Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer (raw, json)
Hash identifier:          dyQFwclUes7w0rZmpNb2kuaYa/Ki4nGsTRGlCLPsZ9A=
Subject key identifier:   C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28AC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:37:09 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 36965
                          IP: 41.73.160.0/19
                          IP: 41.221.48.0/20
                          IP: 2001:43a0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10412 (0x28ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:37:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:eb:24:1d:1b:21:64:3c:4c:71:78:6c:2d:
                    47:e8:97:c9:98:04:b9:dd:6a:ed:eb:93:4d:9f:02:
                    38:bb:df:f2:9b:a0:9e:26:a4:6f:4c:cf:8c:0c:73:
                    19:dd:5c:26:3c:9a:b3:66:9b:df:07:34:2c:65:70:
                    01:f0:85:81:45:c5:66:fd:c7:34:4e:f3:f9:70:9d:
                    02:ab:a2:1a:a5:38:5e:8b:d1:b1:0a:53:85:7d:ea:
                    5e:fe:01:13:2a:f0:d2:86:a5:59:53:98:5c:02:a6:
                    46:f9:0e:71:04:71:76:c3:91:52:17:fa:8d:64:1c:
                    d7:fa:05:01:98:6f:2a:88:f4:a9:9b:15:89:1b:7f:
                    b5:bb:46:42:ef:98:fb:ab:9a:83:e4:12:32:d7:6d:
                    6e:44:91:7f:a9:27:c5:d3:70:8a:9c:b8:f9:e7:7b:
                    71:f1:db:c6:ea:84:0e:ed:7c:be:11:83:a1:8d:b9:
                    da:91:66:53:d0:a0:f1:09:dd:fb:6e:68:e5:6d:13:
                    62:c4:ce:6c:c0:3c:92:14:9f:42:61:8b:12:87:f1:
                    72:5f:22:1a:80:b6:2e:f0:2e:bd:dc:08:54:8b:f6:
                    6f:d8:37:e4:d8:ca:11:17:d9:06:32:0b:9f:23:20:
                    b8:9e:5a:a8:67:f9:6d:c4:d4:91:03:66:5a:a6:54:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36965

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.73.160.0/19
                  41.221.48.0/20
                IPv6:
                  2001:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:63:54:d2:48:94:9e:aa:e2:11:a7:9d:ec:6a:99:da:b2:86:
         fd:95:e0:9a:dd:3f:9c:3d:d8:ad:85:39:da:8c:a1:32:ef:23:
         2f:b7:b1:6b:1f:b6:2d:8d:5f:e2:af:6e:e2:79:10:7e:72:97:
         29:ea:4c:2e:2b:9c:b2:cb:4c:52:cc:e3:95:af:72:dc:84:cf:
         8f:f5:95:3d:fe:6e:0d:85:bd:cb:5b:45:ef:b7:4a:78:c5:4f:
         41:ba:4f:83:17:c4:6f:aa:00:e5:cb:aa:5d:d1:1b:43:c2:22:
         81:e3:e4:1b:ba:30:7d:9d:f8:5e:ce:a8:75:e4:26:e2:1d:bc:
         d9:66:7a:b7:23:94:ef:22:e1:6e:24:da:c8:49:1a:ec:ac:49:
         64:43:9c:d9:c0:1d:a5:2b:ab:34:60:82:c1:f0:34:37:00:a1:
         b1:99:6a:bb:f0:f7:90:05:8b:ae:84:44:f9:fe:77:80:87:99:
         0c:08:d0:64:3d:55:64:c8:79:27:73:f6:8c:35:23:db:aa:e6:
         47:5d:d6:e1:04:d9:49:05:68:85:c6:02:12:f3:45:75:31:5c:
         b6:fc:03:11:50:e1:f1:b9:ef:73:e9:0b:a8:4d:24:b7:30:f8:
         b6:3b:fb:d6:b0:50:b1:f2:93:dd:f1:4c:7c:e1:bb:bc:d9:0d:
         d8:92:b6:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org