Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/S4D0bEIIq3jyH3EKKWI1-QYyTis.cer
File:                     S4D0bEIIq3jyH3EKKWI1-QYyTis.cer (raw, json)
Hash identifier:          fzze+qKx1W2dvJesUMDjslAkIBPeDK+HRR9qZEVziv4=
Subject key identifier:   4B:80:F4:6C:42:08:AB:78:F2:1F:71:0A:29:62:35:F9:06:32:4E:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2869
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/S4D0bEIIq3jyH3EKKWI1-QYyTis.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:26:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329121
                          IP: 102.214.232.0/22
                          IP: 2c0f:7080::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10345 (0x2869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:26:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EE1C1AF/serialNumber=4B80F46C4208AB78F21F710A296235F906324E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:24:eb:71:fd:6e:25:b2:f1:9b:d6:d4:79:
                    9e:e4:bb:5c:04:cc:ae:d3:13:b6:a2:19:62:04:0f:
                    e0:72:85:05:1a:da:b3:2f:20:90:33:dd:db:c8:12:
                    cf:e6:ec:63:a9:1c:2d:65:6d:7c:21:05:b9:a6:cd:
                    91:ca:66:fa:46:e9:2a:6b:b0:4b:1e:04:ee:e0:0f:
                    79:98:c9:ed:8c:3e:25:a9:b4:c4:7a:c2:41:9a:62:
                    c0:ed:07:fb:cb:a8:1a:14:ed:32:bb:32:8b:3b:0d:
                    05:98:23:c1:34:28:12:23:be:74:8f:fb:71:ea:96:
                    f2:1f:90:dd:3e:d9:12:f5:32:7b:24:9e:0d:0f:fb:
                    0a:fc:a8:64:1e:74:fd:02:c3:45:eb:d9:b1:59:2e:
                    1a:20:de:0f:e6:d9:c0:fd:5e:1a:4e:86:9b:d0:90:
                    eb:2c:58:c5:06:d4:03:24:cd:17:c5:bc:ef:63:f3:
                    34:d6:94:7e:57:55:5d:9c:e5:0c:9e:e5:a1:e5:e5:
                    40:ed:0e:f5:4a:58:f5:02:c1:cd:97:93:24:70:18:
                    66:4a:e7:f2:89:e1:b4:0f:5d:7d:e8:ca:16:ec:89:
                    5b:7c:f2:ef:f1:a2:80:24:f9:e3:3b:77:c7:24:fc:
                    f7:ba:2a:04:9b:40:45:c5:61:9a:e6:8d:94:3d:9f:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:80:F4:6C:42:08:AB:78:F2:1F:71:0A:29:62:35:F9:06:32:4E:2B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/S4D0bEIIq3jyH3EKKWI1-QYyTis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329121

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.232.0/22
                IPv6:
                  2c0f:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:33:a6:fa:00:10:d5:fd:65:25:8e:aa:fe:c5:b9:3f:bc:
         d6:bf:eb:59:21:d2:31:cc:ba:10:b7:88:ea:62:1c:03:b7:a0:
         b9:85:a4:27:55:e3:1d:fc:9b:21:d8:79:cb:4d:9f:65:65:8e:
         9c:77:4c:cd:44:74:a7:a2:a4:bf:95:91:89:8a:dc:af:3a:5f:
         b7:b8:e7:c5:15:96:e1:fb:4e:2a:97:5d:41:9a:b6:ec:fa:6d:
         fd:7e:f9:5a:1e:f0:9b:10:8d:cb:20:8a:17:89:5e:d1:80:4b:
         d7:fa:38:cb:03:06:09:d9:e4:e9:00:2c:62:09:fc:8d:4c:e1:
         b8:34:20:ea:e8:03:f6:4b:f7:25:1c:08:88:a3:e1:4e:c0:ba:
         71:66:34:70:0f:a7:c2:dc:86:1a:ff:b9:8e:b7:0e:64:86:f6:
         c2:c0:d3:44:00:8e:ff:d2:ad:98:74:10:c5:87:49:29:b9:55:
         20:b9:a6:6f:b1:8d:ac:54:a3:f8:ac:3f:84:34:b7:a0:82:db:
         10:86:26:0b:67:bd:20:73:2d:f5:0b:95:6b:ca:dc:d8:93:20:
         7f:f2:a0:5a:5f:5a:60:cd:c0:a7:e7:d2:c5:d5:7f:14:17:40:
         b5:8d:97:64:45:26:9e:19:42:16:bc:3d:a2:64:ba:ea:af:a4:
         42:ad:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:42 2024 by rpki-client on console-fra.rpki-client.org