Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.cer (raw, json)
Hash identifier:          b3Zuzk9re/wTbLzW3DmN8Tizh/t20U5ndEJWEOyHx5k=
Subject key identifier:   DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       294B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 00:01:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328732
                          IP: 102.209.232.0/22
                          IP: 102.216.220.0/22
                          IP: 102.221.216.0/22
                          IP: 2c0f:e9a8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10571 (0x294b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb 14 00:01:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:86:ad:c3:be:e3:19:86:fc:7a:62:48:f5:
                    37:9c:c2:cd:31:ec:2d:98:eb:77:0f:b3:2a:c3:90:
                    46:d8:d9:e4:99:6c:43:a1:09:96:ff:82:dd:d1:e9:
                    df:1e:81:73:a1:80:9f:39:cf:f0:56:cd:58:f3:f6:
                    bf:4a:0b:71:a6:7e:61:d4:53:a7:12:a5:96:75:41:
                    1d:79:1d:1b:ff:c8:14:04:c1:f0:49:70:8d:6b:de:
                    7e:cd:9c:6c:59:b3:17:ad:97:50:00:cf:81:30:c4:
                    16:d7:3c:2a:a1:81:58:b7:9b:33:cd:c0:a3:4f:b4:
                    45:8f:81:a2:f2:2c:9a:a1:bb:2d:d4:79:8d:57:d6:
                    89:20:92:7e:de:ac:dc:04:8c:14:fa:f9:2a:a1:c5:
                    db:d0:ea:e3:43:06:ba:26:ad:bf:29:c8:b3:13:60:
                    26:e0:49:f3:a2:87:7e:7a:82:c4:70:fa:4c:bb:22:
                    e5:95:dd:2b:19:3b:f2:16:1e:9d:1f:a3:3c:8c:ad:
                    23:69:2f:af:ed:e1:2b:79:2f:ab:00:8d:d3:35:03:
                    64:62:93:4f:74:17:29:26:4b:4d:cd:2c:21:98:bb:
                    ce:cb:38:09:5f:4e:a8:9c:53:52:a5:13:41:6b:82:
                    29:5e:d4:5e:d6:e7:e3:cc:0c:22:fc:b2:2d:46:0f:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328732

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.232.0/22
                  102.216.220.0/22
                  102.221.216.0/22
                IPv6:
                  2c0f:e9a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:b7:af:84:d5:fb:26:e9:19:80:5e:6c:c1:e8:b9:86:82:
         ab:5a:5b:a3:a9:8f:6f:e5:e2:b0:47:0d:12:e2:3a:e1:3b:bf:
         97:9a:d9:d6:15:f3:39:a8:19:3a:07:39:86:69:65:81:19:c6:
         a5:cd:c4:73:9e:77:00:e1:0f:09:fd:00:3f:e9:ba:18:e3:0f:
         15:6b:5d:e7:a2:bd:e9:bd:0f:d7:04:7d:a5:6f:f5:7a:f6:e2:
         bb:18:15:91:51:88:af:75:f6:f5:7f:26:cf:5a:49:79:4d:66:
         de:72:c1:37:37:fe:e7:f8:69:0e:6c:d0:c8:74:36:e2:83:54:
         4e:87:23:fc:99:1a:d7:df:c9:48:04:d7:24:a8:d7:14:f8:a5:
         53:f5:e2:31:d6:ca:a3:0a:1b:88:90:e4:7d:d7:2d:93:45:bd:
         05:88:ce:15:54:f6:e3:cb:4f:59:cb:0c:11:e8:97:a4:5c:d4:
         4c:6d:91:30:e7:43:f0:5a:03:d2:f3:1e:f8:6a:b5:9a:5a:e8:
         dc:f6:78:2c:89:d2:66:f4:ef:11:57:e0:3a:ef:b6:af:f4:58:
         1c:02:0f:62:b9:a4:c7:bf:23:bf:73:4a:26:42:be:fc:7c:a7:
         af:02:68:97:4b:19:92:55:02:c8:5c:5d:d7:a3:1d:96:e1:ff:
         57:d7:4c:44
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICKUswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAyMTQwMDAxMjlaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjVDNzlFQUYxMTAvBgNVBAUTKERENzQ5OUE4QzhDMTJBQjY3RTE1RUI0
OTI4MDhBNjkyRUQ0QjU5RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDguYatw77jGYb8emJI9Tecws0x7C2Y63cPsyrDkEbY2eSZbEOhCZb/gt3R6d8e
gXOhgJ85z/BWzVjz9r9KC3GmfmHUU6cSpZZ1QR15HRv/yBQEwfBJcI1r3n7NnGxZ
sxetl1AAz4EwxBbXPCqhgVi3mzPNwKNPtEWPgaLyLJqhuy3UeY1X1okgkn7erNwE
jBT6+SqhxdvQ6uNDBromrb8pyLMTYCbgSfOih356gsRw+ky7IuWV3SsZO/IWHp0f
ozyMrSNpL6/t4St5L6sAjdM1A2Rik090FykmS03NLCGYu87LOAlfTqicU1KlE0Fr
gile1F7W5+PMDCL8si1GDwmlAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU3XSZqMjB
KrZ+FetJKAimku1LWfQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1Qzc5RS8xRkMzNEJFNkJFREEx
MUVCOEY1Q0UyNDNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUM3OUUvMUZDMzRCRTZCRURBMTFFQjhGNUNFMjQzRjhBRUEyMjgvM1hTWnFN
akJLclotRmV0SktBaW1rdTFMV2ZRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBBwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJm0egDBAJm2NwDBAJm
3dgwDQQCAAIwBwMFACwP6agwDQYJKoZIhvcNAQELBQADggEBADX7t6+E1fsm6RmA
XmzB6LmGgqtaW6Opj2/l4rBHDRLiOuE7v5ea2dYV8zmoGToHOYZpZYEZxqXNxHOe
dwDhDwn9AD/puhjjDxVrXeeivem9D9cEfaVv9Xr24rsYFZFRiK919vV/Js9aSXlN
Zt5ywTc3/uf4aQ5s0Mh0NuKDVE6HI/yZGtffyUgE1ySo1xT4pVP14jHWyqMKG4iQ
5H3XLZNFvQWIzhVU9uPLT1nLDBHol6Rc1ExtkTDnQ/BaA9LzHvhqtZpa6Nz2eCyJ
0mb07xFX4Drvtq/0WBwCD2K5pMe/I79zSiZCvvx8p68CaJdLGZJVAshcXdejHZbh
/1fXTEQ=
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:39:34 2024 by rpki-client on console-fra.rpki-client.org