Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.cer (download)
Hash identifier:          3JwNRXC3TtDJeIBv/yahVBBbU16l1MEjKdp/sR+0qm4=
Subject key identifier:   5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       1D96
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate valid until:  Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:
    1: AS: 328839
    2: IP: 102.220.68.0/22
    3: IP: 2c0f:4600::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7574 (0x1d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:57:26 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:ea:e6:29:dd:da:cf:e3:8c:24:8d:2e:9b:
                    fa:a8:f0:82:0b:e5:6e:5f:87:cc:fe:ac:70:a3:aa:
                    8f:88:cb:d7:70:08:c2:45:81:52:2c:65:29:58:78:
                    bd:c9:5f:d8:c6:b1:1a:be:39:0d:2f:6f:9f:3c:c3:
                    0c:8a:6b:a2:67:a3:5d:3a:bc:53:5b:eb:51:27:86:
                    01:b1:a4:0a:b3:b8:39:05:39:99:b9:bf:ee:ab:1c:
                    5b:09:ef:23:20:12:2c:d4:08:ae:d6:af:3a:cc:3f:
                    04:c4:60:59:03:fc:08:65:82:76:6c:c6:3d:2a:5d:
                    08:40:37:ad:df:6a:a4:bb:d7:35:ac:df:29:ea:c8:
                    e8:60:76:d0:08:11:77:d6:27:3b:01:38:ba:81:8c:
                    5c:c5:7a:27:09:84:55:55:d2:b3:34:c7:d7:7a:d4:
                    5b:92:5a:d5:e3:fc:ac:9a:cf:ca:57:a5:30:99:fe:
                    e1:6c:65:1a:29:82:26:da:1f:a9:20:87:95:ed:e7:
                    68:99:b6:6f:b9:6a:50:9b:b8:96:53:ab:8c:be:59:
                    8e:6b:15:97:4f:99:c3:36:81:1f:9f:d1:a2:e1:d9:
                    72:1d:cb:15:e4:ab:21:ff:49:ec:0d:59:8f:0b:93:
                    e0:b1:3f:29:d7:4b:ba:19:ed:83:45:9f:34:de:c3:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328839

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.68.0/22
                IPv6:
                  2c0f:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:3b:99:41:ae:ba:07:f6:88:60:f9:41:ca:53:af:92:63:
         73:1c:e8:1a:71:f3:37:9f:7e:bb:5e:b9:fc:48:af:32:71:ef:
         29:79:51:88:7c:bd:0e:f3:8b:89:30:73:cd:e5:62:aa:5b:43:
         55:ac:07:75:4a:ee:83:b8:c8:57:18:8e:ea:78:0c:d9:2e:fd:
         72:0f:80:4a:a7:f7:6e:ac:8d:00:fb:4d:bc:76:19:1b:7b:14:
         89:aa:15:7c:c6:a6:67:b1:a0:8d:9c:e4:ac:cb:2a:82:5f:d7:
         fc:01:84:9b:63:92:cb:1d:a0:be:95:bf:32:fd:35:9f:ac:e0:
         c6:42:08:41:cf:c7:91:46:fb:88:4b:99:8a:4f:9c:13:c8:51:
         d1:a4:60:6c:17:35:cd:0a:a1:d0:3b:09:73:74:34:94:02:de:
         a8:ce:f6:d6:b8:06:ae:45:1c:39:dd:41:bc:f0:27:3f:d9:0f:
         97:61:b7:e5:0c:79:38:35:e5:b3:68:cc:21:51:04:38:a4:a8:
         74:aa:b9:6a:e5:f2:48:87:28:0a:80:97:4b:19:24:53:57:5c:
         e1:ae:2e:09:ad:68:42:39:2a:2c:43:6c:4b:3d:58:d8:1f:bb:
         9f:62:37:4a:15:36:2a:5d:bf:20:e2:8d:9b:60:cf:e2:8f:ce:
         85:d6:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 2 13:28:30 2023 by rpki-client.