Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.cer (raw, json)
Hash identifier:          dMdVT8xRR/iCvoOIcDRrqte0L1kb2uoEWlfpGEvpdlw=
Subject key identifier:   03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2743
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:41:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 5536
                          AS: 37725
                          IP: 102.218.128.0/24
                          IP: 102.218.130.0/24
                          IP: 102.219.22.0/24
                          IP: 102.220.125.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10051 (0x2743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:41:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:93:25:61:dc:00:3b:f7:1c:15:a5:e3:ea:
                    42:fd:68:88:1a:6b:63:93:93:08:9f:2e:7d:84:0f:
                    46:a0:5a:7c:88:60:cd:8c:05:60:77:44:8a:fa:15:
                    fc:9e:44:5c:ef:64:56:f0:72:0c:0b:8e:22:28:98:
                    4a:f9:e9:19:7a:1f:66:d1:5c:92:07:b5:52:8d:f3:
                    d4:01:66:11:7e:45:93:2d:41:3f:46:c5:97:91:6f:
                    f7:82:f0:41:99:5d:f9:19:6b:6f:b4:13:ff:5f:74:
                    a7:71:90:7a:07:99:f5:47:39:67:9c:ef:72:ca:95:
                    a5:18:12:cb:d1:7e:cf:0d:df:a1:63:38:eb:53:7b:
                    ed:8e:c8:40:7f:7a:3f:4a:80:77:5e:f0:b4:c6:1a:
                    7c:ef:14:25:84:31:27:82:18:ef:e6:f3:f9:fa:92:
                    86:a8:24:74:84:be:7f:5b:04:ee:34:8d:89:24:6c:
                    a6:fb:b5:d5:d9:6c:1a:70:97:df:06:84:13:23:70:
                    9e:a2:38:b7:f2:1e:cc:a0:50:08:fc:61:ff:d9:89:
                    c6:23:56:47:dc:21:96:15:74:9b:82:e9:b7:69:3c:
                    fa:c9:bc:e9:d1:b3:7a:cb:d8:7a:d5:72:e4:c1:1d:
                    40:0f:59:29:47:e1:4e:39:c1:01:3d:f9:be:0b:72:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5536
                  37725

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.128.0/24
                  102.218.130.0/24
                  102.219.22.0/24
                  102.220.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:34:2a:ac:05:27:21:14:f0:5d:c6:29:1a:3c:10:65:24:e7:
         d1:7e:f4:fb:91:81:91:45:cf:09:c7:2f:7f:e5:3e:c7:0e:9a:
         9a:ca:37:3b:51:5f:28:68:7a:d2:e7:3b:fb:80:d2:f7:2b:9e:
         8d:65:cb:63:06:75:95:e5:fd:40:52:c6:1e:5a:bf:e1:c6:4e:
         8e:f7:17:37:4b:f6:25:17:ed:67:d7:32:ba:3a:7d:bb:12:be:
         e7:f4:76:0f:15:b6:f7:93:ff:c9:a2:70:f5:d6:58:3a:da:52:
         27:e5:80:ca:4c:9c:18:e3:cf:94:74:b7:35:08:a4:82:11:2c:
         7a:df:8c:28:dd:42:66:ef:ed:d2:37:26:cc:67:5b:87:10:9d:
         98:a4:fd:d8:68:52:c6:75:f5:db:15:86:67:34:2f:97:40:65:
         85:f2:a1:ae:ac:ee:fb:ae:7c:b9:f7:33:a2:59:58:92:e3:05:
         05:10:07:0d:66:44:ba:99:40:f5:26:31:7e:fb:7e:0f:a3:39:
         6e:1a:d9:ac:a3:3d:02:3e:11:e6:9a:bf:8b:bc:25:db:35:5d:
         be:d9:f6:7e:96:8f:7a:96:77:1e:cf:87:86:af:ee:45:9d:b9:
         a5:b4:70:1f:bf:7a:1c:d7:30:ad:6e:06:27:c7:b2:96:20:8d:
         4a:71:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:22 2024 by rpki-client on console-fra.rpki-client.org