Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
File:                     5hfTT1TsLbm6WEBc2glDH9OB8xY.cer (raw, json)
Hash identifier:          /+8g0ky6V1GG7FRAe7UBCTireJGrKmYPdL7iPdOiIVU=
Subject key identifier:   E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2565
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:31:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328386
                          IP: 102.130.72.0/21
                          IP: 2c0f:ece8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 16:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9573 (0x2565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:31:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3664674AF/serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:33:54:4f:77:c0:9b:86:9c:a9:c5:56:43:
                    c8:d4:c3:6f:3b:35:0d:c5:20:2c:cc:70:85:48:1e:
                    54:34:61:cf:2e:4c:0e:b5:9e:42:7e:28:16:23:56:
                    d9:99:fa:0e:73:28:f8:40:b6:c2:c3:83:1b:78:52:
                    e9:a5:69:94:69:9f:29:54:f8:38:d5:f2:5b:7d:e5:
                    d1:f5:07:8d:11:8a:d0:6b:52:3b:81:7f:76:ab:3b:
                    84:b4:b3:ee:fc:db:7f:e1:46:89:b2:8f:c9:61:aa:
                    f1:f8:e9:ac:36:41:e1:2e:d4:1e:94:e6:da:6b:1b:
                    75:1e:b4:d3:0c:15:e9:a0:f4:36:8f:f9:ff:76:87:
                    58:de:3e:b4:7d:c6:48:73:09:5c:0c:1d:93:6f:de:
                    ba:32:b5:3f:37:63:dc:11:86:e4:b7:59:e8:a0:cc:
                    bd:ca:db:bd:fa:33:a9:59:17:d8:2a:8f:11:a8:60:
                    a3:f6:45:1e:0c:cf:51:b7:60:21:b0:6c:f5:e0:f9:
                    63:03:82:4a:fb:74:09:b0:f4:c4:bc:b5:77:a7:34:
                    32:ba:4e:69:55:3f:b8:80:c4:80:f6:98:cb:21:00:
                    62:1d:67:77:fd:10:ec:42:91:8d:e5:55:95:d0:69:
                    2f:bd:16:e1:13:38:d1:b9:22:e9:95:d1:b6:04:21:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328386

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.72.0/21
                IPv6:
                  2c0f:ece8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:d7:00:12:a4:fb:5d:54:29:f7:37:b0:ea:28:a8:19:b7:
         11:83:d2:72:4f:c0:63:53:83:6f:8f:3a:b1:c2:44:29:6a:4a:
         62:a4:03:af:d5:44:61:48:b0:f7:af:bf:2a:79:c7:21:bf:a9:
         3f:8f:7f:c4:06:ae:ee:12:c8:6b:ab:18:28:dc:a8:84:70:62:
         06:f7:39:9f:41:32:09:12:3d:2b:7e:85:53:bb:22:6f:57:28:
         95:2e:c0:6f:d4:5c:e2:96:5d:49:75:1b:09:11:7d:e9:b0:ed:
         a5:75:df:02:e0:49:c6:31:ee:90:cb:84:96:61:af:5c:15:4b:
         5f:83:01:9e:25:42:da:3d:90:de:2b:7a:f3:f2:45:7d:e2:66:
         70:cf:36:dc:c9:02:d7:f6:b3:39:b8:22:21:bd:6f:86:30:23:
         d3:d0:3b:5e:ed:4b:1e:7d:17:22:10:d5:ee:97:de:55:38:06:
         54:c5:99:bc:da:3f:a2:58:b6:30:6c:09:1f:f7:f9:3b:92:78:
         00:14:01:6c:2d:ef:40:4f:67:44:00:e3:41:38:c0:ee:40:60:
         c7:a3:c5:72:a8:a3:05:02:71:f8:70:b1:90:5f:83:0c:57:f2:
         1d:dd:f1:fd:bd:11:f8:04:8c:b1:84:3d:e1:db:d4:2d:e4:d7:
         a5:e2:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:44 2024 by rpki-client on console-ams.rpki-client.org