Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.cer (raw, json)
Hash identifier:          wGaXpwuXkUUP99LWL0QWoM591k+sPhNuFzjt7Tm+SGk=
Subject key identifier:   41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23A6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:44:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36958
                          IP: 41.86.32.0/19
                          IP: 41.191.120.0/22
                          IP: 41.222.204.0/22
                          IP: 41.223.216.0/22
                          IP: 197.157.96.0/19
                          IP: 2c0f:fef0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9126 (0x23a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:44:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:44:48:e2:3f:5e:5f:c4:bc:80:80:6b:84:
                    7f:d6:b2:fe:ce:f5:5a:2a:09:02:59:77:50:8b:0d:
                    3d:f5:df:7e:5f:51:0e:8e:18:29:4c:6d:fb:58:16:
                    c1:28:35:95:c1:e0:44:db:dd:91:e7:e3:8c:90:1b:
                    ad:b6:1a:58:b1:a2:86:d3:0e:e6:0f:62:5b:91:52:
                    a2:e2:2f:a0:7f:e6:86:fe:33:49:73:03:e5:2f:29:
                    6b:18:02:2e:9a:62:f0:d0:11:87:8f:94:75:18:ae:
                    0b:51:2a:2d:04:de:a6:36:c3:43:1b:a2:77:bd:5e:
                    fd:01:bf:90:1d:eb:48:64:f0:0e:e9:a5:7d:33:3b:
                    b0:3a:fc:1b:98:75:60:09:ee:33:43:e2:ed:71:de:
                    a8:34:ca:2e:78:c9:03:92:d0:12:75:72:fe:b5:47:
                    f4:50:79:f4:01:8f:e0:45:27:42:38:26:39:a7:9f:
                    e2:64:27:58:f0:0f:1d:d2:3e:c4:43:5b:b6:4c:12:
                    d1:c1:17:29:f8:c9:a5:7a:87:8e:01:e1:8b:26:88:
                    1b:1f:bf:fb:73:c1:3d:19:41:b4:00:0a:06:0b:64:
                    be:3f:52:43:36:bd:fa:2d:6c:0b:8e:cb:fc:1b:a2:
                    bb:b8:4a:86:06:d7:05:6f:6e:e7:a5:c8:ff:2c:c2:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36958

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.86.32.0/19
                  41.191.120.0/22
                  41.222.204.0/22
                  41.223.216.0/22
                  197.157.96.0/19
                IPv6:
                  2c0f:fef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:c5:da:26:e5:8d:96:bd:b5:fe:f4:2e:2d:e5:ea:e6:73:
         6e:62:80:4b:e5:5d:93:44:7b:73:3f:26:55:cd:76:3c:31:c2:
         c4:70:96:14:85:fc:82:b5:08:3f:bb:ee:a3:f5:a6:d9:0c:bb:
         29:ce:07:c2:03:f5:ca:ee:a0:8a:5d:91:73:09:f7:ab:a4:ee:
         e3:3b:9c:db:44:57:a4:c1:ad:8f:d9:23:d4:e8:8c:e1:e8:51:
         09:ea:2b:8d:85:b5:a2:ed:18:23:23:7e:b9:f8:38:ac:0a:2d:
         45:1b:a3:36:ab:d6:de:ab:aa:7d:9c:a5:f1:ad:23:ed:07:34:
         61:af:03:72:5a:49:a7:66:30:a5:51:72:d2:22:65:35:99:02:
         23:4f:3b:76:99:04:95:21:6a:bc:3d:e0:70:b4:44:e2:6e:6d:
         2a:d9:b8:49:96:b5:53:18:e0:45:15:12:51:8e:c4:12:87:5b:
         2e:ce:bc:25:65:6f:28:04:17:31:0f:34:0d:8a:11:53:63:bb:
         ad:bf:0d:1c:33:16:23:f4:ca:54:cc:4c:80:3b:c9:fd:4d:74:
         49:f1:54:be:06:3c:5b:4e:0f:fd:e3:38:45:c1:69:57:4e:90:
         d7:33:cc:94:75:9a:28:4b:d8:9d:40:d5:ee:81:48:06:d4:c1:
         db:da:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:23 2024 by rpki-client on console-fra.rpki-client.org