Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.cer (raw, json)
Hash identifier:          2w20k+Sc3B8D8mK2BfbzQCoKc4KQ9jz2uqXe9gzFz5k=
Subject key identifier:   80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23E7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:00:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37025
                          IP: 102.219.194.0/23
                          IP: 196.6.228.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9191 (0x23e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:00:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:66:8d:d5:a5:c6:9b:8e:69:ee:8d:04:30:
                    ec:a0:2a:96:00:d3:16:71:57:61:9a:3c:b1:20:7d:
                    52:07:68:7b:ba:fe:97:52:13:1d:1d:9e:f1:59:fc:
                    11:8b:6e:25:1e:e5:6c:ce:19:23:e1:1c:da:eb:91:
                    01:d1:42:02:96:d9:85:d0:5b:d0:28:ad:68:81:00:
                    81:ba:44:75:42:07:0f:19:0c:74:94:63:70:69:f0:
                    fa:32:71:88:90:ce:39:f5:38:5e:dd:30:cf:0d:e5:
                    14:3d:01:7d:bd:20:b4:53:e5:e3:fe:2b:a3:b0:58:
                    9b:52:15:93:e4:58:eb:83:86:e2:6f:08:5a:71:69:
                    df:2c:77:68:8c:5d:c0:65:4d:0f:72:aa:fb:63:25:
                    cd:4c:e6:de:d8:2a:63:9b:d5:26:73:81:51:fd:4d:
                    32:6d:8d:3f:9c:6f:f7:f2:33:4b:61:72:e9:99:94:
                    ed:cb:89:8b:88:2a:1c:2e:17:d9:99:10:02:76:36:
                    ec:4f:36:ec:ad:14:30:de:5e:93:78:8a:0c:b4:73:
                    99:19:ca:56:6a:c9:b6:9a:dd:30:80:78:05:50:66:
                    f8:a6:74:36:fe:98:fc:d4:38:bd:9a:04:8d:27:96:
                    5e:c6:c0:8c:b5:c3:9d:61:70:73:30:fb:bf:39:df:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37025

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.194.0/23
                  196.6.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:bb:f7:5e:91:eb:c6:f7:b0:26:4b:b9:e2:25:6f:e5:64:b0:
         45:b9:ad:f7:26:16:1d:b9:34:22:08:96:f5:d2:31:41:bf:13:
         0b:46:c4:f9:cd:34:aa:1b:02:67:ba:26:90:b9:36:08:e6:73:
         6d:74:ff:fd:da:0a:07:51:28:57:91:04:f0:72:45:f9:c6:12:
         e5:6b:b5:c1:2b:0d:63:0c:4d:d4:5c:ae:a0:15:09:3e:6c:6b:
         68:fe:8a:a0:13:74:78:dd:eb:d8:06:f7:23:bb:8b:c2:df:96:
         63:a6:ba:23:76:a4:1a:9b:f2:2a:ae:8c:97:89:2c:c3:37:3d:
         e3:ef:f3:e4:31:32:f6:f1:6c:f1:f0:b7:58:e5:74:d5:c4:7b:
         b6:ca:69:e9:97:55:34:e8:94:e5:e6:5d:f6:24:27:fc:96:28:
         e1:d3:0e:83:c3:8f:19:75:e5:51:67:e2:a1:c8:cc:ce:fd:d7:
         00:a5:97:24:7a:64:4c:f7:62:6e:d0:9b:e8:3b:b9:e1:a3:ec:
         06:0e:e5:6e:99:7f:94:b5:49:16:55:e0:d3:8b:55:90:a0:66:
         04:12:ca:a4:a3:e5:e1:87:22:29:30:4d:1a:17:e0:6b:66:7d:
         f7:60:8e:6e:31:f2:71:53:9c:58:51:5e:fc:1b:5c:58:75:0a:
         e7:15:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:20 2024 by rpki-client on console-ams.rpki-client.org