Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
File:                     v2DdGbZCZae1tFPwFbi4pgtCmM8.cer (raw, json)
Hash identifier:          h/qF7gu3Xp4iwluvSmURhU6v+FjUFxNikmqYsjTXQYI=
Subject key identifier:   BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A04
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 03 May 2024 08:17:55 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329157
                          IP: 102.214.96.0/22
                          IP: 2c0f:4d80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10756 (0x2a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May  3 08:17:55 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:e2:05:2a:4c:eb:a6:f4:bd:af:35:11:1a:
                    37:ae:12:3a:af:83:9d:0f:cc:23:86:29:55:fd:a3:
                    60:dd:9f:17:e8:5d:f1:fc:ea:d1:cd:d1:23:5e:6b:
                    80:7f:14:91:fa:38:7f:91:2f:96:83:60:ed:09:25:
                    78:bf:7e:56:01:83:0f:8a:f3:8f:c4:38:60:51:e7:
                    0f:85:8f:e7:8d:71:e1:d6:ec:31:6f:b3:f1:8b:b2:
                    62:c1:4a:61:91:c2:2f:4d:93:80:b2:f2:26:0a:e2:
                    8d:40:db:9f:00:bc:85:b9:c6:02:37:9e:af:94:d5:
                    91:57:bc:90:b1:d1:5d:18:8b:61:60:92:26:98:86:
                    26:29:7d:7e:cc:a0:bc:97:9e:60:d2:b3:f0:c6:34:
                    ef:d6:65:f9:98:65:29:2d:76:98:84:a1:60:c4:58:
                    e2:cf:7e:75:63:c4:4e:72:9b:fb:74:bd:cf:f0:7f:
                    80:00:c5:91:15:12:aa:2f:19:f4:f6:c0:80:1e:42:
                    73:2b:40:af:4a:6f:83:f2:d2:47:38:a5:10:6d:b2:
                    19:50:4f:75:65:db:f1:eb:ee:8f:75:eb:40:f4:59:
                    54:87:90:d8:64:f9:05:d7:58:4c:ca:3c:12:62:9c:
                    57:d8:a9:ea:6b:a3:1c:62:67:56:cb:3e:ae:e8:48:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329157

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.96.0/22
                IPv6:
                  2c0f:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:44:3b:cc:8f:1e:e8:60:5a:a2:8a:59:55:d6:cc:0c:54:44:
         7e:fb:25:62:b9:9f:b1:63:08:ce:0b:09:f0:60:95:62:be:7c:
         ee:8a:09:1d:28:93:c7:d2:a3:8d:fb:35:dc:00:6f:6a:15:31:
         95:25:e3:6f:b1:6b:1a:01:8f:77:d8:c1:de:a1:ce:96:e9:43:
         05:ca:bf:5e:70:ac:10:d7:be:b0:a6:3a:dc:8d:90:8e:49:51:
         28:14:50:8d:74:07:70:5f:85:24:fc:44:db:ac:15:2d:a4:17:
         91:d3:5b:fd:15:3a:e7:7b:d0:ac:8b:af:37:be:a6:b6:07:10:
         f4:50:dc:4c:99:1c:3e:40:90:a1:53:53:9d:74:4a:2a:e5:ca:
         8a:9e:42:29:6b:1e:aa:68:b9:9b:45:8e:43:43:46:be:79:d2:
         be:89:ce:8b:85:f2:9e:52:65:11:41:94:1c:8b:eb:64:c1:ec:
         3d:9a:e5:ab:02:4d:d3:b8:ba:d6:64:19:88:db:bb:63:81:21:
         d7:96:98:1f:8c:40:dd:f6:33:6f:ca:21:10:44:d9:b7:8c:49:
         af:95:30:fb:05:6b:24:ec:dd:fe:33:38:b3:fa:54:3f:03:63:
         5a:e1:6f:7b:4d:a7:47:01:d1:3f:2a:d6:3f:27:db:99:45:30:
         69:d4:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:39 2024 by rpki-client on console-fra.rpki-client.org