Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
File:                     bP0IdUOMviDDICpMU82sI8ThNz8.cer (raw, json)
Hash identifier:          EKNEb/ztqk8LPebFgSIf+aNO0OIYqwS53N9Nc9ECez0=
Subject key identifier:   6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23C5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:51:43 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 17400
                          IP: 41.221.240.0/20
                          IP: 196.29.192.0/20
                          IP: 196.249.192.0/18
                          IP: 2001:4250::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9157 (0x23c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:51:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:83:06:44:3e:fb:57:ba:7c:4a:ea:65:58:
                    e6:4d:1c:b9:be:9f:8a:2d:4d:64:d0:bf:af:28:75:
                    c6:83:53:08:97:2f:4e:db:0f:34:b9:ce:9b:41:27:
                    ab:15:90:bd:08:98:ef:17:5f:d3:ed:ac:8b:07:ad:
                    b3:b8:33:5f:05:68:02:ab:0d:14:49:5f:78:70:a1:
                    cc:bd:37:58:b4:6c:a0:c9:7c:29:00:96:46:f5:66:
                    86:f0:5e:12:0f:fd:c9:21:59:01:aa:d6:14:fc:92:
                    96:70:41:2b:f6:5c:be:85:03:8a:43:4d:fc:a5:9e:
                    82:c4:00:a6:42:56:5a:ce:37:68:6f:e6:83:6e:a1:
                    9d:65:be:b9:b3:2a:a3:31:7b:cb:1b:1a:21:9e:97:
                    ca:06:b0:4a:fd:3b:fa:82:b9:b3:dd:dc:b6:7f:7d:
                    ce:dd:16:53:3f:56:2c:a0:99:dd:ce:20:b4:8e:0e:
                    a0:a5:14:57:38:a0:60:2a:4c:54:b6:66:8c:6d:29:
                    9c:1b:94:fc:3d:17:0c:d4:5e:32:6a:95:f7:5f:39:
                    51:ed:9e:55:53:1c:80:6b:3d:da:3c:9d:c8:d1:bc:
                    89:97:63:96:67:2f:b5:a8:9a:d2:88:c8:43:d1:6b:
                    87:db:b2:2f:72:77:98:76:e8:87:22:93:e3:83:c6:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17400

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.221.240.0/20
                  196.29.192.0/20
                  196.249.192.0/18
                IPv6:
                  2001:4250::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:07:8b:cc:9f:ed:95:6b:ad:37:17:cd:c4:e3:c2:80:f1:
         29:0d:30:fa:99:de:e3:1a:6c:38:59:e9:5c:f1:fd:0a:09:54:
         32:b2:db:d8:76:b0:64:b6:91:3e:36:5c:e1:ec:24:ad:26:72:
         87:8b:f8:58:bc:56:d1:3a:57:67:49:a2:b8:a6:2a:93:e6:5f:
         ee:c6:cf:26:22:12:cf:26:9a:ec:6d:8a:66:e0:0c:bd:78:24:
         57:79:81:34:86:71:29:07:65:e6:11:f6:d6:54:ef:64:98:1e:
         eb:17:31:59:2d:6a:62:48:cb:48:2d:df:d5:e4:6a:77:01:46:
         5e:f0:db:c1:4a:23:2d:ef:3b:99:1e:82:62:68:f9:89:c5:18:
         14:fc:49:9c:f5:c6:78:47:88:30:b7:e0:fc:96:42:fe:41:bc:
         bf:e3:1d:1d:f1:d9:cf:38:24:4d:be:85:56:1d:10:eb:ac:5f:
         07:64:b1:d9:df:52:82:5f:f8:24:fc:5d:81:f4:ba:4c:86:ec:
         e5:47:cc:6a:08:bb:15:8f:8d:54:b6:bb:95:ad:44:3a:0f:3a:
         c7:98:f5:bb:c0:a8:7f:87:70:e9:44:3f:cc:b8:ca:22:ff:dc:
         24:9d:82:7d:0d:d2:15:67:e3:76:81:22:4e:66:17:08:eb:5d:
         84:6d:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org