Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
File:                     UJrkB4CHuVMUvanvade7dIgcL94.cer (raw, json)
Hash identifier:          G7Q4eCBx3gWU/NqRfMw273bvCf2mKK2imGYoEusXDLk=
Subject key identifier:   50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2BB6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 12:23:56 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 102.208.216.0/22
                          IP: 2c0f:8c0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11190 (0x2bb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 24 12:23:56 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:3c:b2:7b:5a:98:22:a5:12:f5:5b:c8:f2:
                    cf:46:58:26:49:4e:15:0a:c7:e8:9a:06:37:1b:e1:
                    6b:3c:04:22:d5:0e:66:cc:9f:16:6c:ad:37:bc:a9:
                    32:22:2b:b8:18:c4:74:e0:a5:cd:e5:d1:65:5a:4b:
                    6d:23:98:a3:c3:a4:b0:bb:78:4f:92:ea:3c:d5:e6:
                    ad:ab:51:fe:ed:71:06:e9:a6:7f:44:53:29:2e:9c:
                    68:70:5b:64:27:0e:0f:92:f0:40:ba:5b:e9:a8:80:
                    11:34:52:ca:25:5a:58:40:30:e1:17:06:e6:c7:a1:
                    ac:dd:13:4c:7f:77:b5:d4:9d:9c:76:a1:9b:86:70:
                    05:10:d9:82:3d:c2:2a:e2:f2:06:e8:64:bf:3c:ee:
                    a4:e6:42:50:da:19:30:f1:a7:a8:8a:26:a9:ac:d5:
                    39:8b:08:5a:9a:c9:51:a4:19:21:6b:6c:60:11:7e:
                    91:01:40:81:a4:9e:1a:83:b2:46:a5:5a:c9:58:d8:
                    49:b7:c0:02:c3:78:a6:2f:4e:f7:1a:0b:4d:77:bf:
                    ad:07:5e:1b:ae:c3:5a:15:c7:d4:95:0b:0b:a7:56:
                    1c:da:b9:e3:3d:35:60:1a:20:6e:2a:eb:a0:dc:9f:
                    3b:91:62:63:35:14:61:7d:a3:1b:51:66:62:05:87:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.216.0/22
                IPv6:
                  2c0f:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:81:45:11:b2:40:54:32:38:d4:01:75:23:32:23:28:b7:c1:
         62:b5:09:b8:4c:91:3b:e3:da:f4:26:63:07:7a:0c:72:3e:98:
         b8:4c:f4:b6:57:05:9d:8e:3c:7d:31:35:f8:27:d4:05:6e:b4:
         a9:19:f9:b6:50:2b:2c:5e:9c:46:2c:b6:ff:2e:fa:45:ce:1e:
         1b:30:6d:e6:36:1b:9a:cb:1c:5e:ee:b5:11:57:de:2f:3f:b0:
         67:21:ea:51:00:ad:73:45:aa:34:e2:c4:df:0d:26:2a:13:e3:
         4f:d5:da:9c:3d:91:b3:90:c8:31:99:11:b8:4c:22:af:f1:c2:
         fa:8c:46:a9:f9:e8:b9:24:a2:ce:12:0f:13:b0:ec:cb:8f:85:
         57:c0:d3:c0:c6:3e:3a:94:f5:a2:a5:45:d1:c3:90:63:93:16:
         15:17:a5:5f:c9:19:cc:2a:c0:2d:3e:61:90:c1:4f:b3:25:e9:
         f0:f4:eb:f9:d9:3e:d3:65:42:5a:cc:45:33:b4:39:32:11:04:
         45:46:67:c4:d0:0a:a6:f6:f2:a6:08:db:60:ed:7e:65:be:72:
         ef:0b:c9:37:60:65:02:71:ad:63:d0:82:b7:f2:c1:03:6a:28:
         fd:59:e7:be:ef:06:4e:2e:eb:4a:e7:ee:60:e8:f1:b2:a7:d8:
         6b:b9:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----