Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.cer (raw, json)
Hash identifier:          zuMD3iLQ+dxniLinijGRHg/blXCnhaA8V1IOZVwjFkY=
Subject key identifier:   EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28B7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:38:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328316
                          IP: 102.176.176.0/22
                          IP: 2c0f:eed0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10423 (0x28b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:38:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:a9:8a:d9:4e:ab:c1:2c:25:ac:e6:3d:2d:
                    93:87:76:dc:52:56:6a:6c:f6:d8:11:c1:ce:8f:36:
                    c4:3d:1a:ff:4a:e9:36:d8:53:35:a0:ac:b0:ca:20:
                    f9:ce:4e:de:81:b5:e8:f7:7b:e7:40:fa:9d:d7:ad:
                    24:2d:7d:1c:51:dc:8f:1b:4e:56:e8:50:a7:01:42:
                    f2:9f:8b:f8:da:fb:30:ef:7b:bd:b4:4b:f7:14:a7:
                    a1:08:e9:40:4a:17:0d:f6:af:49:ef:0f:ca:03:9a:
                    0e:c5:7a:73:71:6f:45:31:92:d5:bf:1a:5b:fa:f5:
                    e6:2c:23:28:1a:e0:5d:ba:7e:d3:2d:ba:7c:0a:d8:
                    26:90:79:0f:c8:70:9e:f9:53:82:38:2a:2a:d0:ca:
                    a9:9f:5c:be:69:36:24:72:b4:6b:05:38:7a:6f:66:
                    20:18:0c:b8:84:34:36:e9:34:0e:c2:ef:cb:24:6a:
                    20:31:38:13:ae:47:e1:a4:59:df:6a:83:b5:5f:31:
                    ea:5c:e9:3f:fc:96:53:d2:47:82:05:95:14:c5:3c:
                    a8:b0:cc:0c:ea:0f:fe:36:8c:ee:6a:56:98:c6:e9:
                    bd:d2:79:c5:da:1b:c1:9b:c9:10:29:ef:42:72:cb:
                    98:88:1e:7a:1a:23:5e:f1:16:57:2f:ae:0f:7e:d8:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328316

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.176.176.0/22
                IPv6:
                  2c0f:eed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:24:58:ab:a1:83:3c:23:c0:82:ba:27:ec:b5:4d:fd:a8:
         1e:79:f5:0b:60:71:d7:a8:9e:b9:41:3b:43:40:b9:3b:1c:d5:
         2e:f4:cc:a9:94:4e:6c:87:a6:62:c9:da:44:3c:3a:82:e4:9b:
         ad:80:23:8d:9c:23:13:c5:26:05:ec:81:f0:1f:0f:d4:0e:4a:
         10:75:30:7c:0c:0a:ef:9f:73:03:6b:56:83:93:ff:fa:8c:5a:
         2e:92:74:5e:f7:e4:10:c6:ca:ca:e4:ce:d2:c9:33:68:e8:5d:
         8c:4e:6c:74:e1:f7:c5:d7:b7:0f:57:d9:7b:6f:b7:03:c9:82:
         b4:98:72:8b:1a:0a:08:e6:35:f7:04:b5:b6:cf:c6:dc:50:b8:
         a4:2d:27:2a:d1:5e:22:af:bd:28:33:70:d0:79:10:16:32:83:
         a1:7c:5e:c9:eb:34:cf:24:73:c3:60:2b:1a:a1:f5:2a:18:bb:
         b1:61:a0:98:91:92:6e:f0:7f:eb:b9:8f:85:05:bd:5b:93:09:
         83:fb:6e:d7:37:e7:74:ae:9b:08:ef:18:78:a5:9e:c5:d9:ca:
         cb:20:64:a5:b2:61:16:b2:57:05:36:3e:cf:30:84:14:5e:1b:
         2f:ec:5c:6f:c4:e6:b3:0f:38:7f:a2:23:9d:68:06:ad:4d:ef:
         42:b8:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:40 2024 by rpki-client on console-fra.rpki-client.org