Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
File:                     HNlmJ3URky060f0tMBT24WjMSOU.cer (raw, json)
Hash identifier:          iWRKyfBLV0bVQEfIdNorBSXWev+FAJ1C5MGE/ozQ7LQ=
Subject key identifier:   1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       282D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:17:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328760
                          IP: 102.221.248.0/22
                          IP: 2c0f:1b80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10285 (0x282d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:17:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:3b:54:77:40:ae:9f:7f:bb:8c:42:66:f1:
                    48:93:b3:6b:45:63:a9:6d:24:d8:85:0f:3a:77:d6:
                    b7:98:41:46:24:ec:61:73:84:ab:56:ee:c1:5e:33:
                    85:9b:22:af:b8:99:33:2f:ac:fa:7b:2f:c1:c1:8a:
                    f9:08:ef:39:76:26:ce:42:9a:4e:2c:c3:8d:bf:92:
                    2f:0a:fe:8e:dc:ab:96:b4:00:e7:9b:e2:cf:64:1b:
                    57:bd:d0:9f:b8:09:ed:37:fa:a6:9d:19:b3:4c:07:
                    ec:43:08:6b:46:03:f1:61:a7:82:d3:ef:9b:c9:65:
                    4a:9d:fc:09:0e:b0:98:97:19:7e:c4:df:0d:fd:d2:
                    36:ad:80:42:ac:01:40:64:09:0f:56:96:99:b0:6f:
                    92:22:bd:ba:fb:26:74:c9:72:07:b1:c7:39:e3:65:
                    57:6a:11:63:f2:ab:0d:6f:5d:aa:b6:ea:eb:80:8a:
                    90:e3:ab:f5:be:5a:99:d1:5d:c5:aa:9f:96:98:e0:
                    74:bf:39:69:77:b5:dd:a4:d3:b9:f2:84:bb:70:35:
                    5f:cb:3e:b0:5c:37:4d:6d:21:32:95:b4:78:0d:12:
                    2d:9d:31:c4:b6:69:1b:4f:75:4d:47:2b:fb:44:2c:
                    60:43:cb:62:65:fb:63:31:0d:02:c0:e9:5c:05:be:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328760

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.248.0/22
                IPv6:
                  2c0f:1b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:aa:11:0e:43:7f:af:5e:aa:24:10:17:fa:4c:58:34:6b:
         3d:23:05:34:b9:2f:f2:15:9d:69:91:49:0a:f9:50:7e:41:db:
         35:86:13:94:39:48:f1:f4:c7:18:cd:5f:7d:47:e6:c6:97:16:
         84:5b:7f:20:9d:49:a1:24:b9:c6:70:68:5f:22:50:74:c7:74:
         65:84:39:88:b0:0a:7b:02:29:67:b5:9d:01:af:ce:35:59:73:
         f0:25:a0:73:75:47:51:b0:8b:ca:a9:ce:20:b3:52:2d:be:de:
         df:36:9d:6c:71:c7:bc:18:45:b4:3e:77:e8:2e:68:7e:90:c0:
         b5:04:4f:c3:7c:06:68:8a:34:12:38:ce:9e:06:bf:5b:85:47:
         48:3a:09:8b:57:ee:0c:26:82:3b:7d:7a:0d:e8:45:cd:3e:6a:
         12:9f:d6:17:c9:fb:48:c4:3b:b8:9e:8b:f3:ad:67:2a:c8:41:
         ba:cf:fb:72:43:ec:68:4c:e6:20:46:89:32:0b:95:b8:cc:97:
         a7:81:6c:03:28:42:78:97:a7:34:b4:38:3f:23:03:0a:61:5d:
         9b:d3:a0:e9:2c:c7:9d:d5:5a:72:2d:ef:83:fd:41:7e:92:0d:
         37:c1:2c:59:6a:46:b2:29:99:aa:19:b8:ff:b3:c2:85:c7:b4:
         cf:9c:f9:ad
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICKC0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDE3MzFaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkUyQjY5QUYxMTAvBgNVBAUTKDFDRDk2NjI3NzUxMTkzMkQzQUQxRkQy
RDMwMTRGNkUxNjhDQzQ4RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoyjtUd0Cun3+7jEJm8UiTs2tFY6ltJNiFDzp31reYQUYk7GFzhKtW7sFeM4Wb
Iq+4mTMvrPp7L8HBivkI7zl2Js5Cmk4sw42/ki8K/o7cq5a0AOeb4s9kG1e90J+4
Ce03+qadGbNMB+xDCGtGA/Fhp4LT75vJZUqd/AkOsJiXGX7E3w390jatgEKsAUBk
CQ9Wlpmwb5Iivbr7JnTJcgexxznjZVdqEWPyqw1vXaq26uuAipDjq/W+WpnRXcWq
n5aY4HS/OWl3td2k07nyhLtwNV/LPrBcN01tITKVtHgNEi2dMcS2aRtPdU1HK/tE
LGBDy2Jl+2MxDQLA6VwFvrTxAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUHNlmJ3UR
ky060f0tMBT24WjMSOUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMkI2OS8xQjZBQzUzOEY2Nzgx
MUVEQTMzNjcyMTk0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTJCNjkvMUI2QUM1MzhGNjc4MTFFREEzMzY3MjE5NEFEOUU2RkMvSE5sbUoz
VVJreTA2MGYwdE1CVDI0V2pNU09VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBDgwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3fgwDQQCAAIwBwMF
ACwPG4AwDQYJKoZIhvcNAQELBQADggEBAIbsqhEOQ3+vXqokEBf6TFg0az0jBTS5
L/IVnWmRSQr5UH5B2zWGE5Q5SPH0xxjNX31H5saXFoRbfyCdSaEkucZwaF8iUHTH
dGWEOYiwCnsCKWe1nQGvzjVZc/AloHN1R1Gwi8qpziCzUi2+3t82nWxxx7wYRbQ+
d+guaH6QwLUET8N8BmiKNBI4zp4Gv1uFR0g6CYtX7gwmgjt9eg3oRc0+ahKf1hfJ
+0jEO7iei/OtZyrIQbrP+3JD7GhM5iBGiTILlbjMl6eBbAMoQniXpzS0OD8jAwph
XZvToOksx53VWnIt74P9QX6SDTfBLFlqRrIpmaoZuP+zwoXHtM+c+a0=
-----END CERTIFICATE-----
Generated at Mon May 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org