Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
File:                     ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer (raw, json)
Hash identifier:          uPxehe90YHdRKqwcPr1y6hjSuUvZMnZUvGD1J8XTGrw=
Subject key identifier:   64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25FD
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:53:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328563
                          IP: 196.2.8.0/21
                          IP: 2c0f:f908::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9725 (0x25fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:53:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367B560AF/serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:57:21:0e:90:45:43:ce:7f:c1:e4:b9:48:
                    83:07:fe:ad:5c:32:86:f2:80:f3:62:80:70:bb:4b:
                    67:d0:91:82:ec:5c:03:9c:78:9d:9d:dc:66:51:6a:
                    7a:20:0f:98:11:c3:03:23:9a:80:ec:77:b3:b2:62:
                    ae:6d:2b:6f:d0:45:b5:40:01:f1:80:85:0b:87:2e:
                    1d:21:e8:6b:2f:40:be:ba:49:6f:40:29:da:3b:cc:
                    77:77:cd:5f:7a:d3:4c:a8:1d:6a:05:f1:ed:29:64:
                    c6:53:ed:1d:47:04:08:41:4c:8c:7c:95:55:ab:57:
                    cc:a5:31:90:db:b0:ca:5c:99:89:fe:3c:d0:b5:02:
                    3e:c3:36:03:27:79:11:cc:6f:bd:4b:2c:78:3e:ee:
                    66:a1:69:f0:79:7b:fc:07:36:28:72:4a:3f:b3:41:
                    32:f3:10:92:6a:4b:00:a2:c7:f8:90:4e:86:53:3e:
                    38:fb:09:39:d4:5e:6c:37:a3:e8:11:94:1a:45:8d:
                    ec:1c:20:72:56:be:56:53:bc:59:93:fd:95:f3:15:
                    00:bd:cd:0a:ea:95:b3:e3:a8:78:7b:da:fd:2f:5b:
                    2b:b0:f5:5f:6b:6d:ad:3e:69:ef:97:cc:49:3b:fa:
                    23:54:13:e3:de:ad:65:96:fd:fc:8d:2e:21:68:0f:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328563

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.2.8.0/21
                IPv6:
                  2c0f:f908::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:76:51:b4:6b:c6:fe:cf:27:a1:fb:84:16:dc:b7:f2:a2:
         7f:0a:1f:7c:86:e5:f8:92:30:4c:0f:b2:52:17:2a:cb:97:1b:
         b5:58:e2:3d:70:c1:21:a8:7c:d5:8e:33:fe:40:31:fe:4a:f0:
         d2:db:ef:1a:b2:7e:59:2f:ab:2b:ea:f5:58:f3:76:47:a4:56:
         4b:83:46:c2:a2:21:81:cc:44:49:97:7c:ca:1f:9d:e7:ad:ad:
         52:03:ae:ff:c0:d5:1a:7b:63:42:77:d8:58:50:8a:53:0d:93:
         3e:14:7b:7f:10:e4:de:24:8f:32:3b:2a:7b:2f:0b:00:93:e4:
         f1:38:12:04:5f:2c:9e:94:b1:98:e0:09:d6:3e:e3:5b:7e:59:
         47:07:60:68:29:92:0f:17:10:0a:8f:b9:8e:e0:70:b0:4d:27:
         d6:6f:cf:0a:4b:39:4c:b7:ae:e3:67:fa:51:5f:f7:79:8c:c3:
         69:eb:6b:0c:4a:e3:62:d8:91:34:68:b9:59:48:f8:d3:99:57:
         6a:83:84:56:14:3c:57:aa:de:3a:e7:0f:02:1c:f4:b4:bf:36:
         07:4e:21:2e:95:3c:31:a6:94:4f:b4:4e:49:6c:11:1b:75:63:
         55:54:32:46:0e:52:01:54:54:11:05:43:39:e0:10:71:54:af:
         4e:a9:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:50:25 2024 by rpki-client on console-ams.rpki-client.org