Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.cer (raw, json)
Hash identifier:          xpPSbCVUqXmmSpDT7KYpMvBkdeeQTsAPX/paAeocED4=
Subject key identifier:   1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25D0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:46:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328334
                          IP: 102.134.88.0/22
                          IP: 2c0f:ef30::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9680 (0x25d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:46:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:81:d5:68:b3:dd:49:fc:ee:2b:dd:2b:29:
                    c4:80:f2:f0:c2:09:2b:a3:18:64:29:d3:00:a6:81:
                    20:f8:cf:99:0b:9e:1a:71:88:dd:6d:f7:a0:32:e4:
                    b7:12:88:1e:2e:97:79:51:94:58:3f:39:5b:e7:ef:
                    ad:36:7f:01:f8:15:ea:63:56:ca:55:81:af:be:c4:
                    41:f4:b2:2b:c8:d8:7b:1e:d6:58:62:2d:27:ba:83:
                    2e:8b:cb:b0:07:db:2f:54:c8:6c:37:d2:91:68:0c:
                    e3:ec:48:06:e6:38:3d:f8:d5:e2:79:9a:78:1f:b6:
                    c6:81:46:6f:39:a0:d3:92:3c:c1:2f:3f:92:ae:32:
                    72:19:98:e9:f7:31:01:c2:f5:8c:e0:ee:6a:80:1e:
                    1a:7c:29:65:ea:6d:b0:68:66:3e:2d:b9:5c:58:47:
                    18:51:6e:bb:77:dc:78:92:6f:47:ff:1d:ed:eb:7d:
                    a6:31:8e:34:15:41:d2:47:02:cf:53:97:7d:ef:6e:
                    af:44:82:69:21:dd:5c:b1:09:f4:eb:69:9e:06:48:
                    1a:9f:a0:bb:57:1d:eb:8f:d6:a9:43:43:c2:f4:ef:
                    08:9f:2f:40:ab:14:ec:78:8c:91:d1:b2:22:01:0a:
                    dc:64:af:db:94:dd:ae:1f:45:70:30:fd:21:67:2f:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328334

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.88.0/22
                IPv6:
                  2c0f:ef30::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:e1:8c:06:d3:7c:1b:c0:d4:06:45:1b:68:9e:d2:78:d2:
         57:eb:46:23:17:c4:d9:43:33:5c:f4:de:47:a0:49:db:44:14:
         b8:90:df:f1:6f:ea:2c:0f:e9:72:dd:9b:40:f0:ae:4f:77:aa:
         8e:7e:f1:47:da:f0:3d:c9:e6:a4:cf:2b:0d:f3:1d:b3:d1:f2:
         5c:f2:ef:62:00:ea:81:ed:a2:35:9e:16:9a:09:06:78:e0:ef:
         d8:8a:4f:5f:39:d7:44:bf:01:2f:b8:70:5d:24:a7:ae:e8:38:
         8e:40:c7:f6:66:c2:a7:59:af:f7:90:17:aa:9d:b7:d1:27:c2:
         4d:54:e7:87:b6:c9:f6:71:22:9b:e6:c7:78:83:18:95:11:11:
         41:c6:96:a2:9c:56:4a:fd:7a:8f:b7:86:be:a0:a7:57:41:d0:
         e5:7a:90:cd:6e:c2:78:c9:65:14:16:7e:85:4c:d9:f9:da:0c:
         59:b2:1f:51:79:24:9c:7b:d1:3b:54:da:4e:01:5b:f7:2b:96:
         15:b0:63:82:78:b0:d2:8c:9f:46:e5:34:57:97:45:ba:3e:72:
         45:cb:9d:77:d9:6c:54:e8:6c:82:98:1d:76:10:1e:7b:20:a8:
         34:19:81:1e:c2:f1:57:09:07:e0:21:cb:7d:7c:de:e9:31:5f:
         76:40:e5:4b
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICJdAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMjQ2MzJaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjc0MjZBQUYxMTAvBgNVBAUTKDFCNEFCMEI3MjBEODM5Qjc5QTk4OTIz
MjNCMEZBQkVEOTY3MDVBQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvZIHVaLPdSfzuK90rKcSA8vDCCSujGGQp0wCmgSD4z5kLnhpxiN1t96Ay5LcS
iB4ul3lRlFg/OVvn7602fwH4FepjVspVga++xEH0sivI2Hse1lhiLSe6gy6Ly7AH
2y9UyGw30pFoDOPsSAbmOD341eJ5mngftsaBRm85oNOSPMEvP5KuMnIZmOn3MQHC
9Yzg7mqAHhp8KWXqbbBoZj4tuVxYRxhRbrt33HiSb0f/He3rfaYxjjQVQdJHAs9T
l33vbq9Egmkh3VyxCfTraZ4GSBqfoLtXHeuP1qlDQ8L07wifL0CrFOx4jJHRsiIB
Ctxkr9uU3a4fRXAw/SFnL2k3AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUG0qwtyDY
ObeamJIyOw+r7ZZwWqIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NDI2QS83MUE1QjE4NDI4REMx
MUVEOTlGRjNEOEZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzQyNkEvNzFBNUIxODQyOERDMTFFRDk5RkYzRDhGRjEyMjI0NjgvRzBxd3R5
RFlPYmVhbUpJeU93LXI3Wlp3V3FJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAo4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmhlgwDQQCAAIwBwMF
ACwP7zAwDQYJKoZIhvcNAQELBQADggEBABGy4YwG03wbwNQGRRtontJ40lfrRiMX
xNlDM1z03kegSdtEFLiQ3/Fv6iwP6XLdm0Dwrk93qo5+8Ufa8D3J5qTPKw3zHbPR
8lzy72IA6oHtojWeFpoJBnjg79iKT18510S/AS+4cF0kp67oOI5Ax/ZmwqdZr/eQ
F6qdt9Enwk1U54e2yfZxIpvmx3iDGJUREUHGlqKcVkr9eo+3hr6gp1dB0OV6kM1u
wnjJZRQWfoVM2fnaDFmyH1F5JJx70TtU2k4BW/crlhWwY4J4sNKMn0blNFeXRbo+
ckXLnXfZbFTobIKYHXYQHnsgqDQZgR7C8VcJB+Ahy3183ukxX3ZA5Us=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:31 2024 by rpki-client on console-fra.rpki-client.org