Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.cer (raw, json)
Hash identifier:          EDqGaRRX5abMnh/pM6JNQw1O1SY2Hs20gTdjfxLxvHM=
Subject key identifier:   8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:47:25 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36925
                          IP: 41.87.128.0/19
                          IP: 41.92.0.0/17
                          IP: 41.205.192.0/19
                          IP: 41.214.128.0/17
                          IP: 102.96.0.0/13
                          IP: 102.216.12.0/22
                          IP: 105.188.0.0/14
                          IP: 196.112.0.0/12
                          IP: 197.153.0.0/16
                          IP: 197.230.0.0/16
                          IP: 197.247.0.0/16
                          IP: 197.253.128.0/17
                          IP: 2c0e:6000::/24
                          IP: 2c0f:fb20::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9385 (0x24a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:47:25 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:36:01:1b:23:ff:83:48:ed:8e:10:08:9c:
                    92:31:66:44:6b:47:32:f3:eb:f4:ae:64:aa:5a:f6:
                    d4:5d:e1:0a:d0:e0:1d:7d:b3:d5:d9:36:4a:1b:1d:
                    3f:cb:1c:71:9f:d6:99:11:41:21:8f:43:82:68:f7:
                    af:f8:a7:9d:dd:3f:5f:63:1e:60:b7:3e:15:88:97:
                    e6:ba:44:0f:93:a9:c5:a7:13:2d:61:51:95:92:cb:
                    d1:70:14:a1:56:27:ab:07:fc:32:6d:2c:a4:17:59:
                    28:76:69:5f:ba:0c:0a:4d:a7:7e:9c:ca:3d:90:01:
                    cc:e7:b0:b5:de:ba:df:7b:b9:a2:b7:51:f4:ca:ad:
                    2d:b0:a7:0d:65:ee:21:cb:54:89:b2:61:13:df:ff:
                    e7:a4:80:b6:1e:f3:b4:18:fb:a2:0c:2a:2f:0e:b2:
                    1b:88:12:ef:9a:bb:3f:48:88:d5:52:2a:1c:a9:c5:
                    1d:b6:2c:33:f6:72:36:fc:ed:9a:99:50:76:57:ca:
                    0e:3b:c2:53:af:2d:59:d3:8f:8a:fe:ad:88:7e:8b:
                    d5:d7:37:1c:eb:14:fd:14:35:44:08:69:9a:6e:5d:
                    ab:81:8c:40:cc:d2:24:f9:00:d3:96:cc:d6:de:fc:
                    04:89:2c:ad:4c:a6:e1:e3:e0:0a:8d:82:95:a0:0e:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36925

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.87.128.0/19
                  41.92.0.0/17
                  41.205.192.0/19
                  41.214.128.0/17
                  102.96.0.0/13
                  102.216.12.0/22
                  105.188.0.0/14
                  196.112.0.0/12
                  197.153.0.0/16
                  197.230.0.0/16
                  197.247.0.0/16
                  197.253.128.0/17
                IPv6:
                  2c0e:6000::/24
                  2c0f:fb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:91:67:c8:35:a2:e6:0f:e5:45:d9:4a:6e:2d:c6:e5:90:
         c3:b3:63:b6:c0:a0:d0:ff:32:7a:c1:7a:84:52:98:9f:ef:c7:
         85:d8:a3:aa:dc:35:15:45:b6:b6:ab:34:cb:be:a0:0d:4f:b6:
         c2:8f:64:4e:2e:13:98:77:e1:b3:6d:07:18:e9:d4:5d:33:e6:
         a7:b3:6e:45:07:2f:eb:df:d0:82:dd:2a:4c:fe:53:0c:4c:09:
         25:72:e4:82:16:b9:75:10:f6:ad:42:35:5c:2a:ef:dc:34:1d:
         d4:28:15:e3:57:41:95:9f:c4:a5:db:33:c8:d5:75:0b:3c:e1:
         2c:6d:3f:02:91:ea:5e:b1:37:d2:af:8d:fa:fa:f2:6d:b6:b0:
         a2:dd:27:90:c1:52:74:31:2e:f4:3b:e5:b8:4e:b1:92:8c:41:
         1c:bf:48:77:7f:c5:ad:fa:af:15:ad:5f:be:e4:c8:3a:ff:d3:
         32:96:f4:58:52:a9:d7:a8:32:b4:3c:ec:53:c4:f0:01:7a:73:
         7f:00:bb:56:d8:61:32:da:80:db:ab:b4:02:e2:fd:6c:0b:1f:
         23:26:a4:d0:b5:be:f4:fc:cf:4e:62:fe:c1:48:4f:82:d0:33:
         08:b6:b2:92:15:b6:15:18:4d:a7:df:51:c6:42:6b:ee:c7:d5:
         41:2e:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org