Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.cer (raw, json)
Hash identifier:          7gRG1zXMD8UnzQ7sYWgvvau8jS+X5pNowf5aYgMUlP8=
Subject key identifier:   99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A0B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 06 May 2024 15:33:21 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328723
                          IP: 102.209.84.0/22
                          IP: 102.222.20.0/22
                          IP: 2c0f:e990::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10763 (0x2a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May  6 15:33:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:fe:ee:14:97:e3:b7:f5:ec:bb:f2:11:c4:
                    d6:ee:aa:d3:99:c1:39:50:64:d6:a2:05:e7:a5:be:
                    09:84:de:a1:7a:c3:98:86:f3:bd:24:2b:db:b2:a5:
                    bb:1f:cf:81:f9:c4:0c:d2:9e:09:37:e6:50:3b:e6:
                    4f:02:b5:24:e8:ed:d8:bd:0e:6b:c1:99:a0:a6:b6:
                    b2:fa:b2:43:e0:ba:03:f3:63:f5:a4:71:27:b8:6b:
                    fb:82:0f:67:4d:cc:85:2d:78:5b:60:7a:f2:32:ac:
                    58:5f:09:5f:ce:e8:7a:53:f4:f7:bf:fe:df:7f:0c:
                    5c:51:e7:df:29:d3:52:e2:8f:9d:44:3c:70:a3:f9:
                    ce:dd:95:28:5c:12:e9:20:5c:13:5e:ce:80:60:f9:
                    ea:d0:23:b7:d8:70:f3:29:09:01:05:63:a2:dd:16:
                    7a:18:02:86:74:2f:9d:55:bc:c3:e1:23:08:26:f7:
                    c6:aa:ce:15:7e:52:71:03:7b:72:0a:34:3d:9f:41:
                    f1:15:5f:51:d2:30:c8:b7:c3:be:66:3e:7b:94:97:
                    8a:5f:23:d9:1b:01:f9:e8:aa:b7:55:13:60:77:b0:
                    1f:f7:d7:5a:0d:e8:08:f2:05:3e:83:0c:85:87:37:
                    10:63:ed:d5:30:e8:22:5a:f7:f0:1d:61:f1:58:c9:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328723

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.84.0/22
                  102.222.20.0/22
                IPv6:
                  2c0f:e990::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:34:39:2c:b9:cf:84:67:f6:9d:91:cf:2e:17:d5:a4:b7:
         be:a4:d1:1c:8b:02:9d:38:bc:5f:7e:55:43:39:fc:a4:8c:99:
         70:15:07:bb:cc:72:1c:f6:ab:81:bc:0f:98:98:17:e9:5d:8e:
         a6:92:fc:7f:92:aa:d3:01:3a:32:0a:2a:ec:ca:3c:6a:03:e2:
         ec:93:f6:34:3d:2f:24:8f:62:c2:f2:0f:16:3b:b9:22:4f:74:
         de:40:d8:ea:ab:5b:38:7d:77:bd:90:63:00:64:dc:1d:12:7c:
         b0:46:45:00:0e:ec:7d:fc:5e:0f:a8:f4:15:6f:80:62:80:b1:
         11:07:a3:16:88:e2:56:6e:48:70:4b:ab:7d:db:68:46:87:ab:
         7b:fb:93:bd:4a:44:31:dc:7e:dd:b8:81:cd:82:9e:ad:00:ca:
         50:b9:f6:4d:b4:dc:23:88:fa:a0:49:94:9f:c6:18:a0:4c:4a:
         99:f6:13:0d:79:4c:cf:26:28:24:b0:1b:88:52:fe:9a:41:c9:
         3a:14:43:84:5a:56:8c:00:f2:63:84:66:96:fb:10:e7:45:a9:
         37:e3:33:26:0b:93:de:34:83:ef:ce:e1:8e:1f:0d:1c:d8:84:
         6a:3c:eb:a0:4f:fd:a7:22:d2:37:50:64:3a:58:97:b9:f4:e3:
         22:fa:61:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:26 2024 by rpki-client on console-ams.rpki-client.org