Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.cer (raw, json)
Hash identifier:          6KNQ1JPU5VZZUZzc9Q5Hu8pO2ST7NqchSPk6W6mNr9A=
Subject key identifier:   FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2944
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 12 Feb 2024 13:18:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 11645

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10564 (0x2944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb 12 13:18:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:51:00:cd:27:a4:0f:40:73:34:a1:d2:75:
                    69:94:3b:5d:a6:d7:88:0b:5f:63:4f:04:82:8b:5e:
                    10:08:41:25:2c:3e:4c:c6:ea:90:72:a9:3e:a6:1e:
                    6d:c3:f2:50:ac:b0:97:2f:ff:ee:ad:0c:fe:fe:7a:
                    93:5d:bf:f1:76:a0:cc:d5:da:36:40:b0:64:6f:52:
                    99:43:d6:34:ad:3e:e7:c7:f9:81:66:c0:bc:b5:a7:
                    b3:de:ee:7f:9c:69:a3:7c:a6:fc:7a:aa:33:b5:fd:
                    43:0d:ed:be:5e:f3:29:24:51:c5:91:58:3a:03:e3:
                    39:d1:aa:a2:9b:6b:0c:c1:ed:1b:be:e4:d2:4d:f8:
                    8a:aa:5e:ed:04:20:b4:e0:5d:3f:74:9e:c0:65:8f:
                    52:8b:f1:c0:79:94:bf:a8:33:b0:21:aa:27:1f:6d:
                    2d:2d:91:7c:8b:4e:e1:e9:c3:dc:ec:a9:70:05:53:
                    ec:87:4a:ee:8e:56:2c:fd:43:fe:07:40:59:eb:19:
                    8d:69:71:f6:83:97:2e:5c:e2:06:76:ff:0e:6a:3b:
                    99:12:82:9a:3b:14:a7:94:5b:19:c6:9d:10:2c:8e:
                    8b:24:61:df:96:c1:2d:fa:af:c3:bf:6d:98:d5:84:
                    74:9a:da:45:1a:a0:ce:07:ba:3f:ed:84:96:c4:b9:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11645

    Signature Algorithm: sha256WithRSAEncryption
         90:77:11:0d:fe:51:1e:d1:8c:fc:07:91:15:41:56:d6:6a:03:
         59:31:5b:09:3d:3e:e1:56:0c:5e:81:68:21:53:e6:c9:4d:48:
         61:b7:80:b4:5b:8d:03:5d:9c:d3:3a:f0:12:a1:b2:db:90:d8:
         89:3c:d1:c3:4e:22:93:e2:38:cb:d3:da:5a:82:a2:af:ac:13:
         8a:0b:2b:6f:74:ba:c9:a2:29:68:b0:c6:96:43:74:29:02:c9:
         55:69:ce:ef:a8:25:3d:d9:b2:f3:ee:62:e5:98:b3:ce:e1:a6:
         a5:41:43:18:a9:c3:d5:74:f5:13:f3:a6:be:04:53:b6:3d:ca:
         d9:e3:35:08:4e:8d:a4:b1:10:c6:69:92:c9:f0:53:31:e1:0f:
         e0:19:5a:08:de:56:b5:05:e5:73:c7:f1:f4:44:93:a0:e8:a0:
         31:44:95:be:67:b3:9e:4c:06:af:e1:8b:49:81:7c:da:30:42:
         48:8b:47:01:3a:7e:43:af:71:5a:69:c2:69:a4:38:2e:c5:0e:
         a9:ef:11:fe:58:d1:82:a9:10:c7:98:44:fa:13:fe:6c:1f:e9:
         7b:7d:be:1e:c6:ef:0a:90:af:32:60:f9:0b:55:d8:89:42:52:
         73:19:51:22:d9:9a:ac:15:75:db:f1:97:ae:ed:57:58:e3:61:
         3c:b4:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:57:26 2024 by rpki-client on console-fra.rpki-client.org