Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
File:                     INQ_9eRM5MOe47-3ribe6wBBH9U.cer (raw, json)
Hash identifier:          4XbAf0Wk1jWMFTzLREoajZRa0mP0h0ziWjBcC98Bj+0=
Subject key identifier:   20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       252D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:20:31 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328511
                          IP: 102.68.68.0/23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9517 (0x252d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:20:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365D370AF/serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:33:75:cf:38:19:fe:89:9f:1b:be:64:2d:
                    2e:87:a5:05:24:2c:15:e5:39:79:32:dd:68:b7:23:
                    2e:cc:89:61:fa:f2:e9:10:61:d3:a4:26:13:57:9b:
                    4d:43:79:b0:8d:ee:ff:7b:b8:ca:56:8d:ba:aa:eb:
                    7f:6c:c8:50:53:b9:a1:9e:62:89:14:04:d7:54:c5:
                    9a:51:ea:e9:d5:7f:5f:6e:69:e1:1b:69:5c:63:2f:
                    d8:e6:35:bf:4c:a9:a2:d1:5d:03:83:be:ef:74:cf:
                    00:f4:bf:81:af:0b:c6:5c:79:25:34:6f:bf:1e:9a:
                    4b:f2:32:eb:63:8f:8d:9f:1c:c7:28:85:df:1e:d3:
                    1a:68:61:87:8f:5a:a8:c9:3a:9f:2d:8e:9d:c1:bf:
                    6d:77:3f:97:0e:3b:e9:36:ac:1a:99:48:8a:b9:e6:
                    e6:3d:d6:da:ea:7e:cd:56:b7:d3:fc:df:f3:4b:02:
                    52:80:60:28:6b:8a:32:11:59:76:1b:91:3a:96:ab:
                    6a:ff:a3:39:e7:c7:c4:31:83:79:8d:44:bd:65:49:
                    5c:a2:66:b3:21:2e:18:dc:2f:91:85:fd:68:3b:04:
                    39:e6:35:4d:d9:33:6f:f6:ee:90:52:ab:d0:5c:18:
                    3b:1b:0f:cb:f6:14:f7:31:51:63:c9:1e:d5:d8:a0:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328511

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:fe:00:c8:bd:bd:30:c7:59:3b:32:51:8a:8c:13:04:f0:f3:
         17:54:93:01:c6:d9:4e:43:6f:0d:f0:3a:d7:60:de:f8:eb:ed:
         5a:d3:33:45:db:68:f6:12:c8:da:9e:b7:2e:72:c9:82:ad:36:
         aa:3c:0c:9c:9b:94:b3:82:4b:ac:43:d2:09:72:d7:40:28:13:
         32:88:e2:e6:61:80:db:5a:38:19:37:55:63:d9:62:08:2e:e7:
         24:1b:6e:3b:74:91:47:ab:01:65:db:21:f8:83:20:9a:ad:e1:
         79:3c:c8:64:04:cd:ae:de:49:4d:51:a3:5b:b6:99:69:99:fb:
         12:6d:d3:d8:0a:df:cd:18:35:e0:f6:8b:48:89:79:dc:be:b3:
         9e:7f:e2:d1:54:f4:a4:72:67:72:cd:78:07:84:93:85:2c:14:
         2c:32:e1:50:ca:b3:d0:b4:3b:eb:d9:3d:f5:97:f5:fa:2c:43:
         2d:67:85:37:af:af:4e:3e:35:23:06:06:f1:92:e0:ec:d4:89:
         54:43:7c:99:32:43:0f:a7:18:59:c8:32:5c:e6:8d:81:59:9d:
         c7:82:46:27:e7:18:21:33:43:0a:10:4f:9a:57:aa:82:96:12:
         b4:58:a2:e3:9d:81:97:d1:8c:80:da:ca:0a:e3:5f:d4:5a:59:
         05:8d:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org