Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.cer (raw, json)
Hash identifier:          0IA/ADR0651gy+7ghYOOWpTUf8x8pRMDQdW83mye6J8=
Subject key identifier:   8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2E97
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:44:56 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 36925
                          IP: 41.87.128.0/19
                          IP: 41.92.0.0/17
                          IP: 41.205.192.0/19
                          IP: 41.214.128.0/17
                          IP: 102.96.0.0/13
                          IP: 102.216.12.0/22
                          IP: 105.188.0.0/14
                          IP: 196.112.0.0/12
                          IP: 197.153.0.0/16
                          IP: 197.230.0.0/16
                          IP: 197.247.0.0/16
                          IP: 197.253.128.0/17
                          IP: 2c0e:6000::/24
                          IP: 2c0f:fb20::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11927 (0x2e97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:44:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364AE44AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:36:01:1b:23:ff:83:48:ed:8e:10:08:9c:
                    92:31:66:44:6b:47:32:f3:eb:f4:ae:64:aa:5a:f6:
                    d4:5d:e1:0a:d0:e0:1d:7d:b3:d5:d9:36:4a:1b:1d:
                    3f:cb:1c:71:9f:d6:99:11:41:21:8f:43:82:68:f7:
                    af:f8:a7:9d:dd:3f:5f:63:1e:60:b7:3e:15:88:97:
                    e6:ba:44:0f:93:a9:c5:a7:13:2d:61:51:95:92:cb:
                    d1:70:14:a1:56:27:ab:07:fc:32:6d:2c:a4:17:59:
                    28:76:69:5f:ba:0c:0a:4d:a7:7e:9c:ca:3d:90:01:
                    cc:e7:b0:b5:de:ba:df:7b:b9:a2:b7:51:f4:ca:ad:
                    2d:b0:a7:0d:65:ee:21:cb:54:89:b2:61:13:df:ff:
                    e7:a4:80:b6:1e:f3:b4:18:fb:a2:0c:2a:2f:0e:b2:
                    1b:88:12:ef:9a:bb:3f:48:88:d5:52:2a:1c:a9:c5:
                    1d:b6:2c:33:f6:72:36:fc:ed:9a:99:50:76:57:ca:
                    0e:3b:c2:53:af:2d:59:d3:8f:8a:fe:ad:88:7e:8b:
                    d5:d7:37:1c:eb:14:fd:14:35:44:08:69:9a:6e:5d:
                    ab:81:8c:40:cc:d2:24:f9:00:d3:96:cc:d6:de:fc:
                    04:89:2c:ad:4c:a6:e1:e3:e0:0a:8d:82:95:a0:0e:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36925

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.87.128.0/19
                  41.92.0.0/17
                  41.205.192.0/19
                  41.214.128.0/17
                  102.96.0.0/13
                  102.216.12.0/22
                  105.188.0.0/14
                  196.112.0.0/12
                  197.153.0.0/16
                  197.230.0.0/16
                  197.247.0.0/16
                  197.253.128.0/17
                IPv6:
                  2c0e:6000::/24
                  2c0f:fb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:8b:24:c3:64:36:50:8c:61:4d:cc:e8:cd:7d:12:01:0d:a3:
         cd:e2:8b:54:d2:5c:4d:12:51:5a:f6:8a:48:45:1e:28:a6:4c:
         36:73:31:04:08:fb:3f:cd:30:21:de:d2:73:f0:5a:62:f6:0e:
         7e:fe:17:ff:53:a0:af:e3:af:cc:86:17:ca:f2:35:6f:d6:0f:
         ad:e2:93:85:3e:18:ee:a5:cb:6e:e9:61:f7:97:88:83:18:d6:
         0e:43:48:18:60:46:63:15:06:39:ba:83:d4:95:4d:3f:dc:21:
         9f:2d:8b:c1:6c:1b:c1:41:d3:c4:8f:2d:89:fb:14:ae:e8:31:
         fb:89:41:9c:2f:b7:84:54:83:db:a6:fd:66:1b:64:16:e9:81:
         56:35:41:e0:e1:73:e7:19:ed:51:14:16:6d:3d:ed:f4:13:8d:
         ce:12:53:c0:f0:0a:88:f2:05:54:27:d1:97:e2:02:42:8a:f4:
         69:0e:c3:e3:43:1c:21:11:51:1f:5e:f5:73:25:28:6d:7f:8e:
         3d:aa:80:8b:a8:8d:4e:53:23:5a:df:6e:d1:d4:fb:79:5e:6a:
         70:3f:52:81:44:b0:ac:06:ca:33:a5:1d:a4:76:c8:7e:52:48:
         36:bc:37:90:56:c1:f6:b5:f9:30:a6:d2:33:3b:47:e8:5c:b9:
         67:ba:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:20 2025 by rpki-client