Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer (raw, json)
Hash identifier:          fsM/8Wy0yF45G6Zka2ZqIPRdruiDvT0xUoAFhsJu4mI=
Subject key identifier:   BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2818
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:14:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37578
                          AS: 37704
                          AS: 37770
                          AS: 37786
                          AS: 37789
                          AS: 328100
                          IP: 196.6.220.0/24
                          IP: 196.49.22.0/24
                          IP: 196.60.2.0/24
                          IP: 196.60.36.0/24
                          IP: 196.60.68.0/24
                          IP: 196.60.80.0/24
                          IP: 196.223.21.0/24
                          IP: 2001:43f8:60::/48
                          IP: 2001:43f8:c0::/47
                          IP: 2001:43f8:7b0::/48
                          IP: 2001:43f8:c40::/48
                          IP: 2001:43fc:4000::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10264 (0x2818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:14:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:f3:f8:fc:c0:11:7c:14:a0:53:c5:68:82:
                    60:ee:b5:96:ff:82:27:ff:36:57:e6:45:d3:58:35:
                    12:a9:82:ed:d1:56:dc:bf:97:37:19:69:0e:c3:ff:
                    b0:62:eb:1d:f9:1d:31:44:df:7f:06:33:60:b5:5c:
                    bb:96:dc:8c:44:f4:12:ea:45:af:6a:df:6d:84:56:
                    6f:55:b1:2f:b8:43:e8:1c:52:ec:1c:ce:3d:5b:a8:
                    81:b9:30:2c:4a:8a:56:af:05:e0:ea:cf:48:4d:c1:
                    18:f5:30:e6:7b:8d:71:a5:8c:35:6a:31:bd:7a:bd:
                    99:90:d0:b6:d7:1f:59:59:1b:ed:56:f3:f0:ef:26:
                    7c:8a:80:2f:17:37:77:b7:fa:ba:81:4c:7b:32:ff:
                    a6:08:a5:fb:44:2e:a7:35:e9:8a:2e:59:fe:ee:1d:
                    75:ee:73:5b:63:9e:93:70:5e:67:bb:75:ca:9a:27:
                    dc:2f:87:39:16:28:af:e3:ae:81:37:fe:8a:11:83:
                    8e:84:5c:74:33:a0:9c:db:d7:22:94:e3:10:13:ac:
                    53:16:d5:de:46:0a:db:4f:bc:71:6a:4a:08:48:ae:
                    ca:9c:50:fe:11:30:b7:0e:c6:d7:a2:b8:2e:4b:88:
                    9a:e5:fa:74:57:6d:d7:b3:75:0a:70:77:58:91:cb:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37578
                  37704
                  37770
                  37786
                  37789
                  328100

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.220.0/24
                  196.49.22.0/24
                  196.60.2.0/24
                  196.60.36.0/24
                  196.60.68.0/24
                  196.60.80.0/24
                  196.223.21.0/24
                IPv6:
                  2001:43f8:60::/48
                  2001:43f8:c0::/47
                  2001:43f8:7b0::/48
                  2001:43f8:c40::/48
                  2001:43fc:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:15:a1:ee:42:2c:fa:42:2a:12:3b:2b:da:9a:07:8d:e7:4f:
         11:e8:05:6a:97:9e:04:4a:9e:41:d7:b9:53:4c:d5:94:0e:d6:
         d6:2f:47:dd:40:f5:30:06:7c:9e:da:be:8a:a4:30:e1:6a:3c:
         ca:3d:e2:bb:e4:01:28:4f:95:49:2d:9d:76:f2:02:15:7f:a9:
         bd:d0:61:f9:50:4a:34:5f:11:6e:dd:c1:aa:e0:bc:8d:b2:bc:
         86:eb:c0:99:4d:11:bf:d5:ed:0c:5b:48:6b:4e:48:2d:3d:53:
         23:f4:9b:d5:26:97:c5:09:3d:a5:54:f8:1f:df:5a:5f:bc:41:
         98:82:2c:0b:f5:2b:bb:c3:ee:66:9c:fe:45:4d:bd:b3:13:37:
         1e:ca:15:a7:51:e8:69:15:8d:bb:77:30:d0:be:fb:57:10:d1:
         bd:b7:44:0d:bf:14:b2:65:99:af:e5:33:fc:01:b3:66:3e:f2:
         c1:bf:ba:21:58:8b:21:49:05:56:cd:1a:fe:73:b7:e7:50:41:
         7a:79:ad:f8:67:15:6c:cc:87:88:25:b7:8c:6a:44:3e:05:38:
         80:9f:27:d7:57:36:69:b6:b0:48:98:65:18:6c:a2:c5:bf:ca:
         de:55:5e:2d:27:66:76:11:6e:f3:aa:6f:72:3c:7f:72:e5:24:
         2b:f1:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org