Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.cer (raw, json)
Hash identifier:          hyv4QyOLp58kESn7IFzkJk2xSC3hpPnTEhE74Ps+ilk=
Subject key identifier:   C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2DED
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:09:22 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 20180
                          IP: 154.73.48.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11757 (0x2ded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:09:22 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3639A71AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:00:dc:f2:66:69:92:e3:53:80:7c:94:73:
                    6f:9f:bf:ac:67:af:80:bd:9d:56:dd:8e:6a:fb:70:
                    28:28:cf:a5:b0:76:b1:8b:96:da:71:9b:51:35:18:
                    32:85:49:ad:bd:b1:dc:3a:e7:1a:a6:b8:4c:81:2e:
                    d6:d0:c0:95:c7:5b:11:ec:64:2f:e5:b2:bc:3a:99:
                    06:3b:d3:5f:be:e8:a8:d5:95:db:8f:b8:86:f2:09:
                    d0:8d:e0:c2:9b:fd:30:dd:b2:91:56:f5:8c:c4:95:
                    6a:5f:68:3f:b5:85:c1:7d:24:56:3d:ac:21:76:6e:
                    4c:b3:11:a8:ad:81:89:ba:99:78:3c:06:3d:d9:45:
                    ee:68:c8:c8:58:cf:a5:5c:94:8e:d0:dd:bb:64:49:
                    51:0a:3b:67:67:e6:0a:4e:c2:28:aa:5d:8e:19:dc:
                    c2:d1:a9:46:59:19:fb:d7:c2:e2:9d:f0:2c:57:1c:
                    fe:43:29:85:6a:cc:65:30:a0:88:0b:5a:18:50:13:
                    c9:5d:a7:34:82:b0:a2:8e:55:69:f3:cb:ac:5e:9c:
                    c8:d4:64:c2:e6:e0:0a:5d:65:01:4a:0b:53:e3:83:
                    a3:7b:4a:75:f8:7d:98:e5:a9:31:f8:4e:21:cc:5d:
                    11:63:48:61:2f:3c:d0:7a:65:f8:43:34:d3:27:4f:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20180

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:38:3f:1d:76:47:62:cf:87:cd:3b:9b:7f:f4:07:f4:58:
         a8:92:09:56:d4:a5:72:86:2d:28:a3:96:06:d1:a4:50:a3:06:
         64:3e:17:ff:78:a6:14:16:1c:bb:ab:86:cb:a3:7b:e1:d2:f7:
         7a:46:ce:e3:46:ce:99:2e:92:fb:2e:d5:31:82:20:d6:ce:33:
         9f:b6:b2:30:f0:f8:e7:22:0e:1a:06:43:06:0a:94:90:b8:e5:
         fe:70:ea:0c:70:22:6b:61:00:45:f1:fa:4c:b8:96:a4:33:f5:
         e4:be:18:34:91:7e:f4:a7:a5:3c:9f:55:42:de:e3:cf:47:3b:
         b7:9d:70:eb:48:da:09:c8:39:b7:ec:cb:94:23:4e:74:08:ef:
         f2:f9:75:06:37:14:f2:cb:77:08:d5:b4:d5:10:b6:2e:65:77:
         53:11:bc:7d:b1:37:c4:fd:0b:26:64:e3:7d:94:ed:07:1a:89:
         3a:43:0d:d0:28:a0:f7:96:ae:52:63:8c:01:b7:1a:91:0d:a0:
         fc:9e:06:b1:33:0e:2e:93:4d:e6:d0:2c:01:b0:ce:3d:65:70:
         d5:f4:d2:bd:5a:36:9e:d4:3d:d6:cb:75:3e:dc:c3:ba:24:65:
         de:aa:a5:d9:93:e1:e3:d8:4e:2d:64:d6:ac:20:9c:ef:0c:20:
         e6:17:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:18 2025 by rpki-client