Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.cer (raw, json)
Hash identifier:          jPpKBD/oW6IeQSVxZWb4um3dfxTZtJvm8OPe2qefHCA=
Subject key identifier:   C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28D6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 07 Jan 2024 11:45:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 20180
                          IP: 154.73.48.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10454 (0x28d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  7 11:45:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:00:dc:f2:66:69:92:e3:53:80:7c:94:73:
                    6f:9f:bf:ac:67:af:80:bd:9d:56:dd:8e:6a:fb:70:
                    28:28:cf:a5:b0:76:b1:8b:96:da:71:9b:51:35:18:
                    32:85:49:ad:bd:b1:dc:3a:e7:1a:a6:b8:4c:81:2e:
                    d6:d0:c0:95:c7:5b:11:ec:64:2f:e5:b2:bc:3a:99:
                    06:3b:d3:5f:be:e8:a8:d5:95:db:8f:b8:86:f2:09:
                    d0:8d:e0:c2:9b:fd:30:dd:b2:91:56:f5:8c:c4:95:
                    6a:5f:68:3f:b5:85:c1:7d:24:56:3d:ac:21:76:6e:
                    4c:b3:11:a8:ad:81:89:ba:99:78:3c:06:3d:d9:45:
                    ee:68:c8:c8:58:cf:a5:5c:94:8e:d0:dd:bb:64:49:
                    51:0a:3b:67:67:e6:0a:4e:c2:28:aa:5d:8e:19:dc:
                    c2:d1:a9:46:59:19:fb:d7:c2:e2:9d:f0:2c:57:1c:
                    fe:43:29:85:6a:cc:65:30:a0:88:0b:5a:18:50:13:
                    c9:5d:a7:34:82:b0:a2:8e:55:69:f3:cb:ac:5e:9c:
                    c8:d4:64:c2:e6:e0:0a:5d:65:01:4a:0b:53:e3:83:
                    a3:7b:4a:75:f8:7d:98:e5:a9:31:f8:4e:21:cc:5d:
                    11:63:48:61:2f:3c:d0:7a:65:f8:43:34:d3:27:4f:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20180

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:dc:97:f0:d9:e2:c7:f7:3a:ee:fe:c9:f7:a3:e2:aa:ad:2f:
         94:8a:2f:28:f7:e4:e3:b8:e2:66:a0:8f:f8:86:a6:98:31:a9:
         bc:be:01:32:db:ff:b0:d7:ae:b8:37:88:01:dd:70:17:cf:f9:
         33:f9:41:9f:32:d6:a0:ea:a4:ff:f8:e3:ab:9c:65:4c:20:fa:
         55:1a:c1:ae:bb:c2:f0:8a:2c:89:e9:bb:9a:7f:0e:37:2f:59:
         56:5e:ef:88:3a:66:71:3f:86:cb:aa:f4:cd:b1:30:fb:5d:9a:
         6d:fa:28:03:5f:79:cf:5f:e5:87:50:07:1d:c7:b6:ad:f0:9c:
         0b:7d:a6:1c:46:76:c9:83:28:80:15:46:a1:bb:dc:7f:5e:71:
         8a:72:86:2b:83:ef:58:cb:64:2a:14:14:a7:e3:85:4a:11:60:
         e6:c4:fa:e2:db:ba:07:be:40:53:88:dd:51:f7:bb:42:a6:49:
         47:84:40:0f:36:18:2d:97:5f:42:37:e0:ea:9d:25:52:85:0e:
         17:26:47:6d:26:82:4b:d9:cf:66:ca:c0:d5:b7:1a:dc:5b:0e:
         f1:33:9c:8a:38:6a:20:59:54:02:92:27:97:0b:4f:e4:81:ba:
         02:0f:2e:94:b0:bd:6b:59:61:90:8f:14:a6:91:86:67:04:e5:
         2b:7d:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:14 2024 by rpki-client on console-ams.rpki-client.org