Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer
File:                     TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer (raw, json)
Hash identifier:          dsVKVWjymGbVXH9v4OE0TqhSUczuRYVIrXwvOryDVYw=
Subject key identifier:   4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2499
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:44:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328457
                          IP: 102.69.240.0/22
                          IP: 2c0f:6d00::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9369 (0x2499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:44:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3649F7FAF/serialNumber=4CF56E1172D2D3D8612B445182461EEAAB1FE6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:5a:e6:a3:31:ad:3d:01:70:05:9d:30:91:
                    c2:b5:9e:5b:96:cb:80:04:19:9c:8f:9f:9a:49:0f:
                    4c:36:26:63:af:6c:41:ad:c3:60:71:8c:a5:3d:e0:
                    6d:14:24:9f:4b:e7:89:b9:62:15:2b:66:6e:6b:6e:
                    b0:ab:8a:c4:95:ff:2c:7c:d8:d3:5f:3f:69:33:06:
                    fc:b8:e4:53:9c:33:2d:fd:04:cc:7e:fb:29:86:fa:
                    6c:6a:bd:11:cd:7c:33:b3:c9:18:04:bc:fc:1d:92:
                    e4:51:0c:fd:43:8c:49:d3:39:34:5b:e5:ca:17:84:
                    7a:2c:cc:ee:5f:40:b7:be:1a:84:01:61:6a:10:7a:
                    62:d5:a0:b3:92:97:c8:ec:5f:5f:a2:6a:cc:c0:63:
                    2e:3e:46:a9:08:7c:59:ef:88:3a:af:0d:5e:92:85:
                    49:63:a6:8c:52:25:53:81:d5:b3:12:b2:03:96:6b:
                    d8:f2:ce:b8:94:a5:7a:ee:90:f5:32:cc:51:c4:ce:
                    c2:9c:b4:6f:a1:a5:14:80:48:42:30:40:09:36:17:
                    b2:e4:ce:36:30:75:b4:6b:36:f4:d2:c7:e9:25:a9:
                    de:03:5c:38:5e:6b:66:56:49:bd:3f:34:ad:aa:71:
                    31:c9:49:69:81:a0:d0:41:94:26:de:ca:7d:fa:6b:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328457

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.240.0/22
                IPv6:
                  2c0f:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:eb:45:bc:8c:72:2c:42:dd:c3:71:77:25:93:b5:de:e9:
         18:c0:69:95:be:b1:74:58:1f:ae:83:e4:dc:2f:08:4c:0d:69:
         93:9f:1e:db:34:ae:a4:09:49:61:78:8c:cf:93:47:f6:0b:40:
         2b:f0:c9:03:0c:ea:01:d5:f7:b6:84:e8:e4:5f:d3:a4:09:e8:
         a7:ae:aa:fe:a0:51:3c:0b:fc:d2:03:62:8b:11:7d:4d:0c:c6:
         7a:22:48:e5:1f:f2:db:01:d9:d0:d3:c1:3e:79:44:ee:5d:25:
         57:65:17:b2:22:11:12:d0:df:70:c1:8b:cb:d3:ae:0c:05:02:
         be:2f:38:35:eb:89:11:7b:08:12:fb:55:29:a2:03:ac:52:5b:
         78:96:e8:d9:d8:24:34:57:6f:fd:4a:eb:eb:ee:c1:47:f3:3d:
         6e:13:87:a6:9f:d3:2c:f3:ea:51:2f:6b:45:18:4f:81:88:57:
         37:8f:3c:12:be:0b:38:90:41:92:18:6c:e3:f2:3f:a2:d4:f3:
         e0:cc:24:c4:05:4c:39:e0:02:67:d7:58:0f:4b:1f:b3:27:94:
         57:8c:e0:e5:3c:ed:68:c7:c4:5e:62:c7:30:65:12:66:c0:2b:
         87:5f:20:30:54:56:13:3d:ba:cf:2e:6c:4b:cd:aa:48:6e:32:
         f8:de:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:47:05 2024 by rpki-client on console-fra.rpki-client.org