Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
File:                     lacnic-to-afrinic.cer (raw, json)
Hash identifier:          wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=
Subject key identifier:   D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest:                 rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
caRepository:             rsync://rpki.afrinic.net/repository/lacnic/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 08:15:16 +0000
Certificate not after:    Thu 14 Dec 2028 00:00:00 +0000
Subordinate resources:    IP: 200.16.8.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 02 May 2024 13:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Dec 14 08:15:16 2023 GMT
            Not After : Dec 14 00:00:00 2028 GMT
        Subject: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:1d:2d:54:5b:db:4a:34:8e:3f:83:f8:53:
                    d6:1e:b3:bb:f9:d4:bf:d7:d2:d2:6a:70:27:30:d3:
                    b3:d3:7a:d7:55:8b:93:bc:4a:36:06:12:09:7f:2e:
                    ea:96:90:70:4b:3d:8e:7b:9f:42:b8:f1:aa:08:21:
                    13:dc:1d:87:e1:1e:a9:e4:68:75:35:b3:db:6e:ea:
                    99:8e:36:9b:a0:ed:32:b4:10:54:ae:c6:94:77:f3:
                    47:a6:73:d2:de:cf:d0:92:a4:5a:ad:84:89:61:7e:
                    da:f0:f9:16:4f:8d:69:f9:27:22:e3:c1:b5:30:08:
                    64:6e:9f:ab:e2:44:45:dc:43:39:ac:69:69:70:b6:
                    64:b5:f1:82:ea:5a:de:c7:cc:df:c3:54:8e:7f:c5:
                    22:f9:90:da:fb:6c:3f:e5:d6:b7:9f:0e:60:25:77:
                    33:14:79:fa:ad:a5:40:35:96:65:38:db:56:35:3a:
                    78:a7:d8:3d:cf:b5:ea:1c:30:eb:13:da:94:d5:60:
                    9d:d6:5a:16:72:4d:d1:3d:6e:2b:f9:7a:6d:b1:60:
                    14:88:40:e7:7c:38:a2:89:26:fb:8a:b9:82:3b:f6:
                    9b:02:db:fd:c2:16:bf:80:31:d9:fa:83:e0:01:f4:
                    30:90:79:6d:9b:12:05:5a:1d:7b:70:1d:67:a8:96:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/lacnic/
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:8d:0d:2a:27:1f:ce:e3:51:f3:29:f4:ab:8b:79:b8:a4:
         06:99:f2:1e:47:7e:b2:7f:95:12:87:56:74:34:b7:eb:77:b2:
         33:dc:70:6f:c3:c1:da:63:02:23:48:81:a0:4c:b6:95:a3:aa:
         55:50:05:53:80:9d:41:f9:51:a2:af:b3:99:6c:b2:d7:90:75:
         2d:d8:7b:b7:1f:14:77:ae:69:7e:a5:46:db:f5:79:ac:95:b0:
         ae:4d:3a:82:4a:3e:7a:b9:6b:a7:55:1a:e5:f7:51:7f:61:a9:
         f3:43:af:7e:15:01:57:1b:d3:bd:11:f1:b8:9a:2a:d5:5d:cc:
         2e:e3:c3:a0:56:c7:0a:00:d9:40:07:00:52:43:5f:4f:47:b0:
         53:2c:8f:8b:22:ca:89:e9:5c:88:60:d6:b7:0e:76:27:dd:70:
         1f:af:50:59:9a:67:5f:cb:b6:23:77:43:03:9c:50:a9:f8:c9:
         3d:dc:8e:5f:13:d2:76:db:65:8c:7c:1b:6a:9b:4f:74:62:bb:
         40:68:cc:11:11:3b:cd:19:aa:5d:dd:88:d1:c7:a2:24:b0:37:
         db:d9:40:4b:74:1f:76:1c:7e:37:30:d4:77:52:4d:7b:7a:a8:
         e4:d2:4e:56:2a:50:88:d8:28:ae:f4:1c:75:4f:63:b1:0f:67:
         a4:94:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 15:15:40 2024 by rpki-client on console-ams.rpki-client.org