Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.cer (raw, json)
Hash identifier:          YDcQoEvFWJ+EBP/e4yWBD+Yb0MQz7qGdoIiknsOWe38=
Subject key identifier:   FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24AC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:48:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327872
                          IP: 102.213.0.0/22
                          IP: 102.219.88.0/22
                          IP: 196.250.128.0/19
                          IP: 2c0f:f4c8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9388 (0x24ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:48:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:b6:bc:53:46:97:af:fe:05:98:27:5b:75:
                    13:dc:8c:e6:a3:f6:2d:cb:12:c2:a4:a0:1a:64:48:
                    31:74:bd:72:59:15:3f:88:63:32:53:b6:fe:62:d2:
                    e9:43:fa:78:22:66:fa:60:d2:58:bb:38:2d:fc:04:
                    47:51:25:8d:e5:48:7b:c9:08:af:9e:de:93:50:6f:
                    15:ae:15:76:b6:94:f3:d5:ad:36:51:de:b0:5a:79:
                    cd:e2:b6:5b:b3:19:db:29:0c:94:86:a1:69:9b:81:
                    16:0e:e3:2e:90:fa:d8:ed:4c:f0:c7:61:52:14:68:
                    32:51:74:be:2b:54:9d:e8:7d:7e:d6:59:44:f9:a8:
                    cf:23:9e:af:00:1e:19:79:68:80:9f:b5:af:46:bc:
                    45:f4:f7:8e:6d:50:b9:35:82:3d:a5:0f:b0:d5:ea:
                    5e:b7:e6:cc:ab:e6:19:a5:5b:28:ba:e4:45:8e:b0:
                    1a:e6:49:ca:05:cb:33:7b:84:54:2a:03:a6:4b:dc:
                    01:5d:fe:0f:55:cb:8d:ce:96:81:4e:fc:03:2a:2f:
                    89:92:1f:16:62:a7:b3:e7:3b:ce:39:e6:3b:bc:6e:
                    ce:f5:3d:5f:c6:cb:d9:35:fe:5b:79:0d:5c:20:21:
                    5e:db:cb:68:fc:c5:a9:74:8b:bf:ea:97:97:f6:70:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327872

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.0.0/22
                  102.219.88.0/22
                  196.250.128.0/19
                IPv6:
                  2c0f:f4c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:36:57:ef:d5:90:42:23:7e:43:9d:5c:3c:c0:5a:b8:5a:
         06:66:34:bf:fe:f8:4a:db:2a:3d:3b:92:a2:fc:c8:e4:4d:24:
         6d:57:af:27:c0:85:3d:9e:82:15:3e:93:6d:56:9c:eb:1e:bb:
         e7:dd:b3:f2:f7:54:d6:fe:05:83:67:42:d9:a1:4f:f1:c8:bf:
         21:b0:33:8d:ef:19:3e:d7:ba:74:d8:02:80:ce:5b:4a:d2:3b:
         78:40:d2:90:bf:19:78:b8:12:c3:05:6e:96:7a:1c:60:a5:f4:
         3d:b7:71:63:05:fe:01:3c:2d:4d:60:08:75:d1:d1:ff:fc:72:
         19:e7:05:9b:1c:1e:61:fc:1c:da:de:80:9e:85:56:46:a0:66:
         82:95:47:5e:4a:c0:a9:16:ac:5b:92:72:4e:c8:0e:55:af:bb:
         eb:b1:fa:5b:08:09:7d:3e:0f:33:68:35:d1:14:6e:88:a2:b0:
         ba:b1:57:ed:ad:a1:27:08:64:e5:e7:29:f6:12:5f:a6:02:5a:
         c2:e8:fa:08:b4:43:1c:de:2a:03:d7:3f:e7:c5:b7:5b:73:52:
         81:c5:5f:ab:4f:ac:45:86:3c:2e:61:8a:93:c6:8f:93:34:b9:
         0e:98:62:93:85:16:65:8f:d2:9c:5b:06:0f:a8:57:bd:3a:d0:
         ad:c9:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org