Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.cer (raw, json)
Hash identifier:          C5lxTibrbC2Tl3hhXup5PI3Bgm2PMg7j6pcSqGEOAlE=
Subject key identifier:   3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       232A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:07:46 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37738
                          IP: 102.210.212.0/22
                          IP: 2c0f:5f40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9002 (0x232a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:07:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:87:d8:cf:a7:83:00:03:18:ff:e0:93:af:
                    20:d3:be:0d:67:62:6c:20:ad:f1:2a:2c:e4:b8:6a:
                    b5:cc:09:6a:4b:39:72:cd:68:99:ba:a3:57:42:ae:
                    b0:46:b5:1a:5b:ed:ab:ef:89:67:34:cc:0c:97:e0:
                    ff:11:b0:6a:9d:22:d8:70:d9:2b:13:f0:bb:c4:0b:
                    53:41:f3:08:10:47:2a:6d:69:a3:ba:ae:d9:3b:1e:
                    73:81:13:85:7b:79:9d:4a:02:ef:df:64:28:b8:ff:
                    9d:d5:b7:dd:8c:f4:0b:56:b4:3d:cf:02:b4:03:eb:
                    81:ff:d1:36:c4:bb:fc:e9:d3:de:d1:e3:03:1b:1a:
                    29:6a:18:08:09:3e:5f:a4:1b:f7:72:39:6c:3a:09:
                    20:40:39:93:8b:6c:89:85:3e:7f:d7:11:d4:97:1a:
                    90:c8:df:3a:39:87:96:1d:15:6b:05:e7:b3:ad:cc:
                    1b:10:d5:92:e6:78:f2:4c:4d:29:08:de:09:49:01:
                    52:1c:4f:35:17:27:d4:d7:96:5e:45:ad:94:9f:75:
                    84:ca:01:ff:8e:fa:a7:e6:cc:92:8a:45:94:2a:05:
                    61:b0:7c:93:9c:38:9e:34:a1:7b:11:8d:2b:ed:e2:
                    1d:3c:b6:26:f1:45:96:3c:10:17:81:ec:ec:3a:55:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37738

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.212.0/22
                IPv6:
                  2c0f:5f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:b3:4b:81:76:e6:77:e3:be:e3:16:ad:9c:b1:e3:81:38:
         66:4a:11:c1:38:af:b7:25:26:1d:95:3c:dd:16:20:d3:9e:56:
         06:a7:25:c9:fc:5c:54:a0:ca:56:8c:4c:ea:6c:5f:a9:c9:8e:
         9b:9e:d9:0b:59:25:c2:ef:46:64:d7:de:75:35:5e:6e:97:4a:
         70:ab:0a:84:a3:62:a7:cb:87:ae:18:88:59:33:3a:42:fe:51:
         8b:5b:1e:7d:5a:10:ce:28:95:50:5c:8e:57:a9:5f:49:94:53:
         3f:e9:d0:01:cc:c3:87:11:13:22:25:d3:b9:fa:e1:5d:db:7c:
         a2:7a:28:43:e5:0f:38:fc:81:6f:c8:44:eb:ba:91:cd:40:0f:
         fa:78:6f:b7:98:1e:ac:79:0b:00:f1:1f:b6:c5:95:d5:39:44:
         0b:cb:0b:b7:c2:6c:e6:5d:c2:d5:6c:f0:1c:d0:d5:88:18:76:
         f3:e1:b5:c4:da:41:2f:07:63:c7:74:40:20:7e:b3:b1:4c:32:
         7a:e7:22:e7:0c:c4:58:3d:f7:74:e7:64:6f:5c:e6:9a:f7:ad:
         02:4a:d7:10:a8:9f:29:cc:07:07:99:d5:fb:6d:d1:9d:77:24:
         81:ab:51:8f:e6:19:60:07:a2:3b:7f:71:37:30:b6:be:7a:9f:
         59:62:85:5c
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICIyowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMDA3NDZaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjE0REZEQUYxMTAvBgNVBAUTKDNDRTc0QUM1MjVBQkM5QjUwNTEzMUU1
NkQzQUY0QkFBMENBODZCQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDURofYz6eDAAMY/+CTryDTvg1nYmwgrfEqLOS4arXMCWpLOXLNaJm6o1dCrrBG
tRpb7avviWc0zAyX4P8RsGqdIthw2SsT8LvEC1NB8wgQRyptaaO6rtk7HnOBE4V7
eZ1KAu/fZCi4/53Vt92M9AtWtD3PArQD64H/0TbEu/zp097R4wMbGilqGAgJPl+k
G/dyOWw6CSBAOZOLbImFPn/XEdSXGpDI3zo5h5YdFWsF57OtzBsQ1ZLmePJMTSkI
3glJAVIcTzUXJ9TXll5FrZSfdYTKAf+O+qfmzJKKRZQqBWGwfJOcOJ40oXsRjSvt
4h08tibxRZY8EBeB7Ow6VXhXAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUPOdKxSWr
ybUFEx5W069Lqgyoa8cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNERGRC85MTg3QzVENDc3Njcx
MUVFOTlERkQ5NzI0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFEOUU2RkMvUE9kS3hT
V3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAk2owLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0tQwDQQCAAIwBwMF
ACwPX0AwDQYJKoZIhvcNAQELBQADggEBADyUs0uBduZ3477jFq2cseOBOGZKEcE4
r7clJh2VPN0WINOeVganJcn8XFSgylaMTOpsX6nJjpue2QtZJcLvRmTX3nU1Xm6X
SnCrCoSjYqfLh64YiFkzOkL+UYtbHn1aEM4olVBcjlepX0mUUz/p0AHMw4cREyIl
07n64V3bfKJ6KEPlDzj8gW/IROu6kc1AD/p4b7eYHqx5CwDxH7bFldU5RAvLC7fC
bOZdwtVs8BzQ1YgYdvPhtcTaQS8HY8d0QCB+s7FMMnrnIucMxFg993TnZG9c5pr3
rQJK1xConynMBweZ1ftt0Z13JIGrUY/mGWAHojt/cTcwtr56n1lihVw=
-----END CERTIFICATE-----
Generated at Tue May 7 01:57:26 2024 by rpki-client on console-fra.rpki-client.org