Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer (raw, json)
Hash identifier:          IB2oVSUUWqI9sSZOClYpLjD4EeqdPrR4Vb9VU7EAZTs=
Subject key identifier:   36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       27AB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:57:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37212
                          IP: 196.216.180.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10155 (0x27ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:57:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:5f:95:ef:86:16:1b:ce:3d:8f:eb:97:4c:
                    20:b6:02:93:c9:95:f9:e1:c7:8c:6c:20:58:5c:41:
                    1c:a3:1b:f1:3d:95:19:f3:9f:46:8d:c8:de:f9:7f:
                    cd:18:77:ef:84:15:c1:39:71:12:ec:2f:21:59:67:
                    a9:8b:50:fd:9e:10:eb:72:6a:41:ac:d6:36:88:1b:
                    15:8c:e0:10:80:73:00:5e:c7:cb:65:a2:74:ca:1e:
                    8a:87:c2:a7:1e:33:38:e5:3b:c3:67:3c:ae:99:b7:
                    c6:59:a1:de:e0:27:6d:e4:49:e9:10:e2:68:0b:5c:
                    6c:1b:28:0a:d4:38:40:ed:27:2c:f2:b7:28:d9:bf:
                    bd:24:3d:d3:40:81:66:a8:70:71:1a:c8:ba:c0:a1:
                    e9:a0:37:dc:a5:4e:b0:ce:44:1b:80:cf:35:fd:2b:
                    ef:41:95:51:3a:bb:c3:d5:7b:6d:1f:35:64:c6:e3:
                    2f:f4:e4:e6:99:e9:b9:c4:f3:30:82:7c:d3:92:77:
                    ba:cf:7d:7b:a3:e3:83:1e:47:5c:7e:99:1b:b1:59:
                    a6:4f:10:27:a1:34:59:9f:f0:89:0c:fb:de:b5:01:
                    b3:eb:85:af:50:4d:24:38:af:be:5c:8f:3c:84:33:
                    53:57:d8:9f:40:4c:a0:60:c0:eb:2b:b8:7a:15:05:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37212

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:93:ba:39:74:df:c3:74:80:55:5b:ed:82:e8:af:5a:55:
         b3:87:7d:a4:96:b2:5d:15:70:4d:b5:6e:cd:e1:5e:91:be:ee:
         60:c0:b3:f8:c3:cd:db:57:5f:ff:71:0e:ab:f3:ef:06:bc:97:
         22:c0:1c:23:a8:ac:e3:0a:ab:5d:92:44:c3:4d:65:b7:13:3d:
         34:50:6a:9c:83:ec:d5:53:4b:42:24:92:17:99:05:86:e2:bb:
         bb:7f:3f:a4:ed:2f:c8:e5:5b:95:de:45:53:00:fa:85:7e:02:
         fc:1f:2f:af:8d:cc:66:08:b8:8e:33:46:07:14:d0:f5:d4:88:
         7b:49:5c:74:66:a9:70:f9:46:11:21:ec:61:21:15:36:f8:7e:
         3b:1b:3f:5d:ba:34:fa:49:bf:1e:c8:d3:eb:6c:01:3f:88:58:
         09:38:19:19:a8:7f:81:6d:2e:55:01:f9:4b:48:c0:9c:c1:b7:
         d5:84:fa:cd:4f:84:9f:61:28:de:2a:68:60:40:a5:c7:28:20:
         e2:ed:fa:fd:f7:16:53:cb:3d:9b:4c:80:74:e1:df:ad:f1:11:
         d4:d1:d0:30:4a:c0:72:18:c7:95:ed:6b:d9:fd:e9:63:9a:38:
         82:a6:de:50:0d:e6:79:5f:c7:df:49:e2:6b:ac:e3:ec:f0:9d:
         d4:6d:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org