Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
File:                     3qpe4dcNYY7NkB2u26jIYjuvyv4.cer (raw, json)
Hash identifier:          OcOUgav14j9VINHAKo5fJvLKhdW37LjAKRAYMGiFIGo=
Subject key identifier:   DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       274F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:43:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328957
                          IP: 102.212.176.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10063 (0x274f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:43:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B506BAF/serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:f8:ac:9a:da:15:64:d4:40:01:77:17:50:
                    ba:cf:8c:eb:c5:55:3d:4b:ff:4c:ee:e5:3c:9a:57:
                    9f:ef:ea:74:a3:7f:f7:7c:8e:4f:35:b8:16:e0:2e:
                    87:66:43:a8:e6:7c:aa:8c:d8:68:a4:aa:93:4d:71:
                    34:e2:9e:96:84:e2:08:f7:0d:76:e9:03:79:42:e6:
                    a9:34:1f:ad:41:6c:ef:dd:61:17:7a:5d:74:d2:02:
                    de:44:b9:e8:3a:9d:71:88:48:c7:d8:de:fb:63:9e:
                    c9:c4:24:9d:cb:80:a2:4c:a9:9b:4a:87:80:f9:fa:
                    4b:9f:2a:7c:17:6b:f0:f4:c8:e3:8d:de:ca:53:93:
                    ba:7c:97:45:6c:0b:2a:3b:cd:e7:e9:2a:02:65:10:
                    85:d4:9f:63:be:45:78:83:fd:16:ff:06:ae:88:0c:
                    18:79:44:54:e1:47:6e:1c:38:a8:61:cc:c3:6f:15:
                    a9:cc:7b:bf:f8:4b:de:c1:61:5d:eb:5f:aa:49:7a:
                    84:6a:f1:95:4e:f1:af:3c:52:32:9e:75:22:d1:9a:
                    c9:8d:81:12:93:05:db:0e:5e:2e:a0:35:d8:a4:11:
                    da:a4:01:6f:86:88:8b:d3:2f:73:97:5a:c9:67:72:
                    4f:33:0d:cc:26:be:6a:9b:e1:63:b0:25:14:98:f9:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328957

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:93:d0:c2:8a:bc:0b:e5:06:ff:01:08:87:e6:66:d8:e7:
         c2:4d:63:b7:7b:98:f6:b1:e1:7b:8c:60:ac:8a:d9:73:c7:3c:
         93:11:d7:f2:8d:79:9e:98:2e:9e:87:7c:97:e1:2b:06:32:ee:
         6f:a0:d3:f5:48:f3:dc:b9:54:75:6e:cd:79:ba:f5:bb:e4:4a:
         4d:be:73:d2:ee:00:9b:f7:2d:54:5d:fa:ca:6f:44:0c:48:75:
         73:e2:8f:de:11:2e:48:1b:b2:46:1d:82:e4:3c:8d:e6:18:09:
         e8:78:33:3e:3e:c0:8d:2a:59:2f:da:ed:d5:8f:66:3b:09:80:
         36:ef:ee:fa:c9:53:68:8a:ef:8e:22:5a:8f:e6:62:34:05:f6:
         80:2e:79:58:b2:33:b2:fb:71:a9:00:a9:54:ea:7a:e4:41:7a:
         9c:b4:e9:61:b9:c3:51:d8:6a:64:df:fd:93:4b:a4:ed:af:14:
         d2:93:3f:87:f1:b1:84:87:f4:54:8a:65:4d:0d:2c:9e:63:8b:
         a8:bb:e4:44:66:45:e5:5e:bd:f9:f2:6f:17:20:e4:de:96:63:
         a6:5b:69:df:1f:31:48:6f:d7:36:07:1b:9e:a2:1a:c3:2a:a1:
         52:11:3d:c7:c0:93:69:5a:9b:d9:a2:06:ae:8e:91:07:be:59:
         e2:49:7a:a3
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJ08wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzQzMjlaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkI1MDZCQUYxMTAvBgNVBAUTKERFQUE1RUUxRDcwRDYxOEVDRDkwMURB
RURCQThDODYyM0JBRkNBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9kfismtoVZNRAAXcXULrPjOvFVT1L/0zu5TyaV5/v6nSjf/d8jk81uBbgLodm
Q6jmfKqM2GikqpNNcTTinpaE4gj3DXbpA3lC5qk0H61BbO/dYRd6XXTSAt5Eueg6
nXGISMfY3vtjnsnEJJ3LgKJMqZtKh4D5+kufKnwXa/D0yOON3spTk7p8l0VsCyo7
zefpKgJlEIXUn2O+RXiD/Rb/Bq6IDBh5RFThR24cOKhhzMNvFanMe7/4S97BYV3r
X6pJeoRq8ZVO8a88UjKedSLRmsmNgRKTBdsOXi6gNdikEdqkAW+GiIvTL3OXWsln
ck8zDcwmvmqb4WOwJRSY+b+bAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU3qpe4dcN
YY7NkB2u26jIYjuvyv4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNTA2Qi9GRkVGNEY4MkNBMkYx
MUVEODQwMkI0QUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjUwNkIvRkZFRjRGODJDQTJGMTFFRDg0MDJCNEFCRjEyMjI0NjgvM3FwZTRk
Y05ZWTdOa0IydTI2aklZanV2eXY0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBP0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1LAwDQYJKoZIhvcN
AQELBQADggEBAFfXk9DCirwL5Qb/AQiH5mbY58JNY7d7mPax4XuMYKyK2XPHPJMR
1/KNeZ6YLp6HfJfhKwYy7m+g0/VI89y5VHVuzXm69bvkSk2+c9LuAJv3LVRd+spv
RAxIdXPij94RLkgbskYdguQ8jeYYCeh4Mz4+wI0qWS/a7dWPZjsJgDbv7vrJU2iK
744iWo/mYjQF9oAueViyM7L7cakAqVTqeuRBepy06WG5w1HYamTf/ZNLpO2vFNKT
P4fxsYSH9FSKZU0NLJ5ji6i75ERmReVevfnybxcg5N6WY6Zbad8fMUhv1zYHG56i
GsMqoVIRPcfAk2lam9miBq6OkQe+WeJJeqM=
-----END CERTIFICATE-----
Generated at Mon May 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org