Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
File:                     T0jn6jDJibFdNjk3djVToH4WzY4.cer (raw, json)
Hash identifier:          j5073KD0oOQLyCtBpCtwh4Z3ugXtCdANuP+YWn8tnaI=
Subject key identifier:   4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       29B2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 28 Mar 2024 07:59:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328866
                          IP: 41.92.128.0/21
                          IP: 41.92.152.0/21
                          IP: 41.92.180.0 -- 41.92.187.255
                          IP: 41.92.196.0 -- 41.92.203.255
                          IP: 41.92.208.0 -- 41.92.219.255
                          IP: 41.92.224.0/24
                          IP: 41.92.248.0/21
                          IP: 41.190.224.0/22
                          IP: 41.217.148.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10674 (0x29b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 28 07:59:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:7b:93:90:83:2e:f8:a7:2c:df:09:c4:f3:
                    ba:13:2a:ea:a6:d5:02:03:a1:5b:30:52:23:23:4b:
                    51:d1:4f:4b:2f:f1:72:59:32:2c:f6:b2:43:cb:98:
                    2c:de:e6:dc:21:7a:ee:69:50:d7:fa:59:ea:52:03:
                    f2:fa:70:7f:93:23:a7:ec:93:da:3d:a2:d0:67:a3:
                    f6:ae:7b:fe:3c:28:cf:69:fd:70:8a:2d:d3:9a:7b:
                    ff:be:70:b9:72:a5:3f:2b:75:d1:2a:2f:16:e7:3c:
                    63:0f:14:3c:90:c0:ae:bd:28:e5:84:f3:82:7a:5b:
                    77:f3:db:91:48:89:dc:65:c9:26:ba:61:6d:08:b0:
                    8e:18:44:cf:84:b9:95:ae:8b:83:a8:2f:8a:1e:5d:
                    51:24:55:a2:7f:ca:e7:8f:cd:95:18:3e:15:c2:85:
                    7e:c3:6c:aa:24:ed:ce:d5:56:df:c7:41:4a:78:04:
                    69:e4:a6:33:86:8b:2e:76:89:46:3f:ae:6a:ce:4a:
                    41:14:aa:7b:fe:5c:9f:33:d7:67:6e:d0:7a:bf:25:
                    c9:d4:09:c6:b0:04:16:cc:b0:3a:8b:54:71:09:d9:
                    76:d5:d1:a4:55:eb:ef:cc:c1:c4:74:05:a3:99:18:
                    ba:92:ab:7f:4f:35:fc:8a:21:4e:a7:d8:71:bc:10:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328866

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.92.128.0/21
                  41.92.152.0/21
                  41.92.180.0-41.92.187.255
                  41.92.196.0-41.92.203.255
                  41.92.208.0-41.92.219.255
                  41.92.224.0/24
                  41.92.248.0/21
                  41.190.224.0/22
                  41.217.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:66:3b:f2:40:d3:a6:0e:f9:99:21:d0:82:37:47:d9:09:
         a8:c4:95:ed:1a:a1:7d:6b:21:ba:0e:29:81:c8:1b:74:1e:b3:
         a7:f6:95:0d:43:f4:3e:75:f2:55:78:60:5c:0c:05:fa:f2:64:
         c1:ab:91:01:1c:16:a5:e8:da:77:7c:f1:8d:5a:2d:3f:fe:47:
         de:ac:e8:86:d5:76:97:08:19:85:e8:79:b9:27:b7:a3:2f:29:
         56:7f:f0:c3:81:3b:d4:89:5d:91:d6:1b:7a:f1:4e:60:94:0a:
         f3:a7:32:bc:3c:f6:32:8f:56:74:50:66:d0:e7:12:5a:88:f9:
         2e:2f:05:0d:69:8c:86:b1:ad:a9:05:11:bc:d6:99:04:d1:fd:
         bc:96:66:5e:2b:22:94:e9:d9:46:c9:72:71:39:20:c1:32:09:
         bf:d0:65:3f:5d:59:63:cb:cf:05:aa:cc:7c:ef:68:e7:d0:c0:
         7d:ac:b2:27:97:84:ef:0d:f9:2c:bd:4c:c2:29:bb:ae:40:74:
         f1:7d:52:0a:33:b0:bd:23:34:d8:65:b2:c4:b4:c2:11:e0:2f:
         21:b7:9b:c7:95:f7:58:0a:91:55:f4:21:d1:a9:32:eb:d4:05:
         4c:14:c4:5c:23:99:68:51:c2:a5:35:9f:b0:b7:74:67:e6:ad:
         63:ba:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org