Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
File:                     aMXkutXc1WSiVidTyay2Mr0ky1A.cer (raw, json)
Hash identifier:          sN2x6XOzYQTMJeBZcEvyznEbo25ltfaG69NRBm2hCu8=
Subject key identifier:   68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2814
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:13:49 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36969
                          IP: 41.87.0.0/19
                          IP: 41.221.96.0/20
                          IP: 2c0e:7800::/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 13 May 2024 00:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10260 (0x2814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:13:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:70:76:d3:ed:65:bf:e4:28:17:71:f2:2c:
                    ef:21:dd:0e:3e:d7:3d:c5:1a:7e:5e:17:b5:4f:e0:
                    a6:c9:9f:38:59:d6:a1:b4:6d:72:e4:75:c2:6f:11:
                    db:3e:69:0c:19:88:ef:64:54:93:7e:4f:72:0a:d9:
                    da:51:5e:16:41:07:d4:98:cd:23:49:4d:c2:02:82:
                    1f:13:ec:c6:c3:0c:61:49:03:40:a8:d3:3f:a3:63:
                    bd:ed:a6:78:31:81:48:43:e9:a7:e7:92:1a:b8:9f:
                    34:fa:ff:7e:83:4c:30:cf:79:c7:c7:f3:d6:38:2f:
                    40:63:5f:a3:2f:b1:42:ed:cb:6c:f5:6f:fc:2f:d6:
                    18:49:e1:44:9b:5b:b0:4b:53:e1:82:4f:39:e5:3a:
                    22:b2:a1:35:9c:bb:c4:8c:2e:6f:db:8e:25:67:f7:
                    3f:ca:70:f3:36:d6:19:31:b1:92:80:2c:36:3e:02:
                    ff:90:63:c8:38:4d:f3:fe:67:ba:2c:fa:df:0c:d0:
                    0f:4e:dd:47:b8:17:aa:d9:ff:d2:d0:1a:b2:00:c4:
                    2b:84:21:54:85:0c:cf:be:34:48:16:60:c0:5b:79:
                    7f:40:8e:3b:09:b9:82:d8:c1:e5:db:21:db:25:8a:
                    9f:02:84:e0:2d:00:b2:85:fd:18:82:3d:74:7f:95:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36969

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.87.0.0/19
                  41.221.96.0/20
                IPv6:
                  2c0e:7800::/24

    Signature Algorithm: sha256WithRSAEncryption
         70:68:96:29:88:ee:4a:19:5f:31:97:17:97:8e:5a:d3:f4:e4:
         c4:9d:4d:92:57:23:3e:f6:fa:4f:20:01:74:a0:f4:e9:df:1b:
         cf:12:fe:ea:40:c1:26:8a:34:b6:aa:5c:7d:24:f9:6e:be:55:
         89:da:87:45:0e:07:f8:f0:77:ee:65:6e:d1:db:16:d1:b9:4f:
         5f:4b:7e:ad:63:cf:1a:42:bf:97:89:31:c6:fa:52:e9:04:ca:
         5b:e1:e1:02:23:82:40:c7:9f:8f:7e:75:47:fc:39:3e:72:ca:
         d0:69:27:1f:bb:fd:52:f2:e7:57:bc:a0:04:66:04:6f:a9:9c:
         01:7b:41:4d:9b:51:a8:85:1f:fb:06:3a:5b:4d:ea:29:99:72:
         b2:5c:14:48:bf:88:77:91:c8:ed:9c:17:2d:0b:cf:51:ed:7d:
         69:79:76:30:19:62:4e:4f:95:3c:c5:5d:15:2c:2a:aa:c7:c7:
         21:ff:29:a7:95:68:50:fb:0e:dd:0b:49:a8:18:76:7a:be:71:
         51:f8:70:13:82:1a:6e:4e:ea:06:47:0c:a6:b9:1d:30:d8:50:
         b5:00:fd:98:a1:27:25:0b:8d:fe:b1:80:fd:65:e4:fc:62:5c:
         8d:e4:85:23:49:63:3b:b6:1b:89:74:c4:1b:37:2c:e1:6b:31:
         ca:de:ab:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 11 01:29:45 2024 by rpki-client on console-ams.rpki-client.org