Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.cer (raw, json)
Hash identifier:          QUbnaIUAMxwI+kMYXlvQ9Zoy3iT+i61gcRNl7DgRt2Y=
Subject key identifier:   2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2517
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:14:52 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328915
                          IP: 102.218.204.0/22
                          IP: 2c0f:2900::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9495 (0x2517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:14:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:52:8d:f5:c1:56:bb:8a:a5:e9:20:42:97:
                    5f:fb:9f:1a:72:a1:ab:54:a2:2d:03:a3:d6:f1:e1:
                    f4:96:22:94:42:24:b6:56:38:56:90:72:eb:bd:13:
                    5b:aa:25:3c:0c:8e:d5:db:0b:99:27:a0:61:e8:7b:
                    00:a5:96:d1:87:d5:9a:50:22:b9:c9:b6:39:f4:f6:
                    1a:2b:89:96:ce:77:18:70:f1:d8:62:7e:54:a1:a0:
                    df:2b:8f:72:35:74:7c:75:64:25:dd:96:6d:70:6c:
                    6f:6e:e3:88:2f:ac:74:9b:ce:4c:2d:a4:32:0f:e4:
                    9b:ef:98:86:4f:49:8e:9b:b7:c6:4c:54:89:48:e2:
                    23:d5:80:3d:53:8e:82:92:48:d7:35:24:0e:ed:6c:
                    71:36:9e:10:e0:85:21:2a:a4:3d:a7:c1:ff:39:5d:
                    3c:91:83:01:6a:fd:87:df:de:77:97:ed:da:2f:31:
                    2d:2b:0e:4d:a5:ce:99:58:8a:85:f3:f4:66:4d:d8:
                    8f:a7:88:78:cd:4f:ac:da:69:f2:37:27:b3:4b:d7:
                    30:8a:f2:c9:59:a2:d7:18:c8:7d:88:90:4c:d2:e8:
                    93:89:4a:63:84:18:82:7f:89:1c:31:3b:b4:f7:f0:
                    39:11:33:1a:87:69:e7:2e:84:85:6a:7a:9a:83:da:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328915

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.204.0/22
                IPv6:
                  2c0f:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:0f:66:f4:82:85:fe:d6:b2:e3:7a:ad:af:ef:e9:d3:1d:
         bd:40:1e:3c:fd:33:d5:51:77:fe:93:69:f1:3b:ba:93:ff:8c:
         77:90:3d:7f:10:b8:d3:a4:77:51:72:70:50:2e:cb:44:1a:58:
         bc:79:ca:b0:2d:53:ce:53:3c:c2:d1:59:61:82:22:04:11:c3:
         b9:08:58:52:64:51:fb:65:d9:cb:56:88:39:53:fa:e1:c9:80:
         ce:26:3d:98:6e:83:a0:22:eb:3e:18:df:e4:bf:fa:00:41:bb:
         16:1d:ae:5b:f2:46:27:32:69:85:ea:8a:0c:aa:ba:35:13:e7:
         88:f8:4c:fe:0c:54:89:6e:20:30:7c:71:de:85:53:0d:3e:cc:
         40:0d:1c:36:34:32:81:45:51:f7:b5:9b:b2:6a:2e:2f:5e:a0:
         33:62:32:70:cf:39:ee:f3:74:bd:70:08:e3:d3:8a:41:b8:81:
         ba:a6:47:9a:c4:c5:5c:78:8e:f6:4a:c5:1e:e4:6a:61:e7:17:
         7b:21:98:66:ef:b6:18:a0:16:bd:18:8b:d4:12:47:da:d9:d8:
         65:9a:08:30:3d:2a:9e:51:d2:0c:34:10:e4:e6:0e:71:4f:18:
         14:f6:1e:70:6a:1d:06:73:b9:17:38:72:52:b2:a8:61:ca:ff:
         8e:02:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:47 2024 by rpki-client on console-fra.rpki-client.org