Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
File:                     B7h9lPBEiTVmQTOd5pFkR32P-kM.cer (raw, json)
Hash identifier:          +P7IbHX7yv88RV1sVwVLpbAJBTxqSKJ3poPGLMAixyg=
Subject key identifier:   07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28BD
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:39:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328427
                          IP: 102.68.136.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10429 (0x28bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:39:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FE1EAAF/serialNumber=07B87D94F04489356641339DE69164477D8FFA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:4c:20:5b:a2:7e:d8:5d:87:5a:c7:16:20:
                    39:75:e2:4f:ce:4a:be:24:2f:88:c6:52:28:eb:ef:
                    11:99:1b:6b:ba:ec:79:6b:62:47:bd:5c:ba:ea:b8:
                    9e:8d:c3:6c:53:69:f9:f8:b5:2d:53:f6:00:d8:5d:
                    36:9f:1c:35:e4:cd:41:04:91:32:f6:9c:aa:c6:6b:
                    eb:28:04:00:d2:86:4b:74:e9:f5:04:2a:75:ac:14:
                    b5:ee:bf:f7:6a:96:87:f5:e2:12:5d:d6:22:0e:2b:
                    1c:61:51:8e:b8:76:3b:5c:6f:35:c9:93:6a:18:e6:
                    f8:0d:ef:cb:32:12:47:bf:85:2c:85:5b:a4:fa:89:
                    30:6e:60:db:7e:3b:18:b6:1e:65:9e:67:97:7b:b7:
                    f3:c8:ac:4c:e3:6c:de:44:14:d4:fc:9b:fa:a1:e3:
                    f7:68:12:02:2d:17:e1:de:af:fc:95:f6:0b:e7:bc:
                    b2:00:ca:3d:83:29:fd:68:26:44:8b:cb:f7:92:27:
                    86:f1:26:e5:8e:14:a4:b1:0d:e0:b3:22:d0:15:fd:
                    f9:2e:8a:7b:0f:66:75:f6:98:6c:23:5f:90:76:15:
                    79:36:2d:0b:5d:7d:1c:a5:cb:1c:0e:db:7d:8b:f8:
                    1c:19:9e:ef:b5:5b:1e:cf:25:02:26:cf:23:51:49:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328427

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:2d:e2:76:6a:40:14:20:4b:a8:14:d9:64:61:a9:0b:3d:
         57:b0:f1:9f:0c:2d:20:ae:2c:a7:83:50:be:01:25:5a:10:b8:
         a1:8a:93:33:e0:16:ef:a5:c6:60:cb:8a:eb:af:f2:70:ee:ba:
         9d:98:53:a9:dd:6e:37:82:f7:8a:81:ea:aa:17:3f:79:43:c9:
         61:c6:0a:25:5f:b4:e7:b8:54:69:90:65:6c:22:b8:62:0e:4a:
         4e:8a:df:fe:fc:70:0a:24:5f:d4:ab:e4:df:ad:66:39:5d:df:
         e1:ac:c8:7c:b8:98:d5:ff:8c:2e:4b:f3:d3:4b:e3:6d:fe:25:
         f8:8b:fe:a6:60:19:17:d6:bc:85:eb:8a:a9:3b:a8:bc:a7:ff:
         24:5d:6a:48:12:50:a8:67:79:16:98:e5:71:fe:d1:e5:6c:00:
         d7:db:f6:db:51:0e:01:7a:31:63:9a:23:40:33:f8:53:0b:6f:
         6c:d8:e4:5b:fb:af:c2:8a:ca:4d:03:54:a6:25:b3:9f:0e:b3:
         1e:f9:d8:7a:b2:49:2f:8b:6c:78:f2:e7:ac:37:7c:df:47:cb:
         08:64:75:ed:e9:d1:c2:0b:b1:d8:2a:4e:b2:96:9f:63:0f:fb:
         4c:ce:54:bc:92:eb:c3:d5:20:02:fb:07:c7:ff:12:f2:6b:65:
         c6:6b:63:26
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICKL0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDM5NTdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZFMUVBQUYxMTAvBgNVBAUTKDA3Qjg3RDk0RjA0NDg5MzU2NjQxMzM5
REU2OTE2NDQ3N0Q4RkZBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWqkwgW6J+2F2HWscWIDl14k/OSr4kL4jGUijr7xGZG2u67HlrYke9XLrquJ6N
w2xTafn4tS1T9gDYXTafHDXkzUEEkTL2nKrGa+soBADShkt06fUEKnWsFLXuv/dq
lof14hJd1iIOKxxhUY64djtcbzXJk2oY5vgN78syEke/hSyFW6T6iTBuYNt+Oxi2
HmWeZ5d7t/PIrEzjbN5EFNT8m/qh4/doEgItF+Her/yV9gvnvLIAyj2DKf1oJkSL
y/eSJ4bxJuWOFKSxDeCzItAV/fkuinsPZnX2mGwjX5B2FXk2LQtdfRylyxwO232L
+BwZnu+1Wx7PJQImzyNRSYG7AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUB7h9lPBE
iTVmQTOd5pFkR32P+kMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRTFFQS8wNzgxQzc3MDgwNkYx
MUVFQURDOUVENTg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkUxRUEvMDc4MUM3NzA4MDZGMTFFRUFEQzlFRDU4NEFEOUU2RkMvQjdoOWxQ
QkVpVFZtUVRPZDVwRmtSMzJQLWtNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAuswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmRIgwDQYJKoZIhvcN
AQELBQADggEBAGjNLeJ2akAUIEuoFNlkYakLPVew8Z8MLSCuLKeDUL4BJVoQuKGK
kzPgFu+lxmDLiuuv8nDuup2YU6ndbjeC94qB6qoXP3lDyWHGCiVftOe4VGmQZWwi
uGIOSk6K3/78cAokX9Sr5N+tZjld3+GsyHy4mNX/jC5L89NL423+JfiL/qZgGRfW
vIXriqk7qLyn/yRdakgSUKhneRaY5XH+0eVsANfb9ttRDgF6MWOaI0Az+FMLb2zY
5Fv7r8KKyk0DVKYls58Osx752HqySS+LbHjy56w3fN9Hywhkde3p0cILsdgqTrKW
n2MP+0zOVLyS68PVIAL7B8f/EvJrZcZrYyY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org