Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.cer (raw, json)
Hash identifier:          qKTZG//Opf7M4DwPGRfkxe9Yl65gjiiR1eW//R0OtqM=
Subject key identifier:   C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:18:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 30984
                          AS: 37282
                          AS: 37783
                          AS: 328395
                          IP: 41.75.80.0/20
                          IP: 102.217.180.0/22
                          IP: 154.113.0.0/16
                          IP: 196.49.62.0/24
                          IP: 196.60.58.0/24
                          IP: 196.200.64.0/20
                          IP: 197.253.0.0/18
                          IP: 2001:43f8:11f0::/47
                          IP: 2c0f:fc98::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9897 (0x26a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:18:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:c4:41:ce:66:68:13:b7:9c:af:00:48:62:
                    76:d0:7b:35:95:71:d3:d4:0f:ca:49:d3:8d:eb:70:
                    6c:a9:1b:63:65:ff:d8:64:ae:03:8c:a1:79:84:9c:
                    b4:8a:84:30:f0:f7:95:96:55:b9:a2:2e:76:d4:75:
                    d9:2a:e5:6f:ec:92:e9:7c:97:18:6c:84:de:9c:7e:
                    c8:7a:c0:55:e8:7f:17:0c:d2:e5:6f:dc:1d:9c:00:
                    02:25:b2:cc:80:8a:c1:e9:c6:92:87:f6:61:09:08:
                    5e:e0:d0:ab:ed:4d:e6:75:d2:39:92:f8:5a:63:84:
                    cc:80:ff:1e:00:29:54:12:b7:02:f1:95:fe:dd:18:
                    e8:69:09:46:97:e0:82:0a:dc:86:80:b8:45:f1:a1:
                    e8:de:66:f1:1f:f7:da:7e:21:13:5a:c3:4f:69:bf:
                    9a:f0:a2:98:0a:14:e5:2d:f1:8d:88:e0:d3:cf:e7:
                    c5:11:04:06:b7:7c:04:42:0a:f8:09:f7:c4:41:6c:
                    a4:b4:69:7e:cb:d2:a7:9d:87:f5:d0:cb:bd:99:f3:
                    fd:9a:10:db:96:9f:70:6e:fb:db:17:21:7c:90:e0:
                    b9:06:cf:0e:82:45:4b:96:da:2e:0c:c5:eb:54:2f:
                    af:6a:b2:fc:e6:bd:e4:7e:2f:de:7d:68:4f:f3:63:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30984
                  37282
                  37783
                  328395

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.75.80.0/20
                  102.217.180.0/22
                  154.113.0.0/16
                  196.49.62.0/24
                  196.60.58.0/24
                  196.200.64.0/20
                  197.253.0.0/18
                IPv6:
                  2001:43f8:11f0::/47
                  2c0f:fc98::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:bf:96:3c:af:f5:1c:27:29:08:c1:31:0f:b7:60:a5:c0:
         db:0d:16:e9:88:a8:01:28:9e:79:a3:37:b0:3e:82:f2:5b:00:
         a9:29:db:51:33:4e:56:c7:cc:04:66:39:81:28:5f:58:b8:63:
         ec:9f:f8:99:c6:f5:95:31:60:39:8b:cf:58:fd:88:46:69:f5:
         85:44:9f:f7:0d:57:bc:1f:c3:5d:d9:34:09:a3:16:bb:bf:ec:
         bd:90:76:a2:a3:60:17:0a:1f:99:ba:0f:80:57:84:70:2e:ca:
         86:f0:2f:c2:21:68:e7:36:1b:e5:b2:39:0b:68:6e:c4:47:30:
         94:46:22:ac:5c:13:fb:a3:40:bf:ad:79:40:b2:e6:20:b1:d8:
         4a:a0:78:1c:0e:b3:72:63:f6:75:00:49:e4:c3:17:c0:be:da:
         9b:0e:45:d3:62:f2:f1:dc:40:e4:81:9e:01:ad:27:f4:b2:71:
         eb:a3:47:1f:55:e3:dc:2e:ef:34:6c:6f:8f:7a:4b:2a:b9:9d:
         10:10:a3:43:be:4b:3a:47:23:61:89:ab:8f:aa:f5:0f:c7:37:
         40:f5:21:54:84:2b:4f:7b:43:09:a9:7f:6e:8c:1b:15:b6:79:
         6e:12:f9:40:b3:2e:b2:67:c2:0c:b0:64:ea:cf:70:09:16:31:
         b3:20:6e:1f
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgICJqkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzE4MTlaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjk4REQwQUYxMTAvBgNVBAUTKEMwM0ZERDY5NEY1MUFBRTM4RjA1MTQ1
NjEwMTYxN0M1NkZEODlDNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCunMRBzmZoE7ecrwBIYnbQezWVcdPUD8pJ043rcGypG2Nl/9hkrgOMoXmEnLSK
hDDw95WWVbmiLnbUddkq5W/skul8lxhshN6cfsh6wFXofxcM0uVv3B2cAAIlssyA
isHpxpKH9mEJCF7g0KvtTeZ10jmS+FpjhMyA/x4AKVQStwLxlf7dGOhpCUaX4IIK
3IaAuEXxoejeZvEf99p+IRNaw09pv5rwopgKFOUt8Y2I4NPP58URBAa3fARCCvgJ
98RBbKS0aX7L0qedh/XQy72Z8/2aENuWn3Bu+9sXIXyQ4LkGzw6CRUuW2i4MxetU
L69qsvzmveR+L959aE/zY4QZAgMBAAGjggNUMIIDUDAdBgNVHQ4EFgQUwD/daU9R
quOPBRRWEBYXxW/YnEowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5OEREMC81NkM4RUE0QzY2Nzcx
MUVEOTY3RkMwQTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OThERDAvNTZDOEVBNEM2Njc3MTFFRDk2N0ZDMEEyRjEyMjI0Njgvd0RfZGFV
OVJxdU9QQlJSV0VCWVh4V19ZbkVvLm1mdDAoBggrBgEFBQcBCAEB/wQZMBegFTAT
AgJ5CAIDAJGiAgMAk5cCAwUCyzBaBggrBgEFBQcBBwEB/wRLMEkwLwQCAAEwKQME
BClLUAMEAmbZtAMDAJpxAwQAxDE+AwQAxDw6AwQExMhAAwQGxf0AMBYEAgACMBAD
BwEgAUP4EfADBQAsD/yYMA0GCSqGSIb3DQEBCwUAA4IBAQCfJr+WPK/1HCcpCMEx
D7dgpcDbDRbpiKgBKJ55ozewPoLyWwCpKdtRM05Wx8wEZjmBKF9YuGPsn/iZxvWV
MWA5i89Y/YhGafWFRJ/3DVe8H8Nd2TQJoxa7v+y9kHaio2AXCh+Zug+AV4RwLsqG
8C/CIWjnNhvlsjkLaG7ERzCURiKsXBP7o0C/rXlAsuYgsdhKoHgcDrNyY/Z1AEnk
wxfAvtqbDkXTYvLx3EDkgZ4BrSf0snHro0cfVePcLu80bG+PeksquZ0QEKNDvks6
RyNhiauPqvUPxzdA9SFUhCtPe0MJqX9ujBsVtnluEvlAsy6yZ8IMsGTqz3AJFjGz
IG4f
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org