Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
File:                     L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer (raw, json)
Hash identifier:          VQ9gTMj49HumSJY1o4YWM8/+RdfSDFVPW1VVQeXP1fA=
Subject key identifier:   2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3048
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:12:11 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 3741
                          AS: 6089
                          AS: 6351
                          AS: 10393
                          AS: 10474
                          AS: 12258
                          AS: 20011
                          AS: 27598
                          IP: 41.77.104.0/21
                          IP: 41.86.96.0/19
                          IP: 41.132.0.0/14
                          IP: 196.1.8.0 -- 196.1.14.255
                          IP: 196.1.16.0 -- 196.1.25.255
                          IP: 196.1.32.0 -- 196.1.51.255
                          IP: 196.1.74.0 -- 196.1.86.255
                          IP: 196.1.103.0/24
                          IP: 196.2.16.0 -- 196.2.63.255
                          IP: 196.2.128.0/19
                          IP: 196.4.160.0 -- 196.4.162.255
                          IP: 196.6.240.0/23
                          IP: 196.12.16.0/20
                          IP: 196.14.0.0/16
                          IP: 196.22.160.0/19
                          IP: 196.23.0.0/16
                          IP: 196.26.0.0/16
                          IP: 196.28.8.0/24
                          IP: 196.28.16.0 -- 196.28.47.255
                          IP: 196.28.64.0 -- 196.28.223.255
                          IP: 196.33.0.0 -- 196.39.255.255
                          IP: 196.41.128.0/19
                          IP: 196.44.192.0/20
                          IP: 196.45.96.0/20
                          IP: 196.208.0.0/13
                          IP: 197.80.0.0 -- 197.103.255.255
                          IP: 2001:4308::/32
                          IP: 2c0f:fc00::/27
                          IP: 2c0f:ff40::/26
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12360 (0x3048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:12:11 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367B216AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:95:dd:8c:98:03:37:b7:03:51:38:98:05:
                    bf:17:bf:32:e9:9b:7c:14:f5:ac:07:e7:51:6e:92:
                    f8:e6:2d:99:3b:87:ea:4b:db:27:f0:14:8c:e9:d7:
                    87:f3:3c:b1:ba:22:14:c2:07:c2:3d:cb:37:88:22:
                    9f:2e:3a:78:1b:65:c5:93:3f:9e:f3:73:cc:b9:8e:
                    db:4b:ca:f2:ea:6a:ba:c7:b6:ab:92:bc:b6:cd:c0:
                    dd:2d:f3:3a:aa:93:58:79:ba:12:8c:cb:41:41:a0:
                    1a:24:2e:84:a3:59:63:1c:ce:60:21:21:51:73:65:
                    a3:8b:a4:fb:21:1a:2b:bf:9c:52:49:63:9b:f2:a8:
                    34:06:0a:37:f2:ab:4c:b2:12:de:b2:97:c2:a1:c9:
                    32:ec:49:61:ff:f4:2a:5a:b7:ca:29:e7:80:ac:53:
                    cf:6c:4f:f3:dc:73:87:9e:23:21:7d:9e:36:72:9e:
                    47:2f:92:2e:e4:ad:3e:73:8d:30:b3:95:fc:ee:30:
                    53:a8:6e:2e:44:70:b9:bc:b8:6b:5a:27:d0:de:f0:
                    31:33:f4:05:30:12:be:c6:20:17:03:e1:4b:10:58:
                    e0:79:75:d3:c0:7b:d0:20:1a:4a:98:94:04:22:82:
                    6e:1a:c4:c0:dc:74:43:b1:b7:11:05:92:88:7c:f2:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3741
                  6089
                  6351
                  10393
                  10474
                  12258
                  20011
                  27598

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.104.0/21
                  41.86.96.0/19
                  41.132.0.0/14
                  196.1.8.0-196.1.14.255
                  196.1.16.0-196.1.25.255
                  196.1.32.0-196.1.51.255
                  196.1.74.0-196.1.86.255
                  196.1.103.0/24
                  196.2.16.0-196.2.63.255
                  196.2.128.0/19
                  196.4.160.0-196.4.162.255
                  196.6.240.0/23
                  196.12.16.0/20
                  196.14.0.0/16
                  196.22.160.0/19
                  196.23.0.0/16
                  196.26.0.0/16
                  196.28.8.0/24
                  196.28.16.0-196.28.47.255
                  196.28.64.0-196.28.223.255
                  196.33.0.0-196.39.255.255
                  196.41.128.0/19
                  196.44.192.0/20
                  196.45.96.0/20
                  196.208.0.0/13
                  197.80.0.0-197.103.255.255
                IPv6:
                  2001:4308::/32
                  2c0f:fc00::/27
                  2c0f:ff40::/26

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:65:98:57:a8:37:86:7f:30:7f:66:d2:44:be:23:e6:59:
         dc:bc:5d:5b:35:81:d5:42:db:17:68:80:ea:72:23:34:aa:69:
         b8:43:60:86:c5:ad:bc:1c:1e:4f:e5:eb:ec:8c:9a:61:3b:53:
         45:a1:3a:3a:0d:89:8b:8c:a0:e8:dc:51:18:43:4a:92:04:cb:
         c7:aa:64:32:20:2c:7b:11:49:e6:4c:35:ea:37:ff:71:93:8f:
         0b:8d:38:83:fa:4d:61:cf:d0:08:4a:f9:80:31:9c:55:80:65:
         93:c5:33:92:e3:1d:e1:5e:02:f3:7a:4a:f3:b1:53:36:b3:f5:
         b3:4e:85:06:82:df:88:6e:41:ef:ff:21:b8:f6:f2:f0:ee:2b:
         d5:78:00:9d:e7:83:2b:d3:78:9b:00:e6:50:e7:0a:1c:5e:60:
         95:93:af:26:16:5d:92:2c:71:58:c4:e3:10:47:48:e9:8b:fa:
         8e:95:b2:45:4c:fb:b4:e5:97:f3:e6:02:7b:f6:2a:e2:1e:10:
         71:88:f1:68:d0:bd:32:da:8b:50:a0:0f:92:5c:99:ce:bd:ed:
         57:74:2d:e1:98:2b:c1:46:d5:ea:e9:5d:c2:f1:7f:09:a4:7a:
         53:94:6a:2a:42:82:ae:8d:93:13:2f:43:df:5d:96:c9:6f:f9:
         99:2d:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:18 2025 by rpki-client