Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/STmJqI9ygR8i60Gk6wwSdOHx2pA.cer
File:                     STmJqI9ygR8i60Gk6wwSdOHx2pA.cer (raw, json)
Hash identifier:          uxNuBa4LePEId3oqRwg5KVoKYBPVC2vIzMiXYQXOl3A=
Subject key identifier:   49:39:89:A8:8F:72:81:1F:22:EB:41:A4:EB:0C:12:74:E1:F1:DA:90
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2864
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/STmJqI9ygR8i60Gk6wwSdOHx2pA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:25:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329121
                          IP: 102.214.232.0/22
                          IP: 2c0f:7080::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10340 (0x2864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:25:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36EE1C1AF/serialNumber=493989A88F72811F22EB41A4EB0C1274E1F1DA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:93:e2:a1:1e:de:3c:58:29:48:f8:ab:17:
                    3e:37:84:f7:3c:b5:85:ea:db:1e:6c:dd:5b:b0:bc:
                    bb:a1:47:f9:36:9d:d1:e3:d5:c8:78:0f:39:1b:27:
                    16:e5:b5:78:76:76:9c:ac:73:17:8e:cd:32:d8:aa:
                    d3:d2:6b:3b:50:62:45:72:47:c3:41:d7:7b:d3:6d:
                    90:1a:03:35:2a:73:20:d3:16:13:9c:47:cd:01:ae:
                    7e:0b:a9:e3:6c:25:53:d3:da:b9:35:7b:ab:8c:f4:
                    73:c2:54:49:c3:af:8c:57:0e:d3:e2:68:85:57:96:
                    ff:c6:ff:0e:29:f1:1a:c5:0b:ea:f8:b2:95:4a:04:
                    9a:ff:54:8f:69:e3:21:e0:99:09:98:c7:86:d1:6d:
                    f3:da:cd:d8:f5:86:6d:8e:c1:da:3c:11:ad:a8:f4:
                    f9:d5:1f:54:42:95:f8:99:ce:cb:71:e5:fa:03:e1:
                    c1:35:b6:f6:a9:64:50:31:65:d4:5f:22:68:0b:a2:
                    4b:41:f6:42:0f:fa:42:f1:8d:cf:89:1f:c6:85:63:
                    9f:21:68:95:f3:56:02:96:85:d8:de:ca:8a:de:22:
                    c9:01:13:c3:2d:4c:d8:c9:26:16:ba:ea:e6:94:6c:
                    18:4a:61:a8:30:98:d6:ce:ee:b5:39:09:42:f4:81:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:39:89:A8:8F:72:81:1F:22:EB:41:A4:EB:0C:12:74:E1:F1:DA:90
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/STmJqI9ygR8i60Gk6wwSdOHx2pA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329121

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.232.0/22
                IPv6:
                  2c0f:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:0f:a6:f1:4e:01:a0:cf:9d:3f:e1:aa:39:90:c8:5f:c3:
         45:5b:ec:19:bb:d7:6e:c8:0c:2f:7a:ee:f6:e1:87:de:61:2a:
         ce:cb:90:c5:d8:37:0b:25:78:18:c2:46:6f:4f:c4:50:9e:e6:
         b7:ea:b0:62:80:50:78:b6:85:3c:cc:41:00:f4:86:3f:e2:08:
         72:d8:c5:4e:9f:d9:1f:6c:7c:e5:0f:a6:99:93:50:27:09:d8:
         a2:e8:52:7d:c8:2d:bd:b4:4b:96:2f:16:c1:f3:6a:0e:c0:2c:
         ef:09:ed:c5:cf:d2:08:b5:4a:51:b5:6f:6a:8c:04:e3:4c:65:
         8c:61:46:3a:b1:a6:9b:70:85:71:28:31:62:a3:1b:c4:77:77:
         53:63:ea:fc:f6:0c:8f:0a:fd:56:ac:93:fa:2d:91:71:46:38:
         57:66:b5:cc:08:03:ff:f0:6c:73:ea:68:24:f9:b2:8a:94:e4:
         8a:00:f8:61:f6:53:9f:87:6c:d7:ed:3a:0a:bc:cb:be:35:53:
         28:a2:34:a1:83:44:c3:ba:5c:37:7c:65:a6:c4:66:e7:35:07:
         de:b9:ce:38:44:d5:f7:83:69:d4:b8:d9:dd:48:f6:9e:26:bf:
         77:5c:b5:db:22:0b:c3:18:92:7f:0f:84:b6:cb:5b:91:77:0e:
         44:bf:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:10 2024 by rpki-client on console-fra.rpki-client.org