Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
File:                     VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer (raw, json)
Hash identifier:          soHKPHA+4h3LREVzXSgK8R3EQB1izriJh4BJfv0pv/g=
Subject key identifier:   56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       238F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:38:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37721
                          AS: 37734
                          IP: 102.67.96.0/19
                          IP: 102.212.160.0/23
                          IP: 102.214.64.0/22
                          IP: 2c0f:ee00::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9103 (0x238f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:38:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:95:a0:42:61:54:e8:fd:81:8f:1a:db:86:
                    cb:24:76:16:f5:12:e2:99:4c:02:8e:9f:4e:d3:da:
                    52:b2:2e:d1:08:b9:60:8f:b5:e4:e1:f1:05:5d:da:
                    89:0c:a0:bb:c0:6f:e1:78:ae:b9:51:18:86:a5:ca:
                    49:b2:1f:eb:47:e5:bf:a5:77:55:d8:cd:df:4c:27:
                    f0:dd:ff:45:89:f3:dc:10:f4:b1:87:d9:a7:8f:9d:
                    be:ad:c5:04:cd:cc:cb:27:ed:1b:83:8c:2d:58:42:
                    c1:15:f2:cd:04:ef:e1:9b:ca:0a:08:47:a8:bd:1e:
                    15:55:0e:19:07:ab:46:02:45:20:d8:c5:03:3e:ce:
                    01:7d:95:d6:f1:af:c9:da:cd:5f:ab:3c:0a:66:9f:
                    bf:cb:0f:0b:3d:8b:59:a8:32:31:95:55:40:1c:78:
                    45:35:bd:48:28:4a:d3:98:aa:5a:ca:cf:da:03:f9:
                    2c:fb:56:81:83:d8:ca:31:5e:54:2f:eb:6a:82:02:
                    49:15:48:f1:c7:e5:3a:ff:1f:d2:f2:6b:5a:55:b3:
                    a3:49:a7:6a:ea:33:a7:27:19:85:7e:93:e6:7b:40:
                    6d:c0:72:8c:4e:d5:64:f3:ff:87:e8:17:6a:0d:2a:
                    1d:ef:d2:da:52:44:be:49:6c:be:cf:37:ac:79:d7:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37721
                  37734

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.96.0/19
                  102.212.160.0/23
                  102.214.64.0/22
                IPv6:
                  2c0f:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:f1:fd:ad:03:46:06:dd:c1:61:84:01:c2:4f:e9:4f:86:
         a5:43:a3:9b:dd:e4:01:d4:f9:f8:c5:c5:a2:c7:d7:a5:6a:4d:
         ac:52:06:93:aa:07:09:c3:b7:01:d0:1c:f1:61:92:ec:93:d8:
         72:c1:a7:fc:ed:da:9b:5c:c4:4d:11:2d:12:c8:76:64:ca:39:
         75:61:9d:c4:d0:bf:c2:61:5a:4c:37:19:ec:a4:c9:f1:bf:96:
         42:e5:8e:4a:9b:92:8e:d5:19:9a:be:ec:22:35:5d:f0:60:f4:
         d8:b4:c3:2c:6e:0e:7a:cd:02:64:c5:61:72:07:67:f2:ee:87:
         5a:29:e1:2d:ab:42:8a:33:c3:e1:2d:cb:dd:32:d7:48:12:85:
         5f:f0:ae:00:9d:2f:5c:ca:cc:65:40:0f:d8:95:df:3e:5a:99:
         cc:04:6f:c1:b8:eb:ad:77:58:ee:e6:ff:d6:25:27:7c:6b:28:
         97:a8:e3:6a:f6:ef:17:0d:ea:31:da:f1:fa:40:61:82:b4:d0:
         66:67:47:4f:19:92:3a:b4:42:00:11:d5:3b:5e:82:6e:90:f2:
         75:3a:1e:c0:ac:7c:a8:04:de:9d:4c:30:60:86:72:34:b1:34:
         d7:d6:c0:01:23:75:50:a5:b1:3d:b8:17:02:a7:7f:5e:4f:4a:
         af:c1:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:20 2024 by rpki-client on console-ams.rpki-client.org