Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.cer (raw, json)
Hash identifier:          gOaCp8T4qEvRoECHf50eObNai4Q77STu1YMAEvJOMGc=
Subject key identifier:   81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C71
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 28 Nov 2024 11:54:01 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37063
                          IP: 41.77.72.0/21
                          IP: 41.191.76.0/22
                          IP: 102.219.72.0/23
                          IP: 154.0.128.0/20
                          IP: 2c0f:fd60::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Dec 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11377 (0x2c71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 28 11:54:01 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:85:4b:0c:55:ed:dc:c8:cf:86:64:32:a3:
                    fe:95:72:81:e4:31:98:96:25:e0:b1:77:21:c0:a5:
                    0a:bd:18:63:60:2b:a7:cf:9e:fb:ab:5c:21:33:cb:
                    21:47:15:69:aa:51:64:ab:c3:eb:eb:e9:4a:c9:68:
                    8c:a0:53:36:20:3f:42:93:c7:2c:7d:95:a8:c4:eb:
                    e2:08:c6:32:d6:e9:f8:c2:e0:5e:bd:b6:ba:85:05:
                    3e:c6:26:d2:19:9d:6e:c9:79:e3:13:26:39:51:d5:
                    5c:5c:5f:5d:a9:81:d4:43:86:58:86:81:a7:ec:09:
                    b1:e9:f9:89:ac:f1:11:d9:6f:53:0a:8b:ea:e9:29:
                    ce:2c:dd:f6:d2:1a:54:22:12:67:5e:51:5e:6b:5b:
                    b0:c9:52:f4:c1:19:23:2d:c0:cd:63:cf:80:95:06:
                    39:38:db:b4:fd:8a:c3:f9:91:29:97:38:37:dc:fe:
                    c8:74:20:8c:9e:fa:fd:47:a9:c3:a1:01:21:1b:57:
                    b7:3a:cd:ad:2c:8d:96:a4:36:d5:8e:95:f8:03:9f:
                    a1:1a:b1:8b:2f:38:35:26:3a:fb:22:5d:76:58:5d:
                    ed:88:6d:ee:b8:47:cc:c9:a2:67:f7:ee:f9:00:cb:
                    be:d6:b6:20:af:61:e5:60:8b:34:85:39:eb:5c:77:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37063

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.72.0/21
                  41.191.76.0/22
                  102.219.72.0/23
                  154.0.128.0/20
                IPv6:
                  2c0f:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:ec:dc:04:14:ad:db:99:f9:0f:c0:48:96:69:5b:43:af:
         7e:50:85:20:4a:40:b2:7b:27:41:a3:56:e5:22:ce:cc:30:b9:
         ef:29:ea:c2:69:bc:e1:22:4d:1c:74:25:0a:76:48:4e:66:83:
         0d:e0:ba:be:52:9a:62:d9:09:e5:b6:0f:71:6a:75:31:c2:c6:
         bf:9f:4d:bb:f0:83:66:36:28:2e:59:95:9e:5c:0d:e8:f2:b2:
         e3:00:cb:3d:97:5d:04:4f:17:f9:ad:e2:3d:8d:c8:6a:c3:cc:
         ac:16:67:f5:49:ed:38:3e:7e:54:07:74:cf:2b:2e:08:3c:24:
         d1:25:fe:80:99:71:8c:c8:21:a9:30:27:99:9a:58:94:3c:ff:
         0c:99:7a:3b:83:2b:60:24:16:5d:f4:23:cc:03:03:5b:2c:36:
         47:de:fe:76:62:8d:22:9e:1d:65:32:c6:5d:2f:d7:8b:f6:fa:
         a8:3f:c1:a4:e4:79:2b:cd:21:90:6b:10:d2:de:85:04:bb:e1:
         34:be:ba:e8:b6:4b:a0:ec:96:ec:ff:e0:96:85:cc:82:12:4c:
         0b:1e:80:3d:d1:90:ca:08:0b:37:c6:b3:aa:b4:2e:bb:b8:5f:
         cb:b6:b7:24:ed:4b:33:66:1d:85:02:6f:f5:35:bf:1c:51:2d:
         83:45:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 29 02:41:18 2024 by rpki-client on console-ams.rpki-client.org