Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer (raw, json)
Hash identifier:          vNgAc+N0DKHulxFJ89Xa5ja4Mib/R954S13JM02fLIk=
Subject key identifier:   2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25DB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:48:08 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37228
                          AS: 327755
                          IP: 105.178.0.0/17
                          IP: 105.179.0.0/19
                          IP: 2c0f:3880::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9691 (0x25db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:48:08 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:05:3c:52:d7:af:c0:38:1b:0f:82:80:16:
                    da:ee:11:65:4d:b3:d7:0f:04:27:41:6c:d4:65:d7:
                    4a:43:fe:25:74:90:f0:c0:2b:27:99:3c:e4:35:65:
                    ab:b3:8d:c1:39:fe:1f:6c:49:72:eb:2b:0e:ce:b5:
                    0f:ef:bd:0a:2c:4b:73:97:09:4e:36:bc:c8:8d:74:
                    47:05:76:73:a5:3d:a1:20:8a:78:1e:52:09:1b:02:
                    93:32:4a:80:c9:60:ab:59:45:36:18:29:a5:6a:a4:
                    fa:9d:08:0f:12:ba:30:7f:b7:0a:b9:bb:25:fc:2a:
                    f6:ec:fa:14:7e:60:29:ae:1e:6e:d1:90:05:13:98:
                    55:a0:30:bb:c3:dc:5c:6b:2c:46:13:1f:2b:c0:e4:
                    39:b5:47:0a:f9:59:53:c1:aa:cc:15:d7:ac:2a:11:
                    92:b4:a7:51:b9:2f:3f:0f:66:c1:9f:01:ea:b4:ef:
                    46:22:fd:bc:40:9f:92:3d:a5:2b:02:e1:6a:28:a9:
                    3f:ec:4b:10:72:f9:03:99:36:4e:5a:ed:e9:9c:d0:
                    93:12:b8:fa:72:e7:2e:b0:1f:4e:35:d4:6c:72:1b:
                    b1:5e:c0:2b:5d:6f:9b:6f:6b:68:0f:2a:84:23:d9:
                    b0:68:f6:15:fc:50:a3:1c:7b:0d:d9:e7:a6:ea:85:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37228
                  327755

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.178.0.0/17
                  105.179.0.0/19
                IPv6:
                  2c0f:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:41:99:47:f7:47:2d:39:5e:a0:76:1c:33:bb:d7:39:3a:
         6c:65:6d:98:90:48:31:83:6b:66:0e:32:b4:ce:c9:89:de:74:
         12:40:f8:a1:4a:4c:9f:5d:e3:f0:82:4d:f8:fb:6b:ab:41:23:
         67:12:00:fc:d8:95:b6:9b:24:35:a9:a6:f7:a6:f8:59:79:4f:
         b0:1d:60:ae:b7:e1:dd:23:cc:4f:4c:b5:6d:41:06:89:84:e6:
         35:5a:ab:bc:ce:6a:50:25:24:95:40:a4:5a:b6:6a:be:31:96:
         8f:c2:e5:28:2d:2e:21:e1:b4:3b:13:bc:dd:e4:3a:a0:df:df:
         12:56:ca:01:b6:03:c9:c6:25:c7:68:46:49:13:15:71:45:2a:
         27:15:b1:ae:1a:f8:21:fc:70:ae:11:04:82:19:c3:fa:29:a0:
         18:8a:33:43:d6:7c:de:88:6a:5b:ca:06:7c:5f:1d:55:6c:8c:
         c7:87:8d:ca:76:af:93:7e:89:5f:27:4f:8c:34:45:4e:52:ec:
         e3:6a:57:ad:94:8e:f7:5a:9a:a7:09:0e:e2:6a:08:3a:f9:bd:
         c2:18:14:25:88:55:f9:5c:2f:4b:22:34:b9:5a:9d:08:51:9b:
         09:e7:36:ff:83:0e:a9:20:9a:3a:3f:38:34:79:52:e1:b3:b7:
         c4:35:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:26 2024 by rpki-client on console-ams.rpki-client.org