFEMjk5QUYxMTAvBgNVBAUTKDJCMjQ0Mjg0ODE3NEFBODg5NDQ2OUE3
NzlCOUZEN0RBNDk1OEM2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZX8gjLyPVVU0+wvMA8YKtyBgti3FsNSX+PR3RH/LgQBgIDxg8XBAg6Mz4V07A
tnEDl0++9SWxRh9Bt2vS/CWIlDWmz4/wPt1CjhDKVBw2lQ+9Ph8x/AfWJILUjckD
W1dlp/8o7duIUgAbCjqReaeZB0f/Yrxn/j2no++JKKzq00Z76/14460JXHunfMY/
hfPQD2PwEBtuWU95AgtQ42tZ4MLRUo/S7gqDE0bCVwEuQr5i2xxBBV0JpOxbrPsz
OMUCpIha5Of7EsV+shcj08AyXtPyVOb6hHlpcVyo8GsxMa88DAwPOdHGvMHAoWmv
jBXrqW/iWP6tlEihNw2+E0OrAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUKyRChIF0
qoiURpp3m5/X2klYxmkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRDI5OS80OEYwMDhEODU2RDUx
MUU1ODQ1RUY4NUNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUQyOTkvNDhGMDA4RDg1NkQ1MTFFNTg0NUVGODVDRjhBRUEyMjgvS3lSQ2hJ
RjBxb2lVUnBwM201X1gya2xZeG1rLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkU8wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAMpTIADBAXFmwAwDQQC
AAIwBwMFACwP+xgwDQYJKoZIhvcNAQELBQADggEBADjr89x+w2zniMkCG2DbWfV9
m8a1iN7y+qzKeQFndlvhjc/wcN+ligtKRJLhtXMKpwIzWfzNvpOkKGon4MRsvY1U
mwBSKg15ADjLu5OlCvtRojN+qD+4T7bTALrDI5PhdBiTLQQwQpLWzHcvhfmwI2J2
zjrnXEnY7iCXkBkVjSCg+FB1E1Zef9izR7JMEshlmkR2QtXCUL/5wtApU7Ltl05V
RSAftVLDxkZteH8fd1zHh/SN1UWCkggbn9bMdAdqXNGK0yYNfIMVTKRXtifA+Hq5
1J03Y7MI6HcJ/unXatY+yECphNMZjDFIYXDFhwt+ELcxXd5oY0ES5WzkNP161t0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org