Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.cer (raw, json)
Hash identifier:          nPuRhcvvD9Dz1R9iVM9zmRZbhTW6LpdQJMZbjHAVpos=
Subject key identifier:   9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26FF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:31:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37564
                          IP: 154.66.152.0/21
                          IP: 196.220.160.0/19
                          IP: 197.231.232.0/22
                          IP: 2c0f:f5f0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9983 (0x26ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:31:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:10:aa:b2:78:98:da:e3:4a:0b:cd:be:ed:
                    c2:25:51:ff:27:08:cb:2d:c3:54:86:bb:e1:76:a5:
                    fa:0a:52:66:10:b7:e6:df:c3:5a:1e:ec:3a:8c:2f:
                    a0:b4:4c:45:08:5f:3e:2c:31:83:64:21:91:a9:94:
                    7b:76:00:55:94:84:c7:b6:cf:f8:c4:f2:59:54:97:
                    bc:03:6a:40:27:31:fb:96:65:04:0c:3a:da:22:a0:
                    0e:45:f0:a4:27:4f:b2:c8:77:12:6a:87:6a:50:08:
                    9b:03:c9:c0:d2:90:2c:32:9d:cf:de:d7:3b:f4:6d:
                    87:3e:de:f1:1a:56:bb:84:d6:4a:d8:dc:a8:13:86:
                    50:20:72:f5:1f:7d:c2:9d:c7:3b:fb:7c:f4:ec:b3:
                    56:3a:96:37:c7:27:17:04:71:46:0e:27:13:63:6d:
                    73:78:32:8c:a6:92:3c:df:83:42:ec:07:a7:1d:54:
                    e0:dc:3a:ad:00:af:f3:de:c8:58:19:58:8c:63:82:
                    d0:fb:b6:6e:73:17:15:89:4a:8e:37:ee:73:d4:a0:
                    cc:94:e6:dd:40:e0:01:20:a3:6d:d0:b3:ed:14:8d:
                    e8:bf:23:18:29:6b:fd:b3:d9:93:08:d5:ea:03:bf:
                    62:a9:f1:be:98:be:88:51:15:65:5a:08:8c:d1:7f:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37564

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.152.0/21
                  196.220.160.0/19
                  197.231.232.0/22
                IPv6:
                  2c0f:f5f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:45:ae:c5:10:65:f4:bf:02:08:12:a8:b3:91:cc:7a:6f:
         bb:a0:47:36:7b:45:3b:96:26:a9:4b:9e:a2:ce:ae:02:4d:04:
         e1:c0:25:cd:0f:1b:89:36:b5:1c:b0:b0:fd:16:ef:5f:1d:ff:
         85:7a:9c:f5:b9:0b:a5:0b:f2:6e:83:22:ed:ce:e3:69:a0:3a:
         42:52:08:64:f6:a4:8b:4b:19:18:9e:9f:4d:e1:d2:9e:34:10:
         e9:ce:41:22:82:39:90:5b:8d:65:61:80:03:94:02:57:b3:65:
         ce:c1:33:22:0d:37:0f:26:34:d0:e7:96:e6:17:b0:98:cb:12:
         2d:d5:10:3e:a1:bb:0c:e9:08:ab:05:33:91:a2:04:ea:12:a5:
         c7:88:76:59:84:e5:7f:71:58:5c:97:21:0b:af:2a:79:d0:8e:
         53:6f:a4:af:25:77:20:7d:93:46:6b:ac:c9:72:85:14:94:ab:
         95:76:eb:f7:f8:de:e0:01:db:45:10:6d:37:68:55:a0:fa:23:
         86:9a:84:24:fc:b9:9c:7e:9b:95:be:4e:f4:5d:f6:8c:ac:84:
         0d:04:6f:92:89:a2:32:7e:a3:c6:4a:b4:32:64:b7:7d:38:bd:
         37:65:15:dd:b2:94:48:7b:d9:c5:ab:6d:f1:44:2b:43:7a:35:
         1a:41:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:42 2024 by rpki-client on console-fra.rpki-client.org