Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.cer (raw, json)
Hash identifier:          pIOYc3BhbpbAYXQNa5DbAXVOJ31lgN5R58D3Y5LdmmA=
Subject key identifier:   39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       29C7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 08 Apr 2024 07:01:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328605

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10695 (0x29c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr  8 07:01:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:14:4e:cd:75:08:ac:c1:dc:24:b7:84:93:
                    7e:2d:8d:f4:85:97:5f:0b:7f:19:7d:aa:b0:62:9d:
                    18:59:b3:e9:fc:bd:e7:aa:f6:4e:b9:31:92:f2:cc:
                    7c:b9:df:80:9d:29:f7:60:4f:18:db:9b:2d:92:2a:
                    f9:7c:88:f8:6a:75:29:02:8b:e0:c4:d5:3a:48:ed:
                    7c:cb:6d:7b:48:12:ab:10:f2:bb:89:b8:62:0f:d9:
                    58:51:4b:a6:57:5e:94:79:e3:de:14:87:f8:64:a1:
                    bf:77:a6:d7:54:38:fb:a7:7c:d5:2f:59:21:02:52:
                    4b:57:f7:c4:45:af:34:aa:64:3c:6d:0c:54:70:ab:
                    e3:9b:80:3e:6b:2e:57:eb:dd:ed:c0:1a:8f:bf:e0:
                    a1:f9:81:96:a8:30:2f:f2:81:d5:c3:4c:b1:8a:c0:
                    0b:44:19:e3:4e:15:f3:08:46:9e:6d:9f:ef:04:a8:
                    02:a8:92:a2:fa:5e:36:a7:8d:7b:7a:11:c1:d9:11:
                    85:e8:88:d3:62:80:d5:17:d1:5e:3f:05:f4:af:bf:
                    00:54:09:2d:32:de:d3:2b:8e:2c:f8:01:07:e6:49:
                    ae:65:3b:85:ca:28:2a:b0:a3:97:13:31:b0:0a:ee:
                    c3:8b:8c:db:c6:0a:f3:ce:0c:f4:5b:98:f0:f2:44:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328605

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:1a:04:19:af:48:cc:ee:cc:6d:b3:d0:cc:4c:11:ec:a9:
         19:63:f0:1f:fb:a5:65:f0:b4:5e:43:ba:af:b2:04:27:a1:9d:
         b1:9e:ec:6a:f7:23:d3:dc:80:04:98:e7:ae:6a:71:41:3e:ae:
         78:92:b7:c5:b7:a6:5c:aa:25:57:e0:67:84:0c:a4:b0:22:88:
         5b:dc:22:97:52:58:55:9b:98:f1:6d:9e:1c:3a:17:12:80:87:
         01:4f:02:5f:5d:cd:e0:98:31:a2:99:95:92:d3:53:4f:58:4e:
         35:17:37:69:d6:57:c2:ff:1a:6b:cc:a9:11:3a:a7:2f:ea:7a:
         05:c9:87:0d:58:67:17:12:31:af:27:6b:b4:52:39:29:73:27:
         64:c6:ce:6a:da:9a:ae:5c:84:61:40:a8:d6:a0:54:c0:ae:f8:
         70:4b:f4:ec:76:7e:8e:0b:2e:29:e4:98:f8:c9:a6:09:7d:6b:
         9d:06:f2:bc:96:a5:8c:85:34:79:9f:45:77:f4:48:6b:69:be:
         8d:c8:89:10:c1:75:79:82:12:e5:b7:5f:72:e3:8b:00:1e:22:
         a1:d5:ed:e6:e5:f9:15:1a:bc:7b:04:13:0e:4c:0e:a3:90:50:
         44:0c:34:d6:ab:ae:1f:f7:67:65:8e:56:98:d5:46:70:f6:e3:
         45:0e:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:50:27 2024 by rpki-client on console-fra.rpki-client.org