Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer (raw, json)
Hash identifier:          sDevPyaMwuoT5r6nYcMeQja33fALSYTkJenbl6uQsxQ=
Subject key identifier:   4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2583
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:35:50 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37139
                          IP: 41.79.244.0/22
                          IP: 196.50.128.0/18
                          IP: 2c0f:f3d0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9603 (0x2583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:35:50 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:38:8f:cd:32:c7:03:85:ae:84:15:ae:5b:
                    09:49:43:f5:e9:1f:d4:1a:b4:c1:7a:2e:88:14:4b:
                    52:cf:9d:aa:a8:a3:71:6c:2d:f6:af:50:a8:bc:03:
                    d9:7e:cd:77:42:d4:79:f4:a0:94:d2:cc:26:c0:50:
                    80:fa:ff:4a:ae:d4:1e:bb:d6:a0:93:8f:29:4d:f5:
                    5c:4c:d6:35:e3:2e:0d:95:27:9c:bb:b2:55:2e:bd:
                    dc:4f:10:c5:23:21:2a:1c:43:84:ac:03:28:68:2b:
                    c6:1d:ad:41:af:4a:c8:6f:24:73:66:02:3c:9e:86:
                    13:39:fc:a9:c9:00:92:f2:06:1a:7d:f2:5a:b3:7b:
                    f5:36:f4:fc:58:7e:b1:d1:66:64:14:c0:d4:78:f5:
                    39:f5:25:a1:ce:7f:ae:c2:d8:8f:56:5a:ec:43:8a:
                    a2:3f:75:88:8c:4d:b3:9f:b6:4e:0b:06:1a:2f:39:
                    23:98:22:98:50:40:43:c9:63:ae:f8:87:aa:4a:7b:
                    17:72:5f:c1:80:cd:17:d3:1d:6d:48:d0:0b:07:bd:
                    f0:a6:88:e7:74:6c:77:93:81:b8:bd:d0:4e:bc:a3:
                    5b:44:66:39:26:95:27:ba:fd:df:90:f2:fc:93:16:
                    a0:31:2b:74:da:e5:56:23:5a:ed:de:0a:00:0b:d0:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37139

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.244.0/22
                  196.50.128.0/18
                IPv6:
                  2c0f:f3d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:3d:a5:0a:e7:73:ec:dc:35:06:a4:99:17:36:86:12:0b:
         bb:a9:5a:e6:b6:fa:7f:a6:b6:f1:a4:df:9c:48:5e:ec:be:22:
         1d:a0:00:1f:4f:6c:4c:b8:fc:30:3b:27:54:29:79:20:7d:65:
         0d:16:46:69:1c:6f:8b:1c:42:4e:d8:79:12:44:22:25:a1:70:
         b4:89:15:63:2c:7b:9d:59:e6:ec:db:b2:a9:66:84:63:09:0c:
         66:94:c2:9e:ac:d2:ca:1c:e6:2f:9b:cc:c5:96:fa:69:0b:21:
         ea:39:2f:e7:d0:af:e7:b1:18:d4:1c:27:7c:0c:a9:d1:dc:46:
         6f:7a:45:a2:52:41:91:0b:c8:56:37:8e:a2:8b:64:c5:a8:48:
         c5:20:3c:29:24:01:08:67:f7:e4:3a:48:14:7f:7c:e9:7b:4b:
         3f:76:e3:42:dd:d4:b7:e2:3d:6f:18:02:7c:97:9c:d7:ba:c3:
         1c:0f:d6:20:ef:f6:54:b7:f5:e7:bf:73:35:87:e5:3c:b4:6a:
         91:fc:ac:e7:55:7a:2a:c3:e4:19:ef:06:07:cc:4a:0b:44:d2:
         ac:17:fd:63:63:29:31:c6:73:d0:a8:87:4d:94:dc:10:3b:6e:
         26:22:78:2e:92:fa:7a:60:dd:0f:0b:0b:22:63:0a:75:7c:91:
         38:b0:0a:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:42 2024 by rpki-client on console-fra.rpki-client.org