Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
File:                     WVlvdhVYQOfUJnWNllJakxzZR40.cer (raw, json)
Hash identifier:          hAGa2xYlzWoR4ez/15QCdLKCLZQ+0FnU5KnnBoan0B0=
Subject key identifier:   59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3033
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:07:49 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328092
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12339 (0x3033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:07:49 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36776F1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:5d:d4:8d:80:95:69:67:06:c2:21:ae:a4:
                    d5:48:2a:eb:f7:f3:cb:2c:32:05:d6:77:40:84:df:
                    99:91:1a:53:3c:05:61:34:de:c9:86:24:e9:5e:a7:
                    e7:22:b1:03:d6:47:8f:13:a0:ef:a3:66:f3:03:a2:
                    bd:50:1b:ce:3e:94:b6:bf:99:9d:88:32:0c:95:d4:
                    8d:e9:5c:2d:b6:04:f9:94:69:05:ef:c4:a2:51:cb:
                    97:e5:db:ee:bb:51:23:75:43:35:51:e5:5c:85:93:
                    17:32:09:50:e0:70:e9:da:6e:f8:78:b9:e8:61:8a:
                    1a:7f:21:38:2a:3e:bb:88:ca:f2:7c:de:9e:57:48:
                    36:0c:56:27:87:56:bf:5b:ee:e2:8d:b0:61:8b:24:
                    31:e5:28:73:c9:2e:db:27:e8:06:6f:37:1b:fa:0e:
                    d6:ad:51:c8:8d:cb:d0:f7:13:c4:c3:e0:df:99:26:
                    56:cd:09:7d:a8:16:1f:87:ad:5b:35:21:38:27:cb:
                    cf:f5:00:50:ac:44:1f:30:36:f4:a0:ea:8c:4e:cb:
                    e8:18:e3:2f:cb:7a:78:b0:aa:cf:18:74:96:83:c7:
                    69:89:fd:e3:cc:8e:9d:f7:04:a9:f9:f5:5d:02:18:
                    33:80:05:71:9f:f4:dc:a0:8f:d8:bf:0f:a2:81:cc:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328092

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:93:c5:6d:a9:33:5f:99:95:1e:36:83:e7:e7:ad:db:ef:
         9a:24:a7:d6:69:19:bb:e3:d3:63:eb:00:a9:e0:69:4d:e2:b6:
         07:b1:c8:07:26:c0:69:52:b6:b2:1e:f9:f3:63:11:85:7a:4e:
         fd:83:d4:87:5e:cb:91:c5:91:af:35:76:77:cc:71:6e:e0:57:
         8e:24:e9:7c:59:da:a2:e6:3b:4e:9f:ef:43:c0:31:89:4c:7d:
         e0:0b:e9:80:03:66:6b:16:cf:dd:40:bf:c8:bf:5a:0f:92:48:
         79:fc:00:44:31:11:05:96:0e:87:42:c1:d3:95:4f:71:16:6c:
         b1:d1:4b:11:f1:14:f1:0f:f4:af:84:29:d1:e6:f8:e2:52:34:
         a7:1a:90:a0:eb:ce:1e:65:8f:bb:de:73:bb:e4:cf:26:7a:9c:
         7a:6f:bd:bf:86:ff:4a:d8:fc:f4:24:1f:2b:9e:53:c8:38:41:
         03:29:87:3d:ad:3b:28:d5:73:5d:5e:33:38:ac:ac:4d:27:06:
         1f:51:da:ce:6e:be:a1:1f:45:99:14:19:b7:9b:67:77:87:6e:
         f0:fa:b4:ef:48:c2:00:e6:39:10:6a:d0:b5:72:1c:2e:f6:bb:
         cb:87:fe:68:51:55:48:74:51:97:0b:cf:e7:24:7e:e9:49:97:
         6a:65:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:27 2025 by rpki-client