Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
File:                     BzRbRCXqohbQO3DogD88w6vhdRw.cer (raw, json)
Hash identifier:          WSAc4TbYeZRpVOziT2B1CAxXsWEYb68Mt9Mlf0xn/Tg=
Subject key identifier:   07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2320
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:04:38 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327906
                          IP: 102.217.144.0/22
                          IP: 2c0f:f008::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8992 (0x2320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:04:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:18:9a:33:1a:5c:de:3c:73:a8:6a:88:3a:
                    cc:42:65:39:a5:5c:e9:43:6b:92:3b:70:7c:07:8f:
                    c7:2d:69:38:16:84:18:60:fe:07:91:36:f7:74:5e:
                    1b:05:eb:e7:8f:5a:ea:04:3a:c5:41:5d:2d:e2:f7:
                    55:bb:4e:be:39:1c:97:55:34:ea:08:d0:e4:7e:94:
                    08:e7:5e:36:18:89:84:fc:20:53:26:2d:6e:b3:43:
                    11:c8:c8:53:19:66:44:82:29:49:77:60:ca:40:96:
                    e6:e8:1c:56:5c:d7:bf:a5:f4:74:8f:07:83:48:ee:
                    72:ad:82:93:98:b2:94:4d:ba:ea:aa:3b:72:7c:37:
                    26:98:de:92:7b:74:8c:89:85:47:64:9a:cd:e8:6c:
                    c0:62:f8:66:00:4d:e6:4f:27:c2:62:b8:30:67:bc:
                    f0:a1:e2:31:fd:b4:fa:51:84:e4:22:a8:2c:c1:e4:
                    29:81:d1:70:cd:12:b5:81:49:da:4b:9a:f8:0d:f1:
                    93:81:05:f3:9a:2f:ff:22:d3:30:83:91:a6:9d:4e:
                    ab:05:29:49:2f:46:c3:5f:c2:72:ef:53:5d:7e:01:
                    58:73:f4:79:94:4f:f5:56:fb:72:09:98:53:01:5c:
                    ef:42:f1:1d:f3:cd:a6:7f:5c:f3:46:81:3b:65:ca:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327906

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.144.0/22
                IPv6:
                  2c0f:f008::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:52:37:c8:7a:f8:b0:c8:74:87:f2:b7:d3:a9:c6:c0:50:
         5a:f0:84:d0:d8:de:12:b8:48:38:d0:72:0f:a4:78:08:a5:52:
         a8:be:49:f3:d1:b1:02:53:82:09:12:c7:60:83:eb:6e:7e:f8:
         f7:64:f3:b3:50:72:b5:86:c8:5e:57:13:0f:7f:4b:59:d6:a8:
         8a:23:2c:79:40:fa:d1:c6:4f:1d:ea:a7:22:d5:ce:26:d5:da:
         3f:a9:56:f8:65:3f:9f:2b:b4:bc:d5:57:6c:62:38:b9:ba:b7:
         07:59:0b:6e:53:1e:91:f5:e2:cf:94:4d:dc:f4:7b:53:d3:59:
         34:66:a8:59:44:9c:4c:f6:8a:0d:66:a6:cc:c0:b5:c4:8c:c7:
         f3:4a:28:1f:7d:7b:57:8e:44:95:14:fb:e7:c5:5d:4b:3e:40:
         75:45:ad:d8:de:a9:a4:e3:37:dd:88:d6:fc:db:63:24:8c:5e:
         b5:20:b4:16:7c:f4:19:22:50:a4:da:78:49:a8:a2:ae:13:97:
         14:4d:7b:f2:b0:f2:a7:a5:5b:6a:e4:2f:a5:4c:2a:20:9e:5d:
         3a:b3:94:7a:7f:e9:de:63:4a:b2:eb:e5:c9:9f:ca:94:67:db:
         fa:27:ff:1d:97:a6:11:5c:8f:07:43:71:9b:61:21:90:30:5d:
         c6:60:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----