Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.cer (raw, json)
Hash identifier:          yI9FPMoLb1YFhSvJLe/9ha9B+Pe7cAchXSr4ubz6ku4=
Subject key identifier:   38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2364
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:25:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 22355
                          AS: 328410
                          IP: 41.85.0.0/17
                          IP: 41.206.192.0/19
                          IP: 196.1.56.0/21
                          IP: 2c0f:ffc8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9060 (0x2364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:25:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:a4:14:c3:75:ae:b5:09:c2:5d:cd:8d:9f:
                    b4:57:4d:1b:e9:6b:f4:b7:4c:dc:43:01:5f:7b:76:
                    de:2a:2f:ac:de:3a:70:10:c6:0d:24:97:a2:49:c8:
                    44:63:8b:eb:98:fd:6d:59:06:a2:4e:80:9a:dc:49:
                    b1:b4:78:e2:2d:26:fb:ec:ac:2e:f6:60:e7:7d:30:
                    a0:9b:17:3d:75:b2:13:d9:0d:b4:6b:8c:80:7e:42:
                    ff:cf:45:a5:a6:eb:42:29:7a:92:a6:9b:f0:2a:07:
                    72:1b:0a:ed:4b:bb:e6:11:80:68:9d:99:1d:14:3f:
                    79:b3:37:05:87:fa:81:8b:de:79:94:ef:93:c3:12:
                    2d:db:77:b6:ad:99:95:4c:a8:09:41:ef:a8:63:a7:
                    cd:78:ac:bf:00:71:14:27:89:a4:78:df:60:2a:50:
                    d1:70:04:e5:ff:b2:b2:24:5c:37:4e:b5:2d:e0:d7:
                    0f:31:5a:97:ea:99:3f:97:0a:03:a1:f0:c4:9d:28:
                    ed:f1:47:0c:79:14:7f:47:db:ea:05:2f:82:8c:0c:
                    0b:ef:81:9a:99:7c:6c:59:73:3a:a6:45:33:6b:d6:
                    12:ef:d1:7e:e1:e2:44:33:f7:5d:ed:5b:6d:65:70:
                    9d:95:e1:28:34:3c:bf:0c:dc:e4:66:76:20:90:4d:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22355
                  328410

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.0.0/17
                  41.206.192.0/19
                  196.1.56.0/21
                IPv6:
                  2c0f:ffc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:5b:eb:41:fe:3a:e8:aa:d8:1a:ec:80:9b:59:35:94:21:
         e4:4e:64:b6:8e:4c:f9:07:54:0f:32:d5:9a:6c:b3:d9:d8:e7:
         ce:ab:22:58:50:2a:f7:a9:b2:1a:b4:c1:de:d9:c2:f1:7a:96:
         a6:fb:8e:b6:35:ab:74:53:9a:69:64:90:af:5f:e2:76:c0:91:
         fa:11:52:64:cc:37:47:90:35:3b:e8:21:66:fa:b2:e6:ea:a1:
         61:cd:9e:36:5f:4f:14:76:62:e8:1a:9a:53:8b:6a:89:2d:28:
         96:4c:66:e8:85:1d:e2:e7:b9:b0:b8:2b:ff:ba:b1:88:26:84:
         bd:9c:17:9f:b6:35:52:b5:23:2e:b3:6f:15:e9:9c:f8:2a:55:
         37:43:8f:dc:7f:1a:c7:db:a6:30:8c:46:88:28:ff:04:2f:d8:
         67:f4:ef:f4:9a:df:b3:36:51:33:50:15:1b:51:5d:99:db:b5:
         43:7b:3e:3f:e4:5b:e7:27:e4:ec:0a:1d:c1:04:3a:2a:42:44:
         ed:97:02:5b:51:50:28:94:b0:81:e7:34:f4:41:92:11:9d:53:
         1d:c1:58:53:42:67:ce:51:16:22:43:cc:ec:6f:ca:7d:8c:8c:
         62:d5:92:d0:17:b9:6c:f3:2c:d4:6a:65:14:bd:df:b9:21:21:
         62:4b:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:21:28 2024 by rpki-client on console-fra.rpki-client.org