Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer
File:                     R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer (raw, json)
Hash identifier:          DyxS5P1R+Mm/vMeu5SPBrBNfM6AWK4xQPQoZ3wjVPP8=
Subject key identifier:   47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3030
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:07:15 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328739
                          IP: 154.115.160.0/19
                          IP: 2001:43f8:1000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12336 (0x3030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:07:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36772B4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:15:f0:e5:40:ba:d6:57:3f:8c:46:b0:4e:
                    01:f8:f1:32:7a:6b:dd:c3:8b:9f:75:88:17:12:93:
                    ab:b2:c9:74:be:bf:51:e0:6e:7b:ee:ac:e6:fe:95:
                    27:42:bb:32:0f:6c:45:a6:1c:58:c5:9c:65:6a:8e:
                    e2:a0:00:5a:b5:a2:c7:1f:20:89:5a:19:81:0d:d5:
                    44:8d:ee:19:c3:ee:67:77:d9:d6:87:a2:ba:ac:4a:
                    5b:3b:05:23:aa:38:1c:e5:58:61:81:64:2f:40:37:
                    42:77:bd:ab:e7:3e:9e:61:3f:db:fc:04:ca:06:c1:
                    d3:22:e3:c9:1c:49:2c:d4:1a:73:62:31:95:54:ee:
                    8d:54:36:2c:b5:b4:9f:b9:10:86:f8:19:55:0a:5e:
                    ec:35:e0:26:74:42:be:a9:6a:b8:98:a4:35:ac:9a:
                    2b:27:e9:67:77:58:87:af:9e:fb:44:88:4c:08:15:
                    68:24:cf:67:62:9c:39:de:cc:a4:0b:43:4f:d0:35:
                    4e:7e:64:aa:9f:2c:b9:b8:21:37:39:38:08:aa:c4:
                    8d:89:eb:d1:f3:d2:c4:e2:96:a0:9c:17:0c:55:8c:
                    d2:3a:fb:f2:c8:a1:7d:85:0e:10:18:5b:ea:db:27:
                    44:67:d0:0b:a1:da:c2:60:d7:fd:50:53:6e:8f:f0:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328739

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.115.160.0/19
                IPv6:
                  2001:43f8:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:71:70:f5:07:2c:3e:74:b9:67:b8:fa:2a:2e:07:27:ee:
         a2:3f:bb:23:94:8a:32:66:f6:2b:b9:ea:15:8a:21:57:6f:de:
         ca:69:bd:45:46:d9:66:c5:d1:69:10:7e:f9:17:c2:c0:00:59:
         86:f9:db:12:39:0f:3e:2a:9d:68:83:fc:c3:d5:98:b8:f2:fb:
         f9:6e:56:5a:3c:c9:e3:9b:a4:e0:30:73:1e:a4:45:00:9c:0c:
         f9:7c:fa:7f:3c:92:c5:00:15:93:05:cb:bb:75:a1:34:9e:46:
         5a:01:30:2b:a9:67:05:bf:68:de:00:32:15:4b:e1:fd:a1:50:
         8d:df:10:d8:b1:65:45:88:3d:65:f4:fb:05:3a:ec:33:ca:85:
         73:31:3b:30:a0:ef:c6:8a:00:e1:b6:29:19:2c:05:01:bc:fa:
         9a:90:ea:6e:80:c1:af:64:e0:44:49:cd:d3:88:76:a5:69:ae:
         f8:c4:e2:f9:41:bf:53:eb:4f:e2:99:f2:cb:bc:30:67:f8:6f:
         64:ed:4d:66:d9:95:56:98:a3:5d:82:7b:6c:ac:aa:43:a9:65:
         bf:aa:86:43:3f:bc:93:3f:b3:50:27:33:9b:14:3d:17:cc:d5:
         82:01:cf:eb:5b:1f:8a:6b:c8:fd:98:b4:ce:cc:a5:9b:51:27:
         96:84:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:09 2025 by rpki-client