Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.cer (raw, json)
Hash identifier:          tOnEevU/uMzZrARa5hpU/S85cOBSnLa0TBkyJ6I2I04=
Subject key identifier:   84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2ABF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 11 Jul 2024 08:06:37 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 41.242.124.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Sep 2024 00:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10943 (0x2abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 11 08:06:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:76:ff:c3:2d:b8:4f:7f:d4:a1:18:55:4e:
                    52:25:07:59:96:6b:62:d4:0a:9c:dd:1a:29:c3:3d:
                    38:3f:c7:cf:5d:e8:45:c0:b5:d6:77:7b:80:4f:c7:
                    97:e9:c5:6b:b9:28:a4:b4:bc:85:cd:de:80:b9:98:
                    04:0b:eb:c1:36:91:72:ad:1a:eb:60:b1:c1:d0:0a:
                    e1:43:87:6b:fa:7a:ce:c5:15:a7:04:22:c9:0b:2f:
                    f6:4e:f9:d9:4c:74:9d:b8:86:02:9b:d2:ae:e2:a0:
                    84:6b:2b:53:43:9a:eb:25:5a:c2:5e:f4:29:6f:80:
                    6b:00:df:ea:70:1b:c9:6a:1f:30:54:2a:53:48:80:
                    03:2e:d3:f8:82:fe:ce:61:f1:d9:27:42:7e:90:46:
                    dc:21:59:28:7a:88:a4:b4:b9:88:f3:84:d1:1c:25:
                    41:a3:4b:31:03:48:39:6d:32:18:79:cb:52:53:07:
                    85:16:78:58:a2:d4:15:a2:91:4e:c6:30:09:d0:eb:
                    67:5a:1c:3d:d1:09:f9:c8:d4:d1:2a:22:7a:9d:16:
                    f3:e6:97:a9:f6:d4:10:4d:b3:0c:c5:a8:e8:dc:97:
                    90:f6:27:5c:2c:d7:08:53:08:b5:ac:df:bf:d0:09:
                    5e:e8:86:f8:0d:25:ae:d1:9b:a2:ff:9e:2d:72:b5:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:40:d9:ac:c6:e3:47:4c:40:13:2b:79:25:0a:14:ad:1c:3c:
         1e:62:90:8d:e6:35:1b:b3:27:dc:93:bd:56:dd:03:73:92:b7:
         cd:b3:f1:dc:fc:bc:87:1d:dd:d3:77:49:1a:89:46:60:68:bb:
         4a:7a:3a:82:c7:93:8f:b4:5f:46:a9:3e:13:5a:2c:4f:0e:5d:
         44:53:b6:47:db:14:57:d7:eb:44:c0:20:92:43:ac:1d:68:19:
         8c:13:4e:fe:66:d3:73:78:0d:c3:6e:49:29:5f:f2:1f:17:80:
         7c:36:d0:d5:e4:58:25:1d:df:b2:8d:ec:90:68:0a:02:7c:b2:
         a9:a4:89:23:26:c3:29:a1:56:69:76:ca:f0:da:44:28:aa:f4:
         c7:77:e0:dd:22:c3:ea:95:3a:1e:b5:94:09:1c:bd:ca:de:7e:
         9e:10:33:2f:0d:d5:8d:15:db:a6:34:76:d3:16:d7:4e:80:05:
         d1:df:69:46:31:98:a1:4d:aa:7b:9b:96:2f:4e:b4:5d:22:ad:
         b2:4d:52:84:1d:a8:cd:7b:34:77:62:79:3e:a3:66:88:26:cc:
         d4:e4:10:9d:e1:a9:20:bc:2c:29:90:88:c8:27:45:f1:63:80:
         c8:53:6d:b7:91:73:73:e3:83:13:16:e6:37:eb:79:9c:d4:a1:
         45:6f:c5:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 21 02:25:40 2024 by rpki-client on console-ams.rpki-client.org