Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
File:                     LNMcPCUfXtoYP5OOf8s6Sh26id0.cer (raw, json)
Hash identifier:          kvJk1JSOYjvvRWJJcYcXO26Jv5oaGO1ppzx3KvaY94U=
Subject key identifier:   2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25FC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:53:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36933
                          IP: 41.206.0.0/19
                          IP: 41.220.64.0/20
                          IP: 102.88.0.0/13
                          IP: 197.210.0.0/16
                          IP: 2c0f:f5c0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9724 (0x25fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:53:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:15:2e:af:57:77:a8:cf:b7:13:e3:67:ef:
                    66:9b:93:c6:ba:15:e4:ab:97:59:ed:90:1c:78:03:
                    d8:4d:00:ae:95:ac:a2:84:ca:e2:68:72:f2:76:c8:
                    d8:b5:e6:fd:58:d5:f7:bc:a6:ce:80:f7:c3:1a:a7:
                    b9:dc:8f:68:45:47:77:54:c3:20:6f:a5:5d:44:f4:
                    92:49:19:81:7c:43:e5:1d:d1:32:ba:df:be:70:a2:
                    19:0b:2c:7e:9a:92:0c:54:24:84:6d:af:c0:e5:aa:
                    4b:47:92:d7:b7:d2:95:e3:0f:c9:0c:d3:69:00:b3:
                    84:46:63:4d:d6:bd:97:89:3d:71:ec:f7:49:95:4f:
                    ae:2d:05:c6:aa:c4:4a:43:3f:61:c8:f2:61:a0:86:
                    05:7c:26:a7:15:0c:8a:12:c0:4a:48:6e:b9:4e:bb:
                    89:e0:6b:f7:dd:33:29:e0:38:6a:f0:d6:d6:3c:fe:
                    29:cf:ad:c8:53:0f:e1:1d:44:23:8f:8b:f0:70:17:
                    7a:81:61:03:0d:de:c7:77:6e:e6:a7:fb:23:7b:dc:
                    f0:d0:01:ad:6a:ed:ca:79:ad:18:4e:25:e7:75:be:
                    c3:cd:02:75:cd:dc:91:10:6d:16:88:dd:80:c7:16:
                    cb:48:b9:21:c4:15:59:1d:09:b0:44:07:40:57:5a:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36933

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.206.0.0/19
                  41.220.64.0/20
                  102.88.0.0/13
                  197.210.0.0/16
                IPv6:
                  2c0f:f5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:1b:50:90:6e:c8:40:14:a8:2c:9d:2d:5e:ce:b0:88:a9:
         38:63:78:0a:ce:9b:36:31:0e:2d:f5:57:64:b4:bc:b3:18:c9:
         66:08:ce:18:c3:03:ed:b4:4d:fa:d6:92:66:0c:26:1a:34:db:
         89:e1:c6:f7:04:7c:de:b8:8a:82:eb:be:2f:66:fa:78:58:24:
         df:da:10:75:e6:5b:56:aa:e2:61:75:85:51:c7:a5:7a:5b:73:
         de:99:46:39:be:cd:d4:60:ae:95:74:f3:f3:fc:e0:02:45:95:
         e3:d3:18:08:1b:17:dc:32:2e:23:51:fa:bb:5c:df:94:94:db:
         cf:8f:7e:c4:21:8e:36:f5:ce:9c:f2:4f:d9:20:a3:ba:c0:e2:
         6d:a8:87:96:56:ea:07:5a:a0:27:49:d5:40:15:7c:94:34:c3:
         be:83:2f:4d:1b:49:bc:30:49:19:ba:d7:79:97:35:b3:d6:f8:
         47:4b:44:cd:45:5c:18:58:73:e3:fb:0e:65:8b:7b:95:ff:8d:
         bc:0a:08:82:71:9f:7d:11:c1:58:7c:aa:4f:8d:ff:4d:c2:b8:
         63:d0:e3:10:4b:7b:4c:2b:f2:88:2f:34:a3:7b:6c:8f:3d:e6:
         df:ac:7d:38:e6:0a:3b:9c:c1:67:16:90:a8:df:07:14:22:08:
         59:d0:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:23 2024 by rpki-client on console-fra.rpki-client.org