Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.cer (raw, json)
Hash identifier:          DtmTYXcvm/hYljLazdZ6hI7p02SY2R6yeDBoq58FWgY=
Subject key identifier:   39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2FC7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:45:54 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328605
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12231 (0x2fc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:45:54 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F366AE59AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:14:4e:cd:75:08:ac:c1:dc:24:b7:84:93:
                    7e:2d:8d:f4:85:97:5f:0b:7f:19:7d:aa:b0:62:9d:
                    18:59:b3:e9:fc:bd:e7:aa:f6:4e:b9:31:92:f2:cc:
                    7c:b9:df:80:9d:29:f7:60:4f:18:db:9b:2d:92:2a:
                    f9:7c:88:f8:6a:75:29:02:8b:e0:c4:d5:3a:48:ed:
                    7c:cb:6d:7b:48:12:ab:10:f2:bb:89:b8:62:0f:d9:
                    58:51:4b:a6:57:5e:94:79:e3:de:14:87:f8:64:a1:
                    bf:77:a6:d7:54:38:fb:a7:7c:d5:2f:59:21:02:52:
                    4b:57:f7:c4:45:af:34:aa:64:3c:6d:0c:54:70:ab:
                    e3:9b:80:3e:6b:2e:57:eb:dd:ed:c0:1a:8f:bf:e0:
                    a1:f9:81:96:a8:30:2f:f2:81:d5:c3:4c:b1:8a:c0:
                    0b:44:19:e3:4e:15:f3:08:46:9e:6d:9f:ef:04:a8:
                    02:a8:92:a2:fa:5e:36:a7:8d:7b:7a:11:c1:d9:11:
                    85:e8:88:d3:62:80:d5:17:d1:5e:3f:05:f4:af:bf:
                    00:54:09:2d:32:de:d3:2b:8e:2c:f8:01:07:e6:49:
                    ae:65:3b:85:ca:28:2a:b0:a3:97:13:31:b0:0a:ee:
                    c3:8b:8c:db:c6:0a:f3:ce:0c:f4:5b:98:f0:f2:44:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328605

    Signature Algorithm: sha256WithRSAEncryption
         10:47:1a:96:ef:02:1f:55:fb:e4:37:44:90:66:53:e1:aa:8f:
         e1:a4:76:a2:4d:66:ab:2b:c8:c1:83:f2:0a:63:6a:6a:32:a0:
         60:88:96:d7:78:16:58:c2:9d:ba:c4:8e:cd:e2:95:61:1c:ea:
         d5:d0:d1:0d:0c:4a:fd:c4:3b:93:fa:82:13:df:4e:d4:f7:6c:
         eb:b9:29:cd:2c:19:f1:7c:5a:6c:4b:6c:b4:ab:ec:67:d0:f5:
         31:dd:45:75:9d:ce:a7:c0:91:cb:64:5b:65:83:b6:4e:32:5b:
         b0:16:1e:2c:e8:2c:0d:6d:41:c4:e6:33:c0:39:5c:46:7d:b1:
         36:7f:20:82:72:e2:33:c5:76:7d:45:d9:fd:73:80:28:cc:a5:
         56:d4:f4:dd:c4:17:ac:fe:51:2c:3f:9e:a4:c6:b3:4c:b2:1a:
         10:8d:09:c6:ef:5a:eb:5f:72:1f:8c:e4:1c:2e:8a:9c:e2:47:
         44:c8:ec:78:db:e9:91:af:a5:c4:75:ea:65:3e:90:33:58:ae:
         01:ab:fe:56:16:59:9b:e7:0e:8e:b1:e3:86:86:2a:02:ea:16:
         c7:65:e8:c1:07:14:58:64:15:d1:31:47:67:a3:b6:cd:6c:c9:
         53:15:66:1f:32:47:86:ae:5c:a5:2f:1c:6a:06:20:04:72:59:
         52:ee:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client