Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer (raw, json)
Hash identifier:          WWtw4GYq9Dw4xW285Wq8T49z3KUbeNmbWKsYHGU5C24=
Subject key identifier:   2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       282B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:17:10 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327996
                          IP: 102.132.32.0/19
                          IP: 102.212.84.0/22
                          IP: 102.212.128.0/22
                          IP: 102.213.20.0/22
                          IP: 102.213.144.0/22
                          IP: 196.11.176.0/21
                          IP: 196.251.128.0/21
                          IP: 2c0f:5a00::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10283 (0x282b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:17:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:43:e2:c5:bd:c7:f4:a9:53:3d:0c:ef:8a:
                    4d:ae:6d:cc:29:35:31:82:f2:c9:7b:76:25:2d:68:
                    11:9f:18:c9:bd:76:f0:36:20:2c:ba:f7:6a:41:27:
                    2e:e8:34:54:ef:63:3d:da:18:ed:df:7b:df:32:26:
                    13:9b:8e:cf:ef:5a:cd:39:1e:3a:4e:08:fc:1d:ca:
                    16:46:69:8d:44:1c:e9:6d:32:b5:c0:03:ac:3d:91:
                    ef:05:d5:1e:f3:ba:ec:9c:46:f8:1c:88:ff:2a:91:
                    13:d3:d0:de:98:ab:a6:da:5c:b1:3a:8c:6a:f4:62:
                    d1:79:ec:4b:6a:6a:54:04:83:7c:1b:ee:98:ad:da:
                    8e:53:a9:d0:b9:b7:5b:ac:9c:29:6c:69:43:a7:b9:
                    2f:ec:bc:6a:9c:6a:be:14:8f:5f:69:9e:b4:c4:24:
                    3e:de:7f:2f:42:82:08:2e:f5:71:90:19:0e:5e:7d:
                    49:73:6c:48:b7:5f:4d:d4:1e:bb:79:3b:28:6e:8b:
                    31:b8:3d:dd:e9:ad:1a:c8:29:59:1b:65:f8:8c:3a:
                    e2:f3:94:f9:6a:be:8e:fc:ad:f4:8f:6e:60:2b:97:
                    ac:df:9b:b5:b1:3b:6f:33:c6:80:4c:19:02:a8:86:
                    71:3d:8b:1b:49:9b:fd:d7:76:80:18:2f:72:d6:a7:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327996

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.32.0/19
                  102.212.84.0/22
                  102.212.128.0/22
                  102.213.20.0/22
                  102.213.144.0/22
                  196.11.176.0/21
                  196.251.128.0/21
                IPv6:
                  2c0f:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:a8:f4:12:70:d2:90:88:28:90:ff:ec:91:95:2a:02:8f:
         51:7d:0e:33:09:27:63:95:41:d1:90:ed:0b:75:46:a8:80:5e:
         9a:f0:e5:b1:38:68:f7:ab:55:13:cc:93:90:73:3c:83:8c:ff:
         08:45:ad:bc:05:fa:c7:6d:89:29:7e:49:11:0d:d4:a2:1a:12:
         ee:d7:7e:7b:2f:67:90:63:46:3b:d3:92:f8:14:3f:e0:20:0f:
         13:92:e1:54:cd:ab:d3:51:7d:47:83:86:2c:76:83:b3:a6:ef:
         e5:0c:43:2c:fa:6a:49:e1:6e:be:78:f9:e3:ca:8a:78:d4:78:
         46:8f:b4:26:04:50:ba:a5:47:8c:49:34:94:25:ad:7d:d0:cb:
         fe:0a:4f:2e:f0:68:35:3e:f1:69:67:0f:39:61:7b:dc:87:08:
         30:2b:48:21:03:b5:a8:3b:77:b1:ea:8e:96:8a:38:11:8a:2e:
         5f:50:33:36:42:f3:50:3b:c2:e2:6c:82:ac:0e:d2:19:8e:60:
         fb:c2:d4:31:06:17:57:2a:d0:eb:c5:05:e1:a8:02:f3:52:d9:
         d8:a2:c9:8c:03:af:59:3f:7a:85:16:47:9e:0d:a6:97:8a:8c:
         84:8e:b6:b6:bf:97:59:85:50:7d:3f:53:bd:22:1a:23:16:40:
         a1:63:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:21:28 2024 by rpki-client on console-fra.rpki-client.org