Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer (raw, json)
Hash identifier:          PJVj2SsdkyTm5IA8MygEV0tQZDTgvdmQO+TqrqUBeMg=
Subject key identifier:   C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       30AB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:32:32 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328133
                          IP: 196.251.152.0/22
                          IP: 2c0f:f018::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12459 (0x30ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:32:32 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36897F5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:a6:ee:d5:ef:16:cb:a0:8b:ee:ce:9f:50:
                    41:d6:5e:73:01:e4:2b:1a:4f:1d:58:49:69:77:05:
                    b6:76:bb:6e:06:2c:9f:3e:d9:a8:49:5d:06:7d:58:
                    c7:82:0d:ab:87:b0:44:f6:5a:4c:46:81:17:fc:85:
                    c7:13:b7:79:63:5f:b1:5e:38:33:ae:fe:25:76:3a:
                    f5:2e:d2:f2:3a:b6:a0:e6:33:6e:0c:e7:77:69:40:
                    df:66:22:90:53:da:d7:8e:3f:45:ed:92:6a:d8:b1:
                    22:ff:70:d7:25:08:06:b2:42:67:e8:f0:03:fa:ab:
                    9f:d9:52:99:ea:3c:79:9c:96:d1:9b:ab:11:19:b0:
                    1e:c6:99:cb:2b:ab:ad:92:52:0c:a9:aa:eb:3b:58:
                    72:24:4a:94:15:d2:8d:2d:1a:de:c4:e7:fb:7d:fe:
                    22:03:66:3b:86:1f:49:dd:75:ae:f3:f5:56:af:a3:
                    c7:d1:8d:91:5d:22:68:58:8d:c4:1d:bd:02:b8:1b:
                    53:0c:ad:b6:55:20:35:ce:74:5e:2a:6c:31:bd:dc:
                    b7:b2:fe:f5:fd:0d:8b:86:c5:99:66:32:5e:f1:7d:
                    0c:fa:f1:cc:48:67:8e:18:e3:51:ab:e6:bc:eb:66:
                    c7:d2:64:da:05:cc:e9:6b:a5:c5:ff:93:63:f5:84:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328133

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.152.0/22
                IPv6:
                  2c0f:f018::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:f0:96:26:03:ba:38:48:2d:b1:0b:46:7d:8b:16:a8:df:
         8c:dd:4e:26:ae:b9:0f:7c:32:44:f6:dc:79:35:7a:c5:81:0c:
         28:d9:3f:68:a4:60:da:63:6f:23:7a:63:e4:66:11:39:6b:ac:
         09:02:00:4a:8e:11:1f:89:4b:6f:d3:aa:8b:4d:71:90:46:b9:
         36:42:42:51:8d:cf:bb:3f:08:fd:f2:3e:dc:28:4c:37:49:9e:
         0e:91:15:a6:ae:cc:54:63:9e:03:79:aa:1e:58:4e:d2:69:24:
         e1:81:79:6b:80:15:2a:a5:f7:7e:1c:3c:aa:49:89:c4:45:7a:
         51:d9:86:d5:1a:4a:aa:3d:c3:94:41:04:33:01:36:c1:e2:c0:
         0f:88:86:d5:24:c0:8a:3a:18:e3:73:67:dd:ba:0e:52:64:35:
         64:be:a5:94:46:c1:7b:4f:15:bf:0b:0b:15:92:55:b2:9e:46:
         d6:0c:e2:ed:43:4b:28:7e:6e:4d:47:f3:df:d5:a8:94:7f:d7:
         da:0e:de:f3:5b:15:93:1b:d9:a7:56:b4:37:e2:85:ea:81:08:
         c1:7a:38:74:c6:b2:27:63:93:1c:db:43:5b:0e:6d:49:53:54:
         8e:54:82:36:62:07:5f:48:70:5d:61:76:51:b3:77:1f:d2:da:
         4c:b4:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:33 2025 by rpki-client