Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
File:                     UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer (raw, json)
Hash identifier:          MughK4CBvvrQUSdqn6NSoWjvMlLdfs+gC7ZI70gzhL8=
Subject key identifier:   53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2736
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:39:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329210
                          IP: 102.213.240.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10038 (0x2736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:39:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B09DCAF/serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:99:e9:63:05:15:61:c7:1c:b2:a5:ec:60:
                    75:d0:20:98:24:8d:54:dc:16:30:ba:20:2e:e9:99:
                    18:fe:05:6e:ca:fa:6c:7a:35:57:64:1b:57:3a:b8:
                    75:08:87:05:06:d6:a6:7f:06:90:7c:0f:24:8f:fa:
                    bb:83:5a:e6:82:49:04:23:9b:ea:e0:91:70:1b:d4:
                    76:d8:af:9c:60:5a:9e:e0:b0:7d:9c:8c:26:b2:f9:
                    fb:31:a8:71:0f:de:e4:83:bd:54:27:99:be:91:3e:
                    31:ea:49:1c:48:4c:7e:f3:55:09:55:9f:88:90:64:
                    b3:32:35:6f:8a:19:b5:fb:68:f4:2f:58:05:e6:5a:
                    46:80:4f:1d:6b:58:88:c2:30:e9:13:48:d6:c2:b8:
                    c2:e1:45:5e:87:cb:30:a3:bc:6d:e6:a0:7d:1b:98:
                    89:28:76:cd:dd:c0:ac:5f:6d:8d:d9:79:dc:df:fa:
                    19:d9:e3:0a:b0:64:73:bb:ad:66:ce:df:e3:d6:fd:
                    92:13:5d:4f:4b:eb:2d:33:19:07:a4:7d:c7:fa:39:
                    a3:34:88:1d:78:e6:b9:81:e9:b1:07:53:f4:6d:a3:
                    9f:be:db:4d:4e:4d:f9:11:b6:79:9f:79:5c:43:53:
                    de:ad:e4:df:bc:bc:9c:2a:14:6a:15:8c:fd:4f:10:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329210

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:19:f5:21:4a:41:28:9d:9e:d0:22:84:41:3c:13:00:9d:
         89:0a:17:ea:16:da:58:07:ee:45:d9:3b:98:12:d7:eb:49:2a:
         d7:fa:86:5d:37:a1:2c:e7:92:d4:be:94:7e:da:25:ca:a7:49:
         8c:7a:b7:ca:fa:15:02:2d:86:9d:d0:ff:94:f9:9d:b8:41:ab:
         95:c2:fb:35:21:ca:5e:5f:3c:60:47:19:f2:83:42:4e:b0:1f:
         54:46:be:ca:40:57:a0:c4:96:fb:03:84:f5:78:40:ee:74:5d:
         94:e0:fc:52:c7:08:08:33:da:d9:b4:3a:45:89:de:da:59:7b:
         7e:25:53:b5:54:26:fd:70:4b:fd:b4:1d:db:98:e7:90:1e:f5:
         a5:f7:50:00:ed:0c:93:35:de:d9:9d:e7:a0:e9:45:60:54:c8:
         69:d7:0e:54:2a:49:f5:5e:f7:3b:98:53:4c:d8:83:0c:09:84:
         8e:8b:09:78:12:98:e8:38:bc:cb:69:ef:32:d8:0f:eb:ba:1e:
         a1:4a:46:6f:3c:e5:64:ca:d6:18:fb:4e:88:e2:af:8b:63:95:
         a7:37:cf:ad:54:e1:7a:36:33:6a:51:40:1e:a7:c9:b9:90:5f:
         a9:ae:63:7b:79:b0:f9:1e:2d:77:e6:7f:3e:5b:01:b0:e2:b3:
         69:22:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:21:28 2024 by rpki-client on console-fra.rpki-client.org