Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
File:                     vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer (raw, json)
Hash identifier:          y7I8EN9L8ANxGko2vQgjurlYzxycxAdbyf64D6Vte5w=
Subject key identifier:   BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2847
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:21:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37254
                          IP: 41.76.216.0/21
                          IP: 102.69.168.0 -- 102.69.179.255
                          IP: 102.222.196.0/22
                          IP: 2c0f:f4a8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10311 (0x2847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:21:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:57:c6:1f:45:b0:9e:d0:19:e3:14:cb:7e:
                    a4:d2:07:0e:12:f8:04:ad:e6:a7:8f:f2:79:02:65:
                    3d:cf:38:bf:55:8b:cd:61:30:b9:46:3d:6f:6d:2f:
                    14:b2:e8:dc:33:79:4e:a3:f4:1d:bd:92:99:b4:67:
                    12:b6:9b:31:a8:df:9c:53:16:4c:83:04:7f:e8:05:
                    05:18:6e:5b:e9:f8:2d:43:1c:40:3a:6a:97:89:ca:
                    bd:bb:d1:37:44:88:8e:86:cf:b1:fa:b0:99:d6:7a:
                    25:9c:f6:07:74:ef:29:07:19:e9:c9:49:a4:f2:f9:
                    cc:19:0c:eb:95:84:c0:b5:da:94:63:00:f5:1b:e5:
                    b0:84:e9:16:27:06:ef:42:e9:cc:81:f8:32:95:9b:
                    db:ac:9e:4a:89:99:d5:9a:f0:85:74:70:22:61:98:
                    41:37:82:2c:a6:2d:ed:7e:9c:52:e4:3c:d8:4f:2d:
                    43:dc:7f:ae:49:b9:c0:73:63:a4:58:c7:12:cd:c6:
                    d2:a5:b7:f6:8a:97:82:26:fb:e4:0d:8d:76:d8:59:
                    8b:38:76:e3:d9:87:75:44:48:8b:f4:e2:e1:e1:94:
                    ac:d7:1e:da:fc:01:73:2d:9e:99:d1:fa:6b:55:bb:
                    65:5c:40:a1:7d:fc:e7:7e:3e:49:77:16:a0:63:61:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37254

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.216.0/21
                  102.69.168.0-102.69.179.255
                  102.222.196.0/22
                IPv6:
                  2c0f:f4a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:30:98:c4:10:27:f4:96:52:88:4f:f0:8b:a3:8d:be:a9:a7:
         c1:04:3e:1a:2f:cd:da:22:bc:b5:95:8c:ca:41:46:d7:11:9c:
         ec:50:1d:05:27:2d:19:89:b5:d3:c1:fb:9f:3e:1f:18:34:4f:
         70:5c:27:aa:02:0d:31:bc:7e:25:62:38:d0:6a:c6:98:9f:68:
         51:8e:80:92:78:1a:bb:d7:5d:d3:db:11:48:b9:79:0a:ce:c0:
         66:88:7f:fd:ad:9a:44:5e:02:69:a3:29:f5:5d:4b:f7:f8:1a:
         ed:ee:2d:6e:61:14:46:da:51:a3:27:98:72:b4:91:2a:f0:ee:
         56:d8:37:31:69:16:c5:7d:42:15:a4:08:de:0d:36:d2:6c:32:
         2c:fc:32:ad:9f:79:3f:b1:fe:d0:de:11:4c:79:5d:9c:ba:a8:
         f6:3a:3d:26:ee:06:b6:61:30:27:f3:c1:5c:63:8a:b2:97:99:
         61:78:f7:c3:a0:9a:ab:31:e4:8c:5e:b0:47:89:74:d2:39:f4:
         f9:90:99:e9:4f:da:1a:ae:11:dd:77:51:de:a5:70:11:7e:81:
         95:37:6d:c9:84:15:4e:ac:72:56:a3:fa:b1:31:7e:83:b7:a5:
         10:80:9f:94:b6:1d:2c:a5:dd:67:76:d2:30:a0:73:44:11:97:
         54:cc:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:23 2024 by rpki-client on console-fra.rpki-client.org