Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
File:                     xwJ5nqS9Xbo-09BppxkblBtad5o.cer (raw, json)
Hash identifier:          lEY8uslW6dXL+LrBN7FGy6unrMsv8bqHXBcMnYp8Yo0=
Subject key identifier:   C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25D5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:47:14 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37518
                          IP: 196.48.0.0/16
                          IP: 196.56.0.0/14
                          IP: 196.196.0.0/14
                          IP: 196.240.0.0 -- 196.245.255.255
                          IP: 196.247.0.0/16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9685 (0x25d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:47:14 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:75:b6:ce:8d:4f:1a:7b:e1:d8:8b:17:f0:
                    3b:d0:5c:9b:5a:62:20:47:cf:76:8b:c4:c8:91:d2:
                    03:d8:4e:be:b7:a5:15:2f:89:0a:f8:88:8d:e5:c5:
                    b6:2d:68:61:a5:74:d8:07:11:0f:0b:85:0a:4b:46:
                    06:0f:6c:c0:7b:be:98:86:7a:de:56:22:c7:e7:7f:
                    3b:42:7b:8f:4f:cf:bf:eb:57:bc:17:8a:1d:74:4b:
                    86:3e:81:1f:af:0d:ce:ec:6a:cd:30:be:70:ae:bd:
                    01:47:5c:32:e0:d6:aa:24:37:0f:77:a2:33:6b:e3:
                    e0:7b:2a:30:47:f6:ec:2c:49:a4:08:f0:9f:9a:56:
                    7c:58:7a:31:ec:32:d9:83:77:b1:ac:8e:04:1b:ee:
                    5c:05:01:50:f2:e8:aa:3c:40:c6:b1:2e:bd:b0:46:
                    45:cb:41:db:97:ea:19:ae:4d:3d:16:b8:52:68:ed:
                    88:10:f6:4e:3c:d6:48:76:d5:59:72:2d:43:b6:ac:
                    26:d4:56:27:a0:da:a8:49:f6:5c:0f:36:80:a3:85:
                    35:40:5f:41:e0:4c:45:98:34:8c:0b:9d:8e:b5:07:
                    97:8a:6a:8b:d8:b3:ac:45:d7:19:fa:6d:f2:a2:e6:
                    fd:f0:1a:31:fd:40:52:d7:5f:82:c9:ce:89:e7:e8:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37518

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.48.0.0/16
                  196.56.0.0/14
                  196.196.0.0/14
                  196.240.0.0-196.245.255.255
                  196.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:68:b6:1d:ba:e9:a8:87:77:33:21:15:f6:43:71:a0:15:4a:
         cc:c7:d6:bd:43:da:c9:a2:5c:c4:ab:79:79:48:60:03:60:34:
         09:e9:d2:0b:0a:2f:33:cb:5a:eb:1e:95:1a:65:bb:aa:25:d2:
         0d:df:fc:bd:80:46:0f:08:c0:03:d9:13:5c:32:96:74:92:d1:
         25:14:d5:b6:40:b5:1e:69:25:05:1f:5b:d1:84:02:53:da:6f:
         09:3c:9f:be:d4:89:6d:84:ff:94:a6:ba:23:7a:ad:86:55:d1:
         81:63:79:1c:1d:1c:d8:1d:3a:bf:af:93:75:d1:6b:ce:1d:08:
         c6:4a:81:c0:55:d5:3a:ef:e9:8f:da:8b:c9:d4:43:52:af:8e:
         eb:72:dc:82:2e:7e:c4:f2:fa:28:97:14:88:d0:44:8d:f4:94:
         ee:a5:15:21:f9:34:05:62:bb:b6:ec:78:61:f2:90:25:33:a2:
         79:07:bd:b1:70:05:3e:77:22:74:4b:4a:65:86:07:b4:23:fb:
         35:3b:4c:73:b1:74:03:f3:ca:41:49:8f:4f:5f:4b:10:b1:e4:
         91:77:b5:87:b5:60:3f:dc:2c:8c:42:af:a5:4c:46:c4:ed:01:
         7e:4a:41:8e:ef:a4:79:1d:53:f1:65:b0:53:17:81:cf:27:f4:
         6c:c5:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:07 2024 by rpki-client on console-ams.rpki-client.org