Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
File:                     qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer (raw, json)
Hash identifier:          YtbVFVATDa/Vw9QxYO1hd2USSedGilclBdbvXvn/FIs=
Subject key identifier:   AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C2E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 08 Nov 2024 00:03:09 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328366
                          IP: 41.79.212.0/22
                          IP: 102.207.84.0/22
                          IP: 102.209.140.0/22
                          IP: 102.211.180.0/22
                          IP: 102.218.52.0/22
                          IP: 154.68.176.0/20
                          IP: 154.118.244.0/22
                          IP: 2c0f:efe0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11310 (0x2c2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov  8 00:03:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:0f:55:f5:e7:63:61:68:a4:18:23:9c:07:
                    f4:8a:e6:0b:95:ef:e8:af:7c:b6:9f:9b:d3:3b:d2:
                    16:77:fe:bf:52:c7:22:7f:79:3e:0b:0d:b9:f4:79:
                    d1:b5:13:c0:f7:32:fa:9a:87:3f:75:ad:ac:ea:c5:
                    b1:8f:a2:16:34:e7:3f:b7:15:6e:0f:09:e0:fa:88:
                    3c:94:60:15:77:66:83:01:aa:50:82:06:c5:11:b9:
                    50:0f:3a:18:de:2e:30:2e:7a:5c:28:4b:8b:58:3e:
                    9b:20:c2:15:1b:37:2a:ac:f1:06:2b:49:b2:82:86:
                    c7:11:9c:75:7d:eb:7f:92:38:16:b7:18:07:f0:30:
                    95:0e:bb:aa:7c:8e:b1:f7:e7:aa:61:f7:b9:4e:8f:
                    eb:d9:dd:3f:d1:ff:ef:e8:d0:a4:33:b9:14:36:29:
                    e0:9a:52:f5:f5:8c:ed:40:eb:2a:a4:d5:f6:25:f0:
                    d4:4f:c1:31:db:4e:1d:64:d2:4c:ca:70:dd:8d:bc:
                    4c:b2:46:bf:89:40:9d:80:fc:19:17:02:bb:70:f7:
                    3e:2a:6b:e3:9e:31:28:99:3c:c1:d3:b3:0a:f3:aa:
                    2f:ff:8e:80:87:5e:d0:d1:91:b3:0b:a8:df:f2:af:
                    50:1c:dc:59:24:46:d4:fd:38:1a:23:af:5d:d5:da:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328366

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.212.0/22
                  102.207.84.0/22
                  102.209.140.0/22
                  102.211.180.0/22
                  102.218.52.0/22
                  154.68.176.0/20
                  154.118.244.0/22
                IPv6:
                  2c0f:efe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:cc:6c:2c:bf:f7:ec:58:0a:12:e1:6d:78:18:8d:7f:81:
         e8:27:69:b7:e3:9f:5b:33:b5:46:f2:2d:07:1a:2a:91:d4:bd:
         56:94:41:2e:c5:07:d1:60:0b:cb:a6:db:78:f7:23:e5:bf:5c:
         d6:a6:89:dd:03:cb:00:58:27:5a:1b:52:ee:3c:f7:dd:c3:f0:
         fc:f4:01:29:72:30:59:39:0a:d0:05:2a:60:71:3d:f1:73:cd:
         91:bb:c0:da:c0:bd:a9:77:79:51:28:ea:9d:78:7f:9b:22:2a:
         e8:e1:ec:26:8b:17:83:2d:5d:f5:3e:f6:a4:6e:d7:a3:8f:fc:
         de:d5:74:13:97:65:18:e3:8a:79:8b:ab:a2:79:cc:60:a4:b6:
         a5:ab:e7:ce:1c:7b:eb:5d:5f:d4:c0:7c:a5:17:66:aa:df:da:
         d3:d5:0c:f9:6c:af:94:da:1a:aa:a9:d4:24:b4:4a:5e:7f:f7:
         23:b3:8b:ee:a8:d2:33:a7:60:5a:d2:fb:4d:20:f8:98:b7:90:
         91:07:38:20:42:dc:86:17:09:01:2b:1c:ac:87:86:98:2c:9a:
         06:87:48:42:85:20:ec:ec:7a:9d:ae:33:32:17:d4:69:50:c1:
         34:5b:b1:00:b7:f9:93:ba:fb:99:54:6e:3f:b2:2e:1c:27:fd:
         d9:ee:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org