Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer (raw, json)
Hash identifier:          TirTehxJkEQ8HKL2wUUmjvnLW6Cb6dPpZXtJmJTM/nI=
Subject key identifier:   6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26BA
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:20:49 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37062
                          IP: 196.216.248.0/23
                          IP: 2001:43f8:400::/40

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9914 (0x26ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:20:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:cb:c5:7c:0a:34:c0:99:7f:0f:32:1c:d9:
                    c5:13:16:4a:bd:fa:db:bb:fe:d4:33:59:81:73:fe:
                    de:d7:0c:65:07:d2:c9:61:16:dc:69:55:cf:13:aa:
                    a9:27:cd:c2:2a:3c:be:f2:fa:b8:df:e7:a9:56:74:
                    58:5b:28:13:ac:78:08:78:9e:ce:00:d1:8e:1c:17:
                    82:1d:2a:dc:28:04:13:89:11:55:07:b8:c1:59:d8:
                    3c:fd:4d:1a:4e:c4:88:6e:10:50:94:f1:d9:3c:5d:
                    72:14:e6:f8:7f:b8:1e:2b:f4:d6:fa:c8:a7:7a:4f:
                    d5:a6:72:74:3b:98:f2:51:f9:ef:c1:e6:87:11:8d:
                    bf:fb:4e:b5:66:e1:fe:6d:37:2b:53:63:9b:11:51:
                    21:bf:e8:c2:18:73:cc:45:f2:da:d3:d3:7a:1f:d6:
                    70:82:69:62:6c:ed:16:b4:5b:89:81:37:a8:e2:99:
                    8a:c1:a9:11:f6:74:21:63:c2:ab:52:2a:d2:ab:67:
                    b6:b9:09:31:88:6c:29:1c:49:b7:e4:fd:cc:f0:0d:
                    cf:87:ab:4d:ba:eb:f0:e3:5f:ec:0a:5f:be:b4:32:
                    e0:59:4a:55:91:4d:34:be:73:24:ee:f9:34:84:47:
                    4a:6b:05:e0:b0:64:a7:d1:24:69:92:e6:20:de:bd:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37062

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.248.0/23
                IPv6:
                  2001:43f8:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:c3:b0:df:d5:eb:d7:11:fc:9c:48:27:a5:1f:0d:ba:e4:
         1d:f8:6c:6d:ef:b8:40:8a:4c:a6:9d:a9:33:16:b6:f3:c7:7a:
         83:76:0f:8b:f7:59:87:77:68:b4:48:57:e9:f7:e0:bd:23:de:
         b3:42:36:c3:82:6f:d8:ed:1c:9d:b2:ab:b6:64:dc:c4:0a:e1:
         32:0c:cb:77:e9:8d:c9:b8:54:95:91:14:2a:b3:d4:d2:68:2e:
         5c:61:4c:dd:af:69:4c:f2:3d:33:81:a4:96:9c:3c:ae:d3:3a:
         d2:d7:4d:d8:2a:5d:4c:35:6c:20:a7:28:3e:a4:67:65:e4:ef:
         47:b2:33:a6:9f:18:98:de:b3:53:12:a6:75:62:8a:bd:23:e4:
         cd:df:ad:a9:8a:ba:b4:f1:5b:3b:14:c8:6a:a1:6d:50:2f:0c:
         8f:6f:93:7f:47:e0:4f:1c:45:e6:ef:43:43:68:1f:24:33:00:
         4a:53:e4:df:7a:a4:49:fa:22:2f:e6:81:cb:9d:1e:8a:31:d9:
         7b:8c:e7:82:3e:0a:b1:44:6e:3d:d9:98:6b:47:4a:a2:9e:c6:
         22:20:db:f6:f6:58:9a:64:47:34:f4:9d:11:f3:93:d2:bc:41:
         39:60:b6:32:a3:93:56:80:24:7f:fb:da:df:fb:ff:99:f9:e9:
         b0:cd:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org