Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
File:                     L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer (raw, json)
Hash identifier:          Bm9dt4cY6u6Efs4hD2qFi9U3Hkv/1+dDupvpeGakQfY=
Subject key identifier:   2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25F7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:52:26 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 3741
                          AS: 6089
                          AS: 6351
                          AS: 10393
                          AS: 10474
                          AS: 12258
                          AS: 20011
                          AS: 27598
                          IP: 41.77.104.0/21
                          IP: 41.86.96.0/19
                          IP: 41.132.0.0/14
                          IP: 196.1.8.0 -- 196.1.14.255
                          IP: 196.1.16.0 -- 196.1.25.255
                          IP: 196.1.32.0 -- 196.1.51.255
                          IP: 196.1.74.0 -- 196.1.86.255
                          IP: 196.1.103.0/24
                          IP: 196.2.16.0 -- 196.2.63.255
                          IP: 196.2.128.0/19
                          IP: 196.4.160.0 -- 196.4.162.255
                          IP: 196.6.240.0/23
                          IP: 196.12.16.0/20
                          IP: 196.14.0.0/16
                          IP: 196.22.160.0/19
                          IP: 196.23.0.0/16
                          IP: 196.26.0.0/16
                          IP: 196.28.8.0/24
                          IP: 196.28.16.0 -- 196.28.47.255
                          IP: 196.28.64.0 -- 196.28.223.255
                          IP: 196.33.0.0 -- 196.39.255.255
                          IP: 196.41.128.0/19
                          IP: 196.44.192.0/20
                          IP: 196.45.96.0/20
                          IP: 196.208.0.0/13
                          IP: 197.80.0.0 -- 197.103.255.255
                          IP: 2001:4308::/32
                          IP: 2c0f:fc00::/27
                          IP: 2c0f:ff40::/26

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9719 (0x25f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:52:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:95:dd:8c:98:03:37:b7:03:51:38:98:05:
                    bf:17:bf:32:e9:9b:7c:14:f5:ac:07:e7:51:6e:92:
                    f8:e6:2d:99:3b:87:ea:4b:db:27:f0:14:8c:e9:d7:
                    87:f3:3c:b1:ba:22:14:c2:07:c2:3d:cb:37:88:22:
                    9f:2e:3a:78:1b:65:c5:93:3f:9e:f3:73:cc:b9:8e:
                    db:4b:ca:f2:ea:6a:ba:c7:b6:ab:92:bc:b6:cd:c0:
                    dd:2d:f3:3a:aa:93:58:79:ba:12:8c:cb:41:41:a0:
                    1a:24:2e:84:a3:59:63:1c:ce:60:21:21:51:73:65:
                    a3:8b:a4:fb:21:1a:2b:bf:9c:52:49:63:9b:f2:a8:
                    34:06:0a:37:f2:ab:4c:b2:12:de:b2:97:c2:a1:c9:
                    32:ec:49:61:ff:f4:2a:5a:b7:ca:29:e7:80:ac:53:
                    cf:6c:4f:f3:dc:73:87:9e:23:21:7d:9e:36:72:9e:
                    47:2f:92:2e:e4:ad:3e:73:8d:30:b3:95:fc:ee:30:
                    53:a8:6e:2e:44:70:b9:bc:b8:6b:5a:27:d0:de:f0:
                    31:33:f4:05:30:12:be:c6:20:17:03:e1:4b:10:58:
                    e0:79:75:d3:c0:7b:d0:20:1a:4a:98:94:04:22:82:
                    6e:1a:c4:c0:dc:74:43:b1:b7:11:05:92:88:7c:f2:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3741
                  6089
                  6351
                  10393
                  10474
                  12258
                  20011
                  27598

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.104.0/21
                  41.86.96.0/19
                  41.132.0.0/14
                  196.1.8.0-196.1.14.255
                  196.1.16.0-196.1.25.255
                  196.1.32.0-196.1.51.255
                  196.1.74.0-196.1.86.255
                  196.1.103.0/24
                  196.2.16.0-196.2.63.255
                  196.2.128.0/19
                  196.4.160.0-196.4.162.255
                  196.6.240.0/23
                  196.12.16.0/20
                  196.14.0.0/16
                  196.22.160.0/19
                  196.23.0.0/16
                  196.26.0.0/16
                  196.28.8.0/24
                  196.28.16.0-196.28.47.255
                  196.28.64.0-196.28.223.255
                  196.33.0.0-196.39.255.255
                  196.41.128.0/19
                  196.44.192.0/20
                  196.45.96.0/20
                  196.208.0.0/13
                  197.80.0.0-197.103.255.255
                IPv6:
                  2001:4308::/32
                  2c0f:fc00::/27
                  2c0f:ff40::/26

    Signature Algorithm: sha256WithRSAEncryption
         78:33:90:1b:52:e7:ad:cc:32:6c:53:a4:52:49:b4:6a:83:db:
         27:94:1a:15:60:bc:07:ee:78:8d:11:fd:62:05:ba:3a:15:26:
         5d:0e:bd:56:07:a6:81:b8:87:91:3f:d8:63:8f:03:39:f2:38:
         f3:4c:1e:1e:32:11:51:c3:01:20:9b:53:b0:a7:17:31:ae:ed:
         56:fb:24:81:dc:ef:e3:44:dd:d2:2b:3e:6b:a4:a7:01:00:81:
         8d:65:20:d7:55:2c:00:dd:53:6a:f3:56:b8:b6:36:ff:12:9e:
         3b:ec:26:43:23:f3:29:85:f3:91:85:93:20:51:8d:db:b2:13:
         c1:65:88:3b:72:a0:49:fd:a4:0f:e2:9d:e6:be:62:e5:96:60:
         d8:e1:f2:56:2e:3f:15:01:d1:b0:71:23:7a:bf:30:fa:cf:66:
         b3:23:23:c5:48:5b:a8:cc:99:fc:5e:55:2f:0b:16:54:32:50:
         d9:6d:a9:97:53:73:11:2c:ac:b1:fb:a2:37:8a:09:10:61:00:
         50:21:46:9b:7f:94:9b:45:bd:57:3a:bc:92:4e:2f:3f:85:50:
         8f:6e:7f:2e:16:cb:14:93:a2:99:68:9b:d5:39:94:8c:fe:89:
         cb:bd:62:ee:b7:44:58:2a:7b:cb:bb:f4:35:c0:a0:4a:e7:ee:
         d1:74:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:06 2024 by rpki-client on console-ams.rpki-client.org