Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.cer (raw, json)
Hash identifier:          0P1YHi4bwZy5u56zstFmLzWrxbvbX/F+P4Sbv4p7aTo=
Subject key identifier:   3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24D3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:57:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37523
                          IP: 154.65.64.0/20
                          IP: 196.43.213.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9427 (0x24d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:57:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:0a:8b:72:28:fb:1e:3a:63:54:ec:d5:50:
                    d6:cd:08:d1:7c:a7:17:2a:f6:74:60:6f:1b:9c:e2:
                    d7:03:ce:14:f1:63:fd:8a:c4:00:dc:8a:25:3c:7b:
                    c3:4d:5c:79:f9:e6:f4:e7:be:69:a8:cf:ba:c1:3e:
                    48:8c:3d:5f:cd:bc:ce:c9:16:bb:fd:f7:11:91:b1:
                    fe:6d:5c:29:12:29:84:54:ec:f8:3e:0d:4b:af:97:
                    75:ba:12:85:4a:e8:d9:f4:26:d0:43:c2:78:68:7a:
                    71:fd:d6:70:62:8b:04:d8:16:72:ec:0a:91:b0:85:
                    92:25:a9:1b:e9:50:0e:fa:39:39:5b:4f:c8:3c:9e:
                    a7:2f:51:1c:89:51:54:57:8b:3d:9b:49:88:7d:86:
                    5f:8d:9b:56:70:a5:3d:24:06:7f:a4:cb:dd:65:c0:
                    e2:fc:4d:22:d6:9b:33:57:1e:99:c0:ab:8f:83:2e:
                    ad:6c:db:9c:53:a7:01:1a:7c:6a:2f:0e:08:da:87:
                    30:35:c2:77:a2:fb:fc:6c:43:f3:60:43:be:6d:92:
                    fb:24:d4:e0:46:a8:9f:85:1c:88:8b:db:47:7f:d4:
                    9d:76:5c:02:01:09:c7:23:22:80:8b:6a:98:63:23:
                    5c:09:1c:2c:63:e0:fd:4f:eb:3a:f5:4d:5c:da:79:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37523

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.65.64.0/20
                  196.43.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:2b:e5:a4:f9:5f:3c:90:0d:d0:fe:ee:fd:ef:da:04:09:
         a2:69:63:9c:41:73:ea:cf:a2:b7:b6:6d:e9:3c:97:2b:47:43:
         c3:40:a8:b7:d7:f7:41:08:af:0d:2d:a8:ac:1e:ed:ac:d9:bf:
         2f:93:dc:e2:47:61:91:bd:75:fa:c6:49:e0:71:1b:a1:46:e8:
         cc:7b:79:70:db:db:41:f9:fe:5c:48:9a:70:c5:1e:65:6e:db:
         65:2c:ce:c9:82:20:1f:f3:88:17:46:25:18:c5:f9:33:be:cc:
         36:ce:e4:8c:a0:d5:11:c9:73:55:a4:8e:98:3b:7a:3d:b7:d6:
         6f:07:08:4f:7b:5e:0c:e0:0b:a5:7b:f7:aa:5e:e9:ba:3e:c4:
         1d:f3:50:54:df:54:bc:d9:99:5e:37:d9:35:e8:52:56:d2:1f:
         81:5d:fa:23:b6:4f:cd:89:4c:4a:df:e1:65:cb:f4:3c:28:49:
         4a:fd:de:6d:64:71:dd:13:d8:93:2e:af:e0:dd:c6:64:f6:a5:
         22:67:3c:9e:3d:ad:cf:1d:e4:1a:ef:6d:9d:c9:de:43:ef:a2:
         64:eb:6f:7d:ec:c9:e3:71:2d:b5:18:43:d0:0a:83:5c:ed:4c:
         0b:4a:d3:4a:e9:6e:d7:5d:9f:86:b7:d8:13:2d:da:9d:1b:13:
         93:e8:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org