Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.cer (raw, json)
Hash identifier:          aERodOhtSnLS9sUZ82hyNapSKq51fitBBczJq+I+U1U=
Subject key identifier:   CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2560
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:52 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327693
                          IP: 41.76.224.0/21
                          IP: 102.67.176.0/21
                          IP: 154.73.184.0/21
                          IP: 2c0f:f708::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9568 (0x2560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:30:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:f7:3b:a5:6e:10:87:52:12:d5:95:4d:30:
                    4d:d4:ea:16:d7:a6:2d:ba:8c:07:bf:f6:f8:86:27:
                    87:18:c5:9a:20:c1:07:13:ff:09:9f:33:e9:fd:25:
                    17:1c:37:c8:bf:24:d1:74:98:60:de:de:24:cf:51:
                    5a:d8:e1:ba:00:7a:4c:a9:42:d5:66:fb:ce:cc:b1:
                    30:40:26:af:74:a9:47:dc:ae:18:09:f0:d7:94:4f:
                    5f:21:3d:53:f1:91:d6:f2:b4:78:56:7a:1c:8e:4d:
                    a4:36:2f:a7:b6:6e:e3:d5:50:c8:72:17:29:cd:72:
                    26:f1:6c:e1:db:2e:25:14:8a:ef:29:ff:8c:01:43:
                    0c:92:33:95:53:0e:a7:1c:0d:14:d7:fc:61:6c:30:
                    04:d3:4c:18:31:b4:eb:cd:b7:fd:a9:cb:da:a2:8e:
                    fd:09:e6:06:f0:30:65:f0:53:a7:34:3d:7f:2a:01:
                    8f:ff:35:82:44:ad:53:b2:ec:b1:70:80:2d:ad:5a:
                    24:00:d0:d2:af:f3:56:44:79:bc:ee:c5:55:ad:33:
                    1d:dc:23:48:58:8a:60:f6:74:0e:5b:37:e2:1e:a2:
                    58:c5:cb:ff:c7:f3:19:17:4f:e5:a2:5f:89:91:dc:
                    85:44:79:15:57:4b:af:1d:8a:69:d7:d0:70:bb:1a:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327693

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.224.0/21
                  102.67.176.0/21
                  154.73.184.0/21
                IPv6:
                  2c0f:f708::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:52:a9:eb:96:1e:5f:48:75:15:4c:88:9a:cf:cf:eb:34:b4:
         99:44:5b:19:3a:00:e6:26:aa:8e:af:bb:ed:09:b0:19:c8:4c:
         10:81:fc:a1:84:90:3f:20:93:20:13:fc:d5:81:87:d5:1d:84:
         6b:15:d2:83:40:0d:16:1f:e9:96:a8:ba:e3:a4:e6:06:88:7c:
         ff:7e:26:bc:74:fb:d1:29:19:89:19:4f:71:5f:9b:8f:26:ac:
         73:5f:ee:6a:8f:9b:c2:bc:1f:37:62:20:93:73:2b:18:a4:44:
         dd:8a:e2:76:d4:d7:55:51:0e:90:91:93:db:3f:4a:06:e5:2b:
         6d:06:31:34:46:f6:fa:1c:c8:e4:a4:81:f7:62:8d:13:0d:7f:
         17:fb:0b:88:6c:27:38:c4:07:a9:30:a8:75:c2:c3:aa:3e:ba:
         1c:9f:bd:6a:3a:bc:e3:2d:ac:28:96:ce:18:9e:d5:f8:41:b9:
         fe:aa:cc:6a:8e:3f:84:fe:c2:9f:2c:58:68:45:8b:3d:e7:5d:
         f1:5c:78:88:d2:83:b3:cd:c0:50:08:f9:07:da:01:14:c8:13:
         da:49:f7:04:34:c4:e2:3f:3c:b6:d7:d3:9f:1b:9d:a4:04:ca:
         92:80:c6:14:62:5d:9b:8e:6f:da:25:9a:0e:6f:8c:17:31:42:
         8e:66:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:33 2024 by rpki-client on console-fra.rpki-client.org