Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
File:                     gnLCuLOzie4re71PvVUJZ28yebs.cer (raw, json)
Hash identifier:          kSpwfQxZvG6lqAQzXsZnmBXVI4AHhUYwFoR1NP1+cUs=
Subject key identifier:   82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26C4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:22:15 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37280
                          IP: 41.76.192.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9924 (0x26c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:22:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:dd:82:3d:54:56:c2:7c:e3:69:29:b4:44:
                    b0:26:fc:72:4e:bc:19:40:b8:62:12:ab:b4:4f:75:
                    9e:93:cf:e9:47:5c:9e:44:44:50:83:a9:60:11:24:
                    f9:46:95:6e:0b:b1:e7:3f:48:2d:86:e9:08:77:50:
                    f2:20:fc:ba:e5:77:2e:41:be:e4:64:5d:d9:b2:6e:
                    24:ad:13:ea:70:94:4a:20:fc:97:7f:35:8c:0d:7b:
                    6f:f1:6a:1a:99:64:b5:b9:02:61:80:3c:05:b6:27:
                    c6:ed:a2:2e:db:7f:1e:4f:50:79:a8:61:1a:a0:85:
                    a6:f7:56:9a:a6:e0:6e:e3:1d:72:3e:0a:6e:f7:6b:
                    e2:d2:30:32:bc:60:dd:e5:c3:31:69:e8:90:ff:ce:
                    76:2f:b5:a2:53:d6:3f:7d:05:cc:27:61:54:1b:68:
                    93:08:97:14:66:5d:17:f2:d3:8b:8a:52:ca:76:a1:
                    bb:db:9b:18:75:f3:71:0b:cb:9e:ed:4e:a7:c6:33:
                    7f:30:87:39:0c:c0:bc:5a:77:81:11:41:4c:07:d9:
                    b9:05:0a:cd:2b:f3:cb:d9:1e:f9:c5:53:c9:11:9f:
                    8e:9b:57:29:80:8a:b5:ca:c9:89:a5:09:16:72:27:
                    42:4d:a0:51:29:b8:89:34:b8:ee:f0:13:84:fb:54:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37280

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:b5:82:ca:02:84:c8:c0:43:a3:d6:5f:17:40:87:84:66:
         0c:9b:24:ba:7f:c6:93:fc:b8:57:9d:3d:32:82:80:07:60:90:
         49:5f:d2:ca:fc:b1:ae:b2:af:9f:09:37:8a:b3:ed:a3:5c:fe:
         0f:70:1d:8c:c1:05:06:45:2d:7b:c6:8c:7b:75:c0:28:09:31:
         fa:d2:10:a9:51:64:4f:41:01:60:7f:e4:ef:41:28:fb:dd:bf:
         5c:e8:aa:ee:72:a1:0e:3d:58:74:14:53:88:71:5c:65:5d:3d:
         6d:c4:d2:8a:6d:0e:d6:65:4a:36:f0:45:4c:af:76:07:78:c0:
         6c:c1:be:65:50:89:a8:04:7a:f2:bf:fa:6c:60:ec:06:79:fb:
         0d:2e:8f:bc:f9:d4:f3:84:26:f2:38:50:ea:2f:f5:e1:5d:58:
         86:45:b0:d3:fb:ff:7d:f4:a0:5e:22:82:be:8d:6e:17:61:8e:
         f4:22:94:bd:e4:15:aa:67:f4:ea:2a:04:eb:c8:0f:c3:ec:69:
         ec:38:2b:19:4e:22:d6:08:b3:4f:3b:9f:8b:40:96:47:a8:24:
         62:39:15:f0:67:3d:e6:5a:b3:87:b2:01:74:92:3c:d4:5b:bf:
         2d:9a:e6:70:9e:36:65:c0:bb:08:3f:5c:42:3f:59:98:8b:d6:
         be:9f:8b:d6
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJsQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzIyMTVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjlDOTRFQUYxMTAvBgNVBAUTKDgyNzJDMkI4QjNCMzg5RUUyQjdCQkQ0
RkJENTUwOTY3NkYzMjc5QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmcd2CPVRWwnzjaSm0RLAm/HJOvBlAuGISq7RPdZ6Tz+lHXJ5ERFCDqWARJPlG
lW4Lsec/SC2G6Qh3UPIg/Lrldy5BvuRkXdmybiStE+pwlEog/Jd/NYwNe2/xahqZ
ZLW5AmGAPAW2J8btoi7bfx5PUHmoYRqghab3Vpqm4G7jHXI+Cm73a+LSMDK8YN3l
wzFp6JD/znYvtaJT1j99BcwnYVQbaJMIlxRmXRfy04uKUsp2obvbmxh183ELy57t
TqfGM38whzkMwLxad4ERQUwH2bkFCs0r88vZHvnFU8kRn46bVymAirXKyYmlCRZy
J0JNoFEpuIk0uO7wE4T7VNp1AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUgnLCuLOz
ie4re71PvVUJZ28yebswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5Qzk0RS9FOUQ3RDhBRUU4MEQx
MUVDOTc3Qzk2OTBGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUM5NEUvRTlEN0Q4QUVFODBEMTFFQzk3N0M5NjkwRjEyMjI0NjgvZ25MQ3VM
T3ppZTRyZTcxUHZWVUpaMjh5ZWJzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkaAwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMpTMAwDQYJKoZIhvcN
AQELBQADggEBAEfEtYLKAoTIwEOj1l8XQIeEZgybJLp/xpP8uFedPTKCgAdgkElf
0sr8sa6yr58JN4qz7aNc/g9wHYzBBQZFLXvGjHt1wCgJMfrSEKlRZE9BAWB/5O9B
KPvdv1zoqu5yoQ49WHQUU4hxXGVdPW3E0optDtZlSjbwRUyvdgd4wGzBvmVQiagE
evK/+mxg7AZ5+w0uj7z51POEJvI4UOov9eFdWIZFsNP7/330oF4igr6NbhdhjvQi
lL3kFapn9OoqBOvID8Psaew4KxlOItYIs087n4tAlkeoJGI5FfBnPeZas4eyAXSS
PNRbvy2a5nCeNmXAuwg/XEI/WZiL1r6fi9Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org