Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.cer (raw, json)
Hash identifier:          NnsHsPR8uA/+0FSSj4Hlq66yw9S02Y904tcmMf072nQ=
Subject key identifier:   5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26F9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:30:39 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37613
                          IP: 41.242.112.0/22
                          IP: 2c0f:f170::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9977 (0x26f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:30:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:cf:87:f2:47:21:85:f6:87:0f:d0:dd:35:
                    5e:e0:52:da:77:bc:64:11:11:d0:9d:55:b0:e1:ca:
                    74:e9:07:be:74:60:47:aa:6f:65:98:28:a6:d2:27:
                    2a:c9:49:2b:c1:b8:d6:38:d4:ed:a6:f9:1b:e0:47:
                    4a:59:42:5d:1e:8d:b6:10:6e:ce:92:eb:f1:e5:de:
                    e0:dc:4b:41:fa:91:ea:45:e0:70:4e:51:07:4f:6a:
                    e4:e8:ac:95:81:e9:23:bc:c9:5c:30:b3:7f:79:50:
                    84:02:d9:5c:ae:12:82:09:8d:bb:47:1e:ae:a4:16:
                    52:9f:c9:ba:f9:a2:f1:a0:4d:06:8f:31:a0:3c:ac:
                    f3:44:92:87:62:1c:0d:89:5f:2e:0f:50:b3:be:fd:
                    ce:81:5b:a7:e9:a1:de:79:a6:63:f2:31:74:88:d4:
                    0e:31:e4:46:c7:17:17:50:2e:08:91:4b:18:a6:92:
                    5b:c0:e7:3d:f5:7e:24:50:b4:d7:e6:b7:93:7e:49:
                    dd:1f:d7:d7:40:01:13:88:c4:59:1a:4f:e3:40:55:
                    5e:df:7f:36:8b:ca:66:21:60:62:0e:78:6c:e2:e5:
                    ef:dd:e4:82:58:8d:e7:7e:ae:89:56:84:a4:83:43:
                    c7:7f:97:d6:ca:bd:97:31:2d:45:9b:f1:b6:5c:2f:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37613

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.112.0/22
                IPv6:
                  2c0f:f170::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:59:e8:10:9e:34:e5:c5:6e:da:70:de:6c:63:eb:21:ec:
         b0:56:c8:3f:1c:3e:cc:e2:61:a2:0e:32:ee:fc:27:e3:29:cf:
         2c:39:2b:4f:75:c8:57:d2:ce:7d:c3:dd:d2:f0:fc:ce:e3:b8:
         95:36:db:39:53:68:a6:3a:0b:0f:36:72:6c:a3:80:c2:9d:a7:
         a8:e4:71:1d:e5:07:1e:35:66:0d:3a:cf:b5:1c:b7:2f:36:83:
         d8:2e:95:5c:b3:71:a3:25:0e:0a:01:24:d8:04:15:b4:f1:0e:
         51:4a:98:d3:b7:1e:bb:7f:6d:1c:a3:ce:46:d1:e7:eb:2d:28:
         30:36:82:75:7e:13:c8:7c:38:f1:c0:e6:d6:1e:ee:82:2e:40:
         da:b8:d9:88:42:77:2c:c6:a4:d8:8c:3f:75:f7:2c:48:8a:67:
         b8:55:53:7f:1b:3c:2b:9a:ac:a6:ee:c6:5a:a3:ed:a4:71:05:
         a1:a4:24:38:79:ea:0c:12:b3:17:cb:02:51:28:53:01:25:38:
         d0:3e:8d:5f:94:64:33:c4:ee:2b:74:49:38:0e:fe:77:2b:30:
         43:1a:97:d0:84:be:1f:7d:b1:ac:d0:e7:6f:8c:d2:48:cb:3f:
         86:34:ef:08:5d:3e:46:82:e3:c0:a8:fc:3d:02:36:79:f6:41:
         2f:df:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----