Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
File:                     gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer (raw, json)
Hash identifier:          L9Y8ENdex8AsdVwijJGdox+jDvbVdpKMARdYPJ5YgOE=
Subject key identifier:   80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2434
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:19:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37204
                          IP: 41.220.16.0/20
                          IP: 102.213.40.0/22
                          IP: 197.221.224.0/19
                          IP: 2c0f:f758::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9268 (0x2434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:19:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:86:f0:19:34:c7:58:9f:bc:7c:0e:f8:75:
                    70:74:c0:21:f1:bb:83:c3:b0:6f:06:2a:18:3f:53:
                    92:ad:33:0d:0d:8e:c7:b4:70:0f:f1:d3:d6:af:28:
                    04:99:dd:49:f9:1a:de:47:42:a8:1c:e5:83:4e:91:
                    20:c9:14:7b:77:00:f9:b2:d8:d8:e5:c0:aa:25:45:
                    57:4c:11:de:96:db:40:0e:8f:49:b2:51:16:b1:ac:
                    bf:15:cf:7e:71:c9:86:46:fe:64:eb:6c:57:e2:9b:
                    42:89:88:39:11:34:23:fd:e6:e0:33:b8:ed:40:e9:
                    71:26:f7:f6:cb:59:e7:82:2c:b0:ce:59:5f:7b:6a:
                    7c:5e:a2:46:f2:fb:3e:93:2a:61:e1:7b:ca:69:b4:
                    ce:3f:5a:7d:30:d5:94:03:df:77:96:08:6e:82:ff:
                    bd:ce:08:c2:62:c0:09:82:bf:d9:ab:88:63:c0:07:
                    ce:97:74:fb:2f:03:7d:b4:52:9b:3a:a1:15:18:97:
                    2a:11:bf:37:64:bc:d2:96:85:48:07:fa:be:09:d8:
                    e3:61:30:7b:5c:89:79:86:9f:b6:20:25:90:1e:e5:
                    f6:6f:bd:8c:7c:2a:89:89:67:41:a2:0c:54:7c:07:
                    53:e0:cd:1f:4a:35:7e:5b:93:e0:50:ad:17:77:7e:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37204

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.16.0/20
                  102.213.40.0/22
                  197.221.224.0/19
                IPv6:
                  2c0f:f758::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:34:d7:47:09:82:9b:6d:61:99:60:ae:c0:05:e1:b4:b9:
         bb:85:7e:31:9d:e3:b0:c8:a0:89:57:4a:06:86:6e:85:fe:78:
         65:8e:b0:0d:e6:38:04:43:1d:93:90:5c:65:04:18:75:fb:19:
         f8:be:af:ca:e6:eb:b6:3b:40:7c:67:9a:73:52:9b:6b:6f:32:
         b5:55:af:80:ad:ab:1b:6a:5b:11:11:a9:07:b5:e4:93:98:02:
         62:92:91:38:96:d6:f6:2c:91:48:3c:b0:8e:79:38:7d:ad:da:
         05:71:91:29:3b:29:c9:35:5f:1b:b9:9c:61:02:a7:6c:db:37:
         26:75:a2:bd:12:76:d2:06:a3:60:5e:c8:47:2d:91:4e:8b:d7:
         44:58:eb:04:f4:38:09:b0:0f:d0:6c:03:07:e8:48:01:c7:70:
         ce:2f:a6:ad:2b:f6:4f:c0:4d:d5:f6:26:a3:12:bf:9b:40:af:
         92:2f:b9:50:2f:32:18:c8:bc:ef:68:0d:20:83:de:76:5a:94:
         da:ae:80:f2:ab:fc:0e:e8:8a:f6:63:a6:a7:c8:8b:13:36:ee:
         25:b8:41:10:09:f9:43:1e:67:fd:b7:e1:a4:06:b5:a9:64:12:
         95:7e:a8:c4:77:63:af:e9:49:b3:ee:3e:64:85:d7:44:c0:27:
         ac:14:b2:f8
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICJDQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMTE5MDdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQwNkI4QUYxMTAvBgNVBAUTKDgwNzM4MjM2MjRBRUMxRjZBQzFBQjA2
OUQ5NzhFNjVEOUY3MjA1NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiB4bwGTTHWJ+8fA74dXB0wCHxu4PDsG8GKhg/U5KtMw0Njse0cA/x09avKASZ
3Un5Gt5HQqgc5YNOkSDJFHt3APmy2NjlwKolRVdMEd6W20AOj0myURaxrL8Vz35x
yYZG/mTrbFfim0KJiDkRNCP95uAzuO1A6XEm9/bLWeeCLLDOWV97anxeokby+z6T
KmHhe8pptM4/Wn0w1ZQD33eWCG6C/73OCMJiwAmCv9mriGPAB86XdPsvA320Ups6
oRUYlyoRvzdkvNKWhUgH+r4J2ONhMHtciXmGn7YgJZAe5fZvvYx8KomJZ0GiDFR8
B1PgzR9KNX5bk+BQrRd3fnQzAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUgHOCNiSu
wfasGrBp2XjmXZ9yBWswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MDZCOC8xNjY5MUJCMjZGRTUx
MUVEODU0QjU5OUZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDA2QjgvMTY2OTFCQjI2RkU1MTFFRDg1NEI1OTlGRjEyMjI0NjgvZ0hPQ05p
U3V3ZmFzR3JCcDJYam1YWjl5QldzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkVQwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAQp3BADBAJm1SgDBAXF
3eAwDQQCAAIwBwMFACwP91gwDQYJKoZIhvcNAQELBQADggEBAI8JNNdHCYKbbWGZ
YK7ABeG0ubuFfjGd47DIoIlXSgaGboX+eGWOsA3mOARDHZOQXGUEGHX7Gfi+r8rm
67Y7QHxnmnNSm2tvMrVVr4CtqxtqWxERqQe15JOYAmKSkTiW1vYskUg8sI55OH2t
2gVxkSk7Kck1Xxu5nGECp2zbNyZ1or0SdtIGo2BeyEctkU6L10RY6wT0OAmwD9Bs
AwfoSAHHcM4vpq0r9k/ATdX2JqMSv5tAr5IvuVAvMhjIvO9oDSCD3nZalNqugPKr
/A7oivZjpqfIixM27iW4QRAJ+UMeZ/234aQGtalkEpV+qMR3Y6/pSbPuPmSF10TA
J6wUsvg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org