Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.cer (raw, json)
Hash identifier:          tDJyBRB+rrpTiq++ipUOOGB1+5c9Qt11+0o/WHYkQ64=
Subject key identifier:   EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23E1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:58:24 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327979
                          IP: 41.76.104.0/21
                          IP: 41.222.32.0/21
                          IP: 154.66.196.0/22
                          IP: 2c0f:f850::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 17:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9185 (0x23e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:58:24 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:e8:6e:b8:b7:0f:81:c5:65:1f:4f:34:c7:
                    33:ef:cc:27:44:80:6d:f4:9a:6a:a2:df:df:ba:ef:
                    f7:a0:64:7f:3c:44:cc:5b:cb:bf:1c:f6:f4:fa:b4:
                    63:26:8a:44:2f:3d:77:96:5c:1a:da:39:2a:40:db:
                    34:f5:29:de:4c:c6:82:5d:06:3d:25:c2:b9:0c:af:
                    b1:e6:ac:6f:24:6d:81:43:6a:7c:bb:ec:9d:4d:ab:
                    5b:68:c7:b1:98:2b:90:9b:b2:a0:49:7c:82:8a:b3:
                    95:7d:28:e4:2d:e0:20:1b:50:ae:ba:03:7a:bb:ad:
                    57:06:bb:0a:cb:32:b4:ad:48:96:ca:4a:b8:22:db:
                    8a:0e:9d:2a:a5:cb:e5:58:ac:36:04:e4:59:9e:30:
                    42:42:e1:26:15:b8:6d:3a:11:77:43:9c:e0:7e:6d:
                    f0:6c:23:fc:92:cd:17:f0:ff:fa:2c:83:63:f2:d3:
                    e6:d8:89:72:f7:64:69:ca:c6:8b:77:9a:a5:6f:d9:
                    f5:7f:a9:4b:82:5c:f4:6a:3d:ca:cc:76:6e:75:85:
                    24:5f:84:46:ed:56:7c:3d:bf:fc:c5:da:67:cc:d8:
                    de:ba:18:3b:40:3f:9a:6e:56:78:07:78:84:a9:87:
                    93:85:df:01:e8:cf:d4:1e:87:37:87:33:53:0c:06:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327979

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.104.0/21
                  41.222.32.0/21
                  154.66.196.0/22
                IPv6:
                  2c0f:f850::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:4f:ff:d2:0d:b9:16:54:ce:a7:1c:c7:86:2d:48:1e:c2:
         a5:92:66:98:90:ac:cd:73:88:2d:03:da:b8:d3:bb:06:79:55:
         a7:43:52:5f:65:71:46:82:38:f6:fb:25:f6:18:56:ac:c5:e0:
         e0:7b:28:28:92:cf:5b:08:2a:2e:95:38:bb:91:ab:0f:b5:32:
         c1:5c:85:5d:65:ab:80:0f:b8:ac:d9:38:27:81:39:72:37:87:
         b6:92:28:44:32:9f:2b:fa:80:8d:2c:a5:8e:95:58:ed:a3:52:
         34:b1:fe:99:83:f9:60:3a:e1:61:87:12:82:2c:5b:9f:a9:f7:
         8f:2a:dd:2a:74:10:a3:47:d3:a0:3f:87:33:20:2b:73:26:34:
         d9:26:aa:54:fe:9e:1b:cd:91:46:2e:06:d3:b9:ec:09:59:c3:
         65:74:62:2e:97:3e:57:eb:ec:86:de:89:18:c1:89:2e:0b:4d:
         8c:c6:f0:1d:82:a4:0c:9a:61:f9:f8:6f:41:a1:c0:6d:e8:0e:
         db:78:91:e3:87:0b:99:4a:87:c9:70:6d:e2:da:68:d1:c6:a5:
         73:dd:1d:db:a3:58:24:84:3f:96:28:55:7d:74:40:3f:ae:1d:
         d0:7a:ba:cc:7b:3f:96:76:3a:42:e3:12:0e:2e:15:08:9a:1c:
         bb:6d:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:34:27 2024 by rpki-client on console-ams.rpki-client.org