Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.cer (raw, json)
Hash identifier:          XgZYETDZ15Bg7B7DlvO73zT9LeE3b2lLJ+zJvZzPIfY=
Subject key identifier:   2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       232C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:08:21 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328041
                          IP: 2001:43fc:8000::/40

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9004 (0x232c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:08:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:e5:ef:8f:f0:69:83:18:78:08:2d:6a:4f:
                    be:20:4b:0a:30:f2:1b:8d:20:fc:e6:6c:c8:70:1e:
                    7e:f4:49:8e:cc:f2:a7:fb:d9:4a:a4:5f:aa:86:7d:
                    79:90:4d:c4:0d:5c:95:81:18:d5:4e:6a:e9:e7:70:
                    1b:29:3f:2d:21:d3:46:6e:99:27:98:2a:fb:e8:e6:
                    c0:a1:44:7f:07:08:0f:8d:3d:76:3a:31:fe:f9:05:
                    bb:a5:48:b1:5a:cc:1b:a3:5c:81:2e:c0:e4:6a:ef:
                    8d:e7:98:c8:64:49:c0:58:3c:33:69:e1:34:ae:de:
                    ca:98:92:e9:32:cd:da:06:ba:da:d0:1e:50:e5:66:
                    ea:9b:0e:38:d5:e9:ee:09:86:54:39:72:e3:82:e4:
                    60:7d:06:3f:1c:2b:54:6e:b9:f3:36:97:64:e9:8e:
                    83:15:e7:60:2f:e8:d1:53:d9:42:3a:8d:9a:bb:1e:
                    42:34:42:bc:1b:ee:01:08:7a:fd:77:a6:b4:ff:60:
                    59:14:99:89:3e:ea:c7:a3:2d:9e:71:72:8b:88:62:
                    46:5e:11:85:e7:4f:fd:f9:e0:d8:5d:0a:ce:a1:4a:
                    ac:bb:91:0e:c1:20:c7:fb:ab:83:f3:75:07:d0:a1:
                    f6:92:2e:c6:13:ae:e9:6c:0e:18:43:eb:52:99:c5:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328041

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43fc:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:44:3d:cd:04:97:91:8a:dc:1d:ad:4b:4e:78:14:9f:64:
         6d:4d:28:c2:e0:8f:50:e0:a5:f1:0d:5a:57:37:8b:a7:0f:64:
         4a:7c:1c:88:1c:eb:1b:8b:1f:2b:f1:fa:3b:9a:8f:a2:28:2b:
         63:5f:a7:ed:03:e6:08:c6:44:5c:c3:92:7c:3a:e0:0c:5a:b3:
         7f:75:7f:3d:4e:5f:23:13:05:64:24:de:34:e1:63:b0:ae:ec:
         c4:dd:26:c2:39:31:87:2f:98:f3:a8:11:48:e2:46:9a:50:4e:
         f3:eb:11:48:27:f6:d5:bf:dc:2a:80:5e:ea:bb:c9:da:3d:4e:
         ad:14:e8:cc:bf:c9:52:9b:97:97:38:22:00:5b:c2:d4:06:3d:
         b2:d3:65:15:4b:d2:76:3d:b3:b9:22:c7:ce:f9:bf:82:3e:ea:
         76:c6:5c:93:fc:7e:08:c8:33:31:8c:86:60:cb:76:13:59:a6:
         64:b5:30:fe:b9:17:56:c4:16:e6:03:21:4a:2c:4d:e9:2a:09:
         dd:2b:91:e3:8a:93:f2:6c:5f:a3:57:45:17:e2:68:61:c2:ed:
         05:a4:75:4e:46:97:88:19:83:81:d1:78:6b:a0:23:f1:21:df:
         15:c2:ce:db:60:27:e3:48:df:75:d7:b8:59:72:5c:8e:23:28:
         78:6b:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:21:28 2024 by rpki-client on console-fra.rpki-client.org