Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
File:                     q_mWDIW8-JONWDN_jLfF603Es64.cer (raw, json)
Hash identifier:          g+dsnyjnOW8mTk4PQDwL7Qc0pSxphS5D0V+xJA8LdUE=
Subject key identifier:   AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2491
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:42:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36932
                          AS: 36940
                          IP: 196.49.26.0/24
                          IP: 196.49.28.0/24
                          IP: 196.49.30.0/24
                          IP: 196.49.32.0/24
                          IP: 196.216.148.0/22
                          IP: 2001:43f8:bb0::/47

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9361 (0x2491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:42:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:f4:29:38:0a:ce:92:97:e7:f8:bb:60:8f:
                    7a:e6:dd:39:a2:63:1a:38:de:ff:f3:d0:15:b8:1d:
                    4c:cd:9b:03:a0:2c:ac:61:0c:e6:ec:08:fb:d7:05:
                    32:35:65:ce:a9:b9:84:6f:74:bb:d8:7d:06:c3:3f:
                    c5:4f:fb:10:dd:50:cf:b1:a8:12:39:43:23:45:ab:
                    33:b8:bf:d6:46:43:43:07:ed:66:85:a6:62:a9:ca:
                    11:5a:6e:f7:67:8f:59:2c:e6:0d:14:1e:af:8e:23:
                    9f:4d:69:10:b4:30:7f:49:b3:e2:aa:bc:64:52:a2:
                    dd:c4:a1:ea:c6:ee:8c:c9:1a:8f:01:4a:3b:14:8d:
                    43:36:f9:38:da:4c:6c:71:cf:43:5a:d8:dc:17:6f:
                    06:9f:48:f5:99:7d:98:d5:ca:b4:c0:f9:f2:80:56:
                    c4:13:68:cb:14:8e:5d:06:64:4c:86:30:77:b2:6f:
                    3e:0c:26:8c:75:90:fe:3a:f6:2b:ee:2b:83:7f:f5:
                    cd:95:48:ea:48:49:b9:44:57:c3:67:b9:58:ec:62:
                    c4:f6:2f:56:20:44:a6:6f:23:be:39:af:5c:f7:49:
                    ff:b3:f0:b9:c1:cf:ab:f7:f0:d4:f5:04:70:24:4f:
                    6e:b1:7f:4a:38:cb:0c:6d:8e:d3:9f:3d:2c:72:a5:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36932
                  36940

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.26.0/24
                  196.49.28.0/24
                  196.49.30.0/24
                  196.49.32.0/24
                  196.216.148.0/22
                IPv6:
                  2001:43f8:bb0::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:38:4f:6b:4d:f1:28:7c:16:e9:4f:d6:60:5b:27:68:7d:c5:
         ed:32:fa:4e:c1:ed:6f:9d:07:5b:39:84:eb:09:35:98:ee:d9:
         29:41:3f:9d:bc:77:8e:f2:f4:52:ad:8f:07:2d:d3:bc:91:0c:
         90:1f:c7:75:fb:ff:e1:db:f3:28:fc:00:eb:77:85:f5:05:3e:
         fc:29:ff:b9:a9:6c:33:f0:f9:3f:19:31:3d:b9:17:ff:68:a1:
         06:a8:ce:5f:35:4d:6b:6b:f9:aa:27:49:8e:65:21:ee:2b:ca:
         0f:af:31:5c:1b:f6:3e:7c:da:ec:ea:3d:c9:e5:25:40:9b:3a:
         db:51:98:82:da:9a:21:7a:00:62:ff:dc:e5:20:8d:36:f8:7d:
         e6:be:8a:26:a8:b0:f8:c3:21:e1:25:10:90:73:c8:b3:38:9c:
         06:c7:a2:c3:92:de:97:b6:72:92:cc:a0:3d:39:89:71:e8:b7:
         a5:9e:a3:12:55:f7:d2:3c:1c:ee:66:aa:f5:95:5b:df:8f:22:
         59:b5:49:ca:48:93:6d:fe:ea:3f:fb:a6:57:2f:1a:df:c7:a9:
         56:73:a3:e1:7e:a1:ee:5e:22:7a:58:5d:93:b9:c1:91:b9:ea:
         a9:4b:40:6c:85:ea:eb:14:ea:d7:58:0d:b7:fd:6a:61:ef:90:
         f5:78:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:27 2024 by rpki-client on console-ams.rpki-client.org