Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
File:                     EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer (raw, json)
Hash identifier:          OacNQCsHjQpNcQbaYXf/jKbrS5BtqYX8aqHoxUeqkWY=
Subject key identifier:   11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A01
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 02 May 2024 00:58:49 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328492
                          IP: 102.68.143.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 May 2024 07:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10753 (0x2a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May  2 00:58:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3692425AF/serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:b6:5a:d2:1b:61:27:17:83:41:7f:a6:fd:
                    ef:99:cb:d5:10:d6:5a:db:b6:48:d9:e3:0d:37:ce:
                    e3:1b:1a:36:28:ad:f1:47:38:35:ae:f1:d1:c1:49:
                    ab:68:56:40:21:e0:ba:d8:a0:52:74:6b:4b:6b:f8:
                    ca:74:e4:60:6f:46:67:09:d8:19:e9:0f:b1:86:2b:
                    72:28:35:20:44:e6:21:37:b1:e2:20:6f:50:48:a2:
                    cc:06:17:83:3d:c5:7f:65:79:f4:8f:f3:22:07:15:
                    25:92:8a:48:6f:81:fb:78:50:6b:51:da:f0:db:ab:
                    18:ed:cd:0e:e2:32:83:57:9d:86:41:59:11:b3:b7:
                    93:88:62:a1:70:2b:9b:c0:d2:df:39:bf:d2:30:1c:
                    bf:04:3b:32:cd:fb:23:26:2e:c1:bb:15:0c:e2:f8:
                    28:72:9f:f6:51:ad:1d:ec:f0:ee:15:cd:07:cc:3d:
                    2b:de:fa:01:f2:96:81:67:85:57:91:98:34:35:22:
                    ab:a9:16:fc:6d:86:ff:58:2e:81:30:db:09:ee:24:
                    ba:8c:ae:3b:ae:8a:c1:4c:2b:be:42:31:93:8f:54:
                    75:bc:4d:9b:54:1c:2f:c4:74:fb:b0:6d:81:fe:8c:
                    e4:b0:9b:94:3e:90:26:97:0b:b4:05:97:a0:77:41:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328492

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:09:87:7a:cc:38:c7:11:2a:23:d5:f4:bc:4f:52:08:e8:
         a8:d2:ef:25:b6:1f:af:c4:15:56:fd:c7:30:0d:fd:0c:7c:5a:
         c8:93:76:49:2f:e3:bd:a2:01:eb:f3:ef:73:db:53:f0:0f:d9:
         aa:60:c2:02:54:15:85:db:cf:c0:2f:ad:b7:69:49:ba:56:23:
         09:de:46:6e:12:9d:91:29:c6:3e:ed:1d:7e:a9:f8:f6:08:86:
         61:bb:e7:3b:d8:1d:44:b7:3c:b9:34:7f:74:82:d2:95:f0:2c:
         81:93:b7:f6:b3:40:e8:7a:67:d8:61:79:ef:8b:62:8a:6b:0d:
         f8:bc:ec:30:62:66:c5:9d:57:79:a4:fc:41:97:38:5c:4f:fa:
         b2:2e:11:a9:e9:d3:f2:72:5d:50:18:5f:9c:c3:3b:fb:9a:2c:
         c1:0d:20:3d:8c:32:14:81:b0:72:b3:f3:a6:82:1d:d5:cb:da:
         44:c8:b2:f3:83:82:6e:5c:a4:d2:3f:c1:eb:5c:46:b4:57:3f:
         7b:15:47:70:a7:15:62:01:72:7c:3f:dc:74:65:25:e5:aa:da:
         9b:50:d5:95:00:e1:43:31:5f:9f:88:4f:41:7d:97:90:11:fb:
         f6:d7:f1:d6:32:f8:ac:fe:b9:46:40:69:8d:72:e3:75:81:b4:
         a7:6f:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:15:48 2024 by rpki-client on console-fra.rpki-client.org