Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.cer (raw, json)
Hash identifier:          j2dQ3htsFYN/4qwNJth2Aa0CV1aw8g5r6/9X7gx+iPM=
Subject key identifier:   E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2457
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:27:53 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329027
                          IP: 102.213.44.0/22
                          IP: 102.223.156.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 16:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9303 (0x2457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:27:53 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:d7:4c:d2:f2:68:53:38:d7:09:c0:cc:cf:
                    9f:6a:73:a2:47:c1:78:20:0a:5c:1e:25:75:6c:b0:
                    94:83:c7:12:85:59:57:e9:25:fe:27:6e:5d:93:36:
                    27:0d:50:38:18:9f:93:a5:44:2b:46:3a:80:23:bf:
                    99:d8:7b:40:42:51:a3:d0:22:dd:0f:83:c9:f7:a0:
                    db:1f:5f:c1:67:c8:02:8c:ab:e6:88:14:64:d0:d7:
                    54:03:b4:37:73:8a:e3:54:f0:8d:81:62:8c:71:a7:
                    53:36:5f:c3:90:52:80:e2:85:7e:c3:fb:e8:a9:e3:
                    c3:6a:89:b2:d0:ff:dc:4e:c0:a3:76:00:2e:02:ef:
                    fd:e5:6c:39:ca:6a:38:4f:4e:60:9a:bf:8b:6a:c2:
                    3e:e3:f5:44:f9:93:2a:1f:e1:23:d6:bc:68:05:f5:
                    8c:52:13:5b:66:70:96:35:88:23:6e:03:95:76:a3:
                    70:91:46:cb:80:43:f7:87:12:a8:81:33:90:79:6f:
                    4c:c3:31:f2:d0:0e:a3:b9:82:c3:3f:4f:9e:12:22:
                    13:c9:42:03:8a:b3:58:68:c7:c1:5b:a5:99:a9:6b:
                    47:67:f3:38:27:a9:76:79:fd:78:ef:13:09:4c:46:
                    9c:0c:eb:b1:fd:32:e2:6f:36:ad:4a:7d:a0:7e:5e:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329027

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.44.0/22
                  102.223.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:3b:34:dd:66:c7:41:7f:21:30:38:ca:d2:e9:a0:fc:68:
         70:90:21:d3:a0:02:4d:b7:e8:c8:74:45:1f:38:59:a0:a9:7d:
         95:81:2e:79:75:f5:fb:78:21:66:3e:46:dc:8c:25:51:7f:c0:
         73:da:85:0e:05:93:0f:e8:c0:05:3c:65:32:f7:e1:fc:1f:df:
         66:86:d4:59:ba:e4:e3:74:56:eb:34:7c:ac:a5:71:17:c2:66:
         e5:cb:3e:f8:c2:29:28:2f:c4:99:b5:51:37:92:b6:77:3b:73:
         17:7f:e0:6a:28:95:f9:1a:31:87:a6:b0:56:15:e3:01:66:f1:
         c2:51:50:74:7d:d3:58:54:1a:a7:36:c6:46:5a:cb:ba:d7:89:
         8d:da:bf:bb:5d:04:4b:d4:7b:52:64:b0:bc:43:65:55:a2:72:
         be:9a:9c:85:37:18:61:f3:31:fd:ff:7c:ff:5e:a9:eb:3a:1f:
         14:3b:63:37:8f:73:e6:67:34:15:e6:a0:a7:05:f2:a7:31:5f:
         fb:84:82:0a:ad:64:5b:82:1b:bc:32:8a:11:96:36:55:4b:c1:
         d9:d8:f8:53:0b:c9:07:4d:63:b7:b1:b6:72:45:28:2d:7c:4f:
         3b:0e:8f:1e:a3:fd:f9:62:b3:45:b8:b4:71:c9:40:61:39:4d:
         af:89:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:44 2024 by rpki-client on console-ams.rpki-client.org