Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.cer (raw, json)
Hash identifier:          R7C8tkJoXhrzs1nshPon0WBv2GJi3HWhhUDrCpZCff8=
Subject key identifier:   3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2871
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:27:27 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329250
                          IP: 102.211.232.0/22
                          IP: 102.212.4.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10353 (0x2871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:27:27 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:83:47:60:3c:e2:9e:3a:73:4e:5a:2b:b5:
                    bd:9f:fc:dd:10:7d:07:2b:7b:8f:f2:4d:09:5e:f1:
                    e5:99:e9:f7:ef:73:d3:e3:57:c6:9e:2a:fd:c5:da:
                    8d:3f:01:93:df:c3:5d:ee:cd:d2:92:c8:28:c0:9b:
                    4a:7e:85:bc:d1:87:5c:28:85:bb:17:03:29:8a:be:
                    75:e0:ef:21:fe:a4:75:d5:2a:42:73:8a:3f:7e:94:
                    f5:17:c9:a3:47:ff:e0:c0:47:85:9c:c8:1c:96:aa:
                    9f:38:61:7a:2c:7e:94:1c:84:89:4e:96:17:f4:b2:
                    51:c6:c1:49:7f:d6:54:b9:36:b8:ee:1a:2a:5c:32:
                    b3:f2:15:0e:af:9e:c7:fb:da:b2:dc:e6:68:61:2e:
                    5a:1c:86:7e:81:f7:a6:da:08:ae:17:96:80:0f:33:
                    93:4d:41:64:f9:6c:9e:cf:1c:42:6b:df:d0:83:4d:
                    37:f4:4f:ab:ba:71:05:96:2c:08:7f:d2:72:a7:eb:
                    13:f5:da:b4:bd:2b:da:11:f8:34:c5:99:f5:fe:57:
                    a9:cf:bc:da:d0:a6:c6:8c:68:7b:5b:58:6e:b0:4c:
                    16:c4:b8:26:fb:b7:68:80:75:bf:29:ca:0f:4d:f1:
                    52:72:a2:36:26:b4:4d:66:e8:4b:54:d7:d7:5a:7b:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329250

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/22
                  102.212.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:78:b2:b5:90:d6:6b:c0:49:01:df:d1:c4:4f:72:82:28:
         1e:ef:63:b4:58:3c:5a:9a:9f:d9:1d:ed:f8:df:28:57:05:0c:
         57:96:f5:9d:da:48:36:d1:f1:a4:01:83:17:fe:7e:a0:4b:32:
         a3:75:b6:eb:6f:56:1a:81:65:69:3c:cc:f3:01:6d:7a:50:0e:
         d6:97:90:34:5c:00:0e:0d:2b:e7:b7:cd:69:7e:cc:17:cf:91:
         cf:05:56:de:99:d0:c3:fe:0c:a8:33:b5:23:66:31:ac:10:b0:
         b0:d5:bf:c5:81:81:55:1e:e8:f5:74:e7:7b:52:d1:21:14:c0:
         6b:7a:ce:09:aa:c3:75:1c:d0:2f:20:77:0c:15:19:c8:60:91:
         88:22:d3:6d:f2:08:48:b0:04:9b:f1:5b:8a:f4:ee:2c:c3:48:
         ad:f7:d9:0d:2d:98:7b:83:69:d4:46:c6:99:30:dd:1a:5a:3e:
         21:11:3a:fb:b1:fd:d7:6c:7e:94:39:ac:dd:37:6f:11:02:70:
         2b:94:7b:3d:d6:16:8a:bc:85:f6:ac:42:56:64:a2:d3:18:bb:
         04:5f:8e:bf:4d:fc:2d:27:c8:e6:f1:62:ad:8a:14:a7:de:f1:
         d0:6c:c6:c3:ad:8d:dc:f9:33:64:9f:8f:bf:b4:a7:15:14:b5:
         f7:db:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:10 2024 by rpki-client on console-fra.rpki-client.org