Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/V0scANI8USEWrTWsAPPiYrtG67M.cer
File:                     V0scANI8USEWrTWsAPPiYrtG67M.cer (raw, json)
Hash identifier:          q7r0cLHy29wk762kdjz6T3k9NbqQSuS3wub1hxSZr94=
Subject key identifier:   57:4B:1C:00:D2:3C:51:21:16:AD:35:AC:00:F3:E2:62:BB:46:EB:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       25AB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B8FB6/FC33DE1269C011EA884FF46BF8AEA228/V0scANI8USEWrTWsAPPiYrtG67M.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B8FB6/FC33DE1269C011EA884FF46BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:41:19 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328624
                          IP: 102.223.140.0/22
                          IP: 2c0f:e810::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9643 (0x25ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:41:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B8FB6AF/serialNumber=574B1C00D23C512116AD35AC00F3E262BB46EBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:ef:50:50:ac:1e:cf:0b:50:5a:11:fd:61:
                    4b:16:ad:b6:c5:10:5e:27:d9:4e:bf:20:60:6c:27:
                    ee:48:52:eb:5b:61:dd:f3:b0:35:8b:72:a4:8b:6a:
                    f7:b7:23:da:b2:7c:36:15:fb:6d:45:18:14:c3:81:
                    c4:ea:23:32:d8:a4:be:d2:a1:07:35:3a:48:fa:1e:
                    dc:32:62:4a:42:06:66:43:0a:34:24:89:8e:aa:6d:
                    19:3c:a8:57:46:5e:f9:fe:19:be:aa:d6:36:86:05:
                    d0:20:df:e7:c2:de:53:58:82:62:4c:b5:c2:37:60:
                    9f:a4:6a:73:49:89:ea:b1:81:07:59:c5:ac:4c:ac:
                    22:69:b5:cc:e1:3f:07:09:b1:ee:21:ab:40:ff:25:
                    48:57:f8:41:08:7e:95:45:f0:4b:c8:20:ce:ea:ca:
                    bd:9a:d1:47:05:9a:28:1f:29:81:ff:4f:13:87:88:
                    95:40:3b:19:fe:1a:d8:0c:da:90:d3:31:74:51:a9:
                    f8:bd:02:f6:a2:c2:7c:a4:97:0a:c6:9c:1f:02:bc:
                    f7:04:97:7a:d7:d7:ff:9d:22:c7:ad:5f:a2:a5:21:
                    1a:23:94:dc:5e:a0:80:3d:59:b4:4d:bc:1b:56:f3:
                    e8:3d:fa:5c:ee:13:2e:9a:b1:c4:d1:ce:1e:41:7d:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:1C:00:D2:3C:51:21:16:AD:35:AC:00:F3:E2:62:BB:46:EB:B3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8FB6/FC33DE1269C011EA884FF46BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8FB6/FC33DE1269C011EA884FF46BF8AEA228/V0scANI8USEWrTWsAPPiYrtG67M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328624

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.140.0/22
                IPv6:
                  2c0f:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:47:57:b0:dd:e8:02:c1:af:c0:c8:42:b5:8e:d8:21:d4:2a:
         46:6d:5b:dc:d6:d5:b0:81:e8:38:2f:0f:21:7f:b6:40:20:75:
         f5:21:ce:a4:e9:84:7e:4f:4a:6a:47:78:90:fb:d7:bf:32:ee:
         8b:eb:3d:cf:27:9c:ee:c4:d7:30:d7:75:3b:24:bb:51:c5:76:
         3e:4e:3a:73:52:cd:9f:7c:71:71:69:50:6d:d2:f7:c6:bf:41:
         e8:60:10:c9:8d:08:e4:f1:1a:62:d6:ac:6d:e2:35:f9:3e:e9:
         55:b4:a4:be:c3:0a:74:cd:07:22:4c:4f:75:b9:51:2e:0a:b5:
         f9:43:b5:43:8d:13:19:05:2f:ae:56:18:9d:67:e0:da:f8:53:
         5d:8d:4b:39:bc:81:ae:ed:03:4e:af:d0:cf:4e:76:88:a4:65:
         01:43:87:37:86:2c:9f:99:94:74:ae:8c:9d:fa:40:b3:2a:31:
         84:d5:ab:4a:76:d0:4c:93:75:22:c5:fc:dd:41:68:5e:1e:ca:
         8a:b1:12:ad:75:20:bd:84:01:b2:28:ae:8a:b3:02:93:65:e0:
         33:df:e5:ab:96:e6:07:4f:17:51:ec:18:b8:2c:8a:62:1f:ec:
         51:b6:36:17:71:24:2a:d2:4f:be:50:6d:7a:13:34:6a:79:99:
         af:d8:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:41 2024 by rpki-client on console-ams.rpki-client.org