Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
File:                     9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer (raw, json)
Hash identifier:          u+rEQMHBv0Oq4hZuhu40iBxIAv+tb1LZxUrK9+CA5Cg=
Subject key identifier:   F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A90
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 26 Jun 2024 06:02:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328964
                          IP: 102.208.204.0/23
                          IP: 102.217.253.0/24
                          IP: 2c0f:4880::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10896 (0x2a90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 26 06:02:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:f2:37:17:2d:50:a4:10:17:54:9b:bf:e6:
                    89:e7:2d:52:09:5f:b7:f2:d1:dd:f0:a2:00:7f:4e:
                    fa:44:98:36:be:a4:ab:2e:ac:4f:85:54:ce:31:23:
                    8d:b0:f5:64:c5:70:fc:12:92:10:3c:77:59:9e:bc:
                    86:68:2b:12:6f:15:8e:75:5e:00:ed:09:8d:92:2c:
                    12:b1:e3:0a:b3:29:24:10:5b:86:0c:0d:3a:1f:45:
                    29:9d:3c:4e:6e:0e:21:ec:fa:df:33:bd:dc:dc:01:
                    d1:03:a3:3e:03:27:26:e8:81:f2:21:f9:ba:72:93:
                    9f:3d:c9:05:4a:58:b4:4c:b9:25:fe:09:02:b3:7e:
                    5e:ad:38:d1:10:22:15:eb:1d:e2:b3:6f:bd:cf:cb:
                    96:42:47:31:94:cb:c3:f6:c6:51:53:0b:39:46:7a:
                    23:c1:b2:8b:59:d4:f9:4e:25:73:2f:6a:06:08:aa:
                    a6:3b:44:6f:b4:21:04:c6:38:cc:7e:90:b0:4e:c2:
                    8d:48:18:11:84:b4:26:f6:fc:3e:19:ea:4f:1b:d2:
                    de:55:c3:ec:c5:bb:e6:42:34:63:7c:5b:3a:48:a7:
                    00:82:8c:6f:4f:16:7b:52:0f:cd:3f:4a:ba:43:0a:
                    67:1f:b5:22:ef:9c:7c:8d:28:8d:cf:48:2a:23:89:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328964

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.204.0/23
                  102.217.253.0/24
                IPv6:
                  2c0f:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:0e:a2:25:36:cf:e6:f3:4e:fa:b9:da:77:d6:6f:23:28:fa:
         19:21:79:c4:20:12:77:9d:91:59:a8:32:1c:02:0c:2c:91:8a:
         d5:49:ff:45:42:18:2c:88:d3:9b:43:fc:bd:6a:12:5b:c4:38:
         8f:72:b0:00:24:02:6d:43:a4:b1:63:a8:af:4a:b6:1c:42:a3:
         df:8f:d7:0c:cb:b3:ed:bf:57:13:6b:f3:b8:34:b5:6a:61:98:
         72:f9:d7:8f:b6:49:ca:32:15:f8:02:32:52:9e:ef:c4:87:1d:
         a8:13:0e:ea:c5:ec:28:47:12:0d:3c:64:ab:2d:c1:f8:d4:dd:
         a6:0c:02:11:c5:b5:11:52:3a:b4:85:d3:6b:ab:d4:9f:e9:60:
         c7:54:29:4a:e8:af:41:8e:40:69:bb:a0:21:9a:60:5b:78:82:
         37:ca:e4:56:10:b3:3f:8d:35:82:82:11:17:a5:0c:aa:8f:d4:
         a8:7f:d8:fa:09:51:c9:48:31:e8:d9:4c:71:1a:cf:c5:65:28:
         56:ae:11:e7:6e:cd:d5:cd:ed:77:5b:21:ea:3b:2d:e8:bd:a7:
         3c:af:f7:85:04:21:f1:e5:fb:3f:b6:7e:bc:87:51:d0:62:1a:
         46:02:d0:d9:2b:f2:37:d6:14:d2:94:6e:be:e2:4f:64:77:4d:
         0b:ce:cf:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:21 2024 by rpki-client on console-ams.rpki-client.org