Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
File:                     t96wG6y7S1p-nHgv_5n9jl3AbLI.cer (raw, json)
Hash identifier:          5fslmOmA+gfwhySnicS/2ljlm0q+oimB5WeD/cd+2io=
Subject key identifier:   B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2368
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:26:23 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328475
                          IP: 102.69.224.0/21
                          IP: 102.211.136.0/22
                          IP: 102.215.4.0/22
                          IP: 102.217.128.0/22
                          IP: 102.218.232.0/22
                          IP: 102.220.36.0/22
                          IP: 2c0f:e818::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9064 (0x2368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:26:23 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:30:04:c0:f5:c1:e5:1f:58:8c:75:c6:6e:
                    27:ec:c5:54:f5:4f:d9:83:54:79:3b:a5:8b:62:98:
                    5a:24:7b:10:0a:7b:35:80:97:ca:ab:07:8f:31:c3:
                    f9:42:a8:95:44:0a:f2:41:c1:fb:81:10:fa:b1:a9:
                    0c:f8:ea:3e:79:fb:eb:a1:be:15:c0:9d:70:b6:df:
                    d2:7d:d8:68:9b:9e:f9:5a:c6:e0:10:d6:c7:35:de:
                    da:96:db:c3:be:76:40:4c:fd:8a:cd:2e:6e:b0:a4:
                    63:03:55:f2:30:71:ed:ef:27:8e:bb:33:b6:73:4f:
                    e2:1b:1a:e0:74:f6:84:9b:f9:81:14:20:30:e3:aa:
                    06:f9:46:e6:35:09:74:34:18:0c:66:2d:9f:da:90:
                    96:d0:95:af:ed:60:ac:e5:a6:ce:14:c0:c3:2a:f1:
                    3b:0e:cf:3d:69:e6:49:c6:25:a6:80:ae:d7:ac:08:
                    28:03:fe:04:55:b5:4c:f7:90:86:e0:83:25:69:97:
                    38:53:9d:1a:46:0e:0c:5f:71:d0:bc:2d:37:2d:74:
                    8c:9f:bd:00:90:d5:e7:38:82:60:0c:49:31:d3:6e:
                    df:7e:8f:22:8b:b3:81:3c:4b:79:75:5c:01:9c:76:
                    3d:5a:e4:62:c4:b5:ec:df:17:b0:b0:ca:e8:64:9a:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328475

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.224.0/21
                  102.211.136.0/22
                  102.215.4.0/22
                  102.217.128.0/22
                  102.218.232.0/22
                  102.220.36.0/22
                IPv6:
                  2c0f:e818::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:47:8d:e1:42:27:10:a9:71:f3:e8:98:e5:64:1a:32:67:
         c8:39:ff:06:d7:4c:d7:2b:f5:24:4e:2e:aa:3d:ab:8a:03:45:
         19:62:0a:a6:cb:aa:91:c6:73:a5:ba:29:91:8b:ff:50:51:c6:
         eb:a2:11:7d:c8:52:ac:c3:6f:72:65:e3:48:5b:48:9d:63:b2:
         7f:a0:5d:20:34:3a:11:88:00:48:5e:3a:d0:ef:fc:e5:f7:53:
         6c:5c:ed:fe:ec:9c:25:8d:18:c9:d1:68:b3:47:d7:36:5e:b2:
         06:c1:d9:26:09:75:47:ac:ed:23:3e:f0:81:bd:d9:83:28:9a:
         00:07:fb:05:43:68:6c:40:7d:b2:c9:5b:05:3a:df:92:bf:6b:
         12:a0:ca:b2:84:1f:84:63:e1:d1:74:b2:cf:eb:20:50:07:7c:
         17:3b:f5:a6:51:91:d0:41:f5:fd:80:1d:02:44:f8:b0:00:22:
         1a:3f:4b:ed:e4:f0:a8:db:4d:de:26:2b:9a:35:91:30:ea:07:
         ab:16:30:20:cf:ee:73:09:df:3a:55:06:5c:f7:c5:59:f1:da:
         42:92:95:c7:e8:34:2d:a7:76:42:a3:7e:80:72:2b:16:a4:35:
         86:38:b8:06:26:d0:e6:a2:26:0b:62:43:2f:01:d0:b0:df:5a:
         02:c9:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:49:57 2024 by rpki-client on console-ams.rpki-client.org