Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
File:                     ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer (raw, json)
Hash identifier:          hjNALQw9m6HkTMe4PNYoWmuhPQzuOZ/+W3Kh5C1VhZY=
Subject key identifier:   00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       267F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:11:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328521
                          IP: 102.36.196.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9855 (0x267f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:11:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36924C7AF/serialNumber=0030B7A69142C98C461415373DFF30E207C91DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:e8:24:da:64:dc:9d:f0:63:c4:b4:c5:a5:
                    a1:4a:77:2d:b7:06:8a:c2:11:ee:19:dc:21:56:74:
                    a6:54:a0:d4:a6:c8:a1:18:62:5e:e2:c2:7d:c4:ea:
                    f5:a3:45:73:50:23:5d:64:96:30:ac:52:25:c5:6e:
                    a9:d7:99:62:ea:5a:84:fa:ea:06:8a:56:28:f4:b9:
                    00:7a:35:dd:83:dc:11:23:2f:17:2f:58:4e:a1:f0:
                    d0:4f:d3:56:ea:32:ca:83:39:6e:06:77:2d:6e:d0:
                    16:54:b9:6d:39:2e:7a:fc:1e:de:15:45:87:8a:cd:
                    d5:ff:c0:22:b9:89:da:27:c7:9a:bf:26:d1:13:70:
                    42:bc:01:f2:79:28:fb:ea:f3:c9:6f:fe:eb:81:e0:
                    90:d6:30:ef:07:8d:09:69:f4:4b:8a:3c:66:9c:0a:
                    3a:27:37:91:97:7a:1a:51:c3:35:53:1f:fc:96:89:
                    66:62:5c:26:92:15:c7:70:23:83:9c:da:e3:79:3c:
                    c4:67:da:51:23:c3:c6:ef:d2:36:a5:14:10:1a:f1:
                    69:67:5a:85:0b:1b:9d:51:de:1a:c7:ef:16:50:0b:
                    ea:90:67:43:2e:b4:f1:3b:c6:94:f4:dc:22:0b:99:
                    fe:38:00:99:17:0b:f3:ce:d1:73:86:8e:60:e6:68:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328521

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:bb:11:a2:18:c1:7e:87:2b:93:24:12:aa:7a:b1:6a:ac:
         c9:db:cc:ef:46:e5:e9:1b:e5:58:97:1f:24:03:86:da:72:e1:
         5a:7e:66:14:e3:dd:27:94:47:68:13:d7:27:54:39:51:ef:c9:
         a9:ac:c3:9c:b4:2c:3a:bf:97:c6:35:d7:45:66:cb:fd:1a:50:
         5d:f7:98:94:f6:17:3e:2b:82:2d:3c:b2:d3:04:c4:44:c5:6a:
         00:0b:2d:b6:e5:72:6c:80:c7:10:8a:62:27:e3:d4:e5:c6:72:
         2a:07:8c:45:57:f7:04:7d:bc:5e:5e:ae:88:86:f4:3b:27:c0:
         b8:8e:a8:7a:5d:ca:39:d2:02:ba:17:de:8f:9e:84:4f:c7:f1:
         6d:a7:05:47:60:2d:00:fb:ed:86:7d:e9:c6:5f:eb:6e:5e:15:
         cc:23:e0:54:08:4a:f8:5e:e3:e7:70:e2:0b:d6:ea:c1:c2:56:
         53:30:9c:16:54:c1:4d:5e:b8:fa:93:48:6c:4d:c3:8a:a8:61:
         a0:1a:25:09:4f:a2:f4:fa:68:d1:49:ad:c9:0a:1b:d9:c5:49:
         c7:b2:e3:6a:22:bf:20:d4:4a:5d:4f:6f:5a:ef:f7:08:b2:6d:
         2c:ab:24:93:b8:72:00:d8:a8:66:8a:d2:9b:d0:46:91:19:f7:
         23:60:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:41 2024 by rpki-client on console-ams.rpki-client.org