Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.cer (raw, json)
Hash identifier:          SXg00K95VvqO2UktA7/F47GO54jQzm0UM5iJ6kahMHc=
Subject key identifier:   95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25E9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:50:26 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 6968
                          AS: 37175
                          IP: 196.216.170.0/24
                          IP: 196.216.230.0/23
                          IP: 2001:43f8:30::/48
                          IP: 2001:43f8:100::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9705 (0x25e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:50:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:38:51:a9:0e:ba:6e:e6:c2:af:50:c6:2c:
                    2c:83:f3:72:16:53:d0:48:b9:c2:81:3f:a0:a8:c6:
                    61:6b:56:f5:17:94:c6:79:44:e7:0a:6a:ad:46:f6:
                    83:eb:e3:d2:18:25:9e:48:ed:fa:58:0e:91:8f:ed:
                    6b:4f:84:a0:da:24:79:60:3d:81:4a:e7:cc:f5:00:
                    5f:4c:5e:34:48:56:65:81:be:11:67:ce:11:a7:92:
                    99:0a:a9:4a:a7:dd:6c:ec:60:55:ae:c1:d5:57:ae:
                    0c:98:74:f4:6c:c9:04:56:2e:a4:d4:f8:fe:1e:8f:
                    f7:d2:0c:e8:5c:97:fd:18:7b:15:ab:e3:b2:cc:c1:
                    92:e9:f6:86:b8:eb:04:86:e8:06:64:52:fb:d0:43:
                    03:8f:1a:bc:59:44:a9:ab:f5:02:fc:a2:fd:56:87:
                    af:01:f0:1b:ea:f3:69:c3:b9:18:56:c6:d2:37:05:
                    57:18:ec:96:16:fc:94:f0:2c:c5:d1:f7:38:a2:96:
                    62:fc:c1:d5:48:05:7f:86:36:27:c1:f4:44:12:1e:
                    1a:92:ac:c5:34:f3:21:b9:8a:76:83:54:62:8d:c8:
                    3f:48:8d:a7:ed:ed:90:31:18:ad:e8:40:90:5f:9a:
                    cf:98:ac:91:32:4e:7d:dd:89:24:4c:a9:48:21:a6:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6968
                  37175

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.170.0/24
                  196.216.230.0/23
                IPv6:
                  2001:43f8:30::/48
                  2001:43f8:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:7f:ab:1e:a5:50:62:47:f1:87:6a:bd:ac:9b:2e:d9:96:
         65:cc:3f:12:e2:3f:0c:86:26:27:7a:40:34:db:d0:df:ba:8c:
         83:a4:ea:d5:19:65:c3:a3:a0:4d:b7:85:b7:b8:6c:0c:74:ba:
         6c:2d:b7:e1:cf:80:72:3f:9f:ca:c0:4d:95:66:1d:ba:59:2f:
         0a:6d:fc:72:34:22:86:de:e6:31:a9:04:ac:d8:ea:cf:4d:d5:
         42:48:c8:80:47:fd:11:41:b2:85:5c:d1:90:ce:2a:af:0b:9d:
         ed:6f:db:98:70:0c:e7:97:2c:31:7f:13:dd:9d:11:8b:64:78:
         b3:42:b7:95:b3:66:a4:df:a9:0c:fc:89:4d:13:12:a2:43:4c:
         43:2c:59:e9:4f:42:22:d7:57:c1:fb:b1:e4:c0:fa:41:6e:d7:
         46:37:ce:61:d0:9d:3e:55:97:20:f9:e8:91:56:c0:0a:3c:d1:
         7e:c3:4b:bd:96:9e:16:34:0b:d1:81:c2:80:c8:b8:8a:af:a6:
         51:ed:ab:28:52:15:9e:28:16:e1:ff:50:8a:ca:54:0d:ba:0f:
         30:e1:51:a4:8b:c3:92:88:49:b8:39:57:9d:6e:4c:e9:bf:2b:
         09:ae:d5:1a:d8:4c:12:3d:7f:f9:39:ce:1f:9a:67:12:77:61:
         ae:ae:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org