Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
File:                     XugMfoiMcbMQJBh4C9bhClLRcIg.cer (raw, json)
Hash identifier:          cX51qGqK7HyqzZssCg6hAhNeNal2THRjtf+CeqrDBks=
Subject key identifier:   5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23F9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:04:41 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328974
                          IP: 102.217.228.0/22
                          IP: 2c0f:5f00::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9209 (0x23f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:04:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:0c:c5:1d:c2:d4:0d:3c:4d:24:47:f2:be:
                    a8:12:97:6d:f5:67:f9:9e:15:53:86:66:85:9e:5d:
                    5a:e2:98:bb:61:b3:35:2a:91:2a:38:82:d1:cb:0f:
                    a3:af:2f:c0:28:29:75:9d:ea:09:15:46:ce:be:72:
                    cf:81:b2:29:30:08:4d:6d:3d:cd:c0:05:46:eb:ed:
                    da:36:bd:ad:1e:71:ce:00:87:ec:cf:58:59:bc:14:
                    39:db:ea:c2:c5:fe:04:73:08:26:68:2d:56:ff:37:
                    82:bc:69:08:ef:63:d8:ff:eb:4b:bd:43:bf:6c:47:
                    1e:96:f0:0f:09:3c:91:3d:46:ae:da:70:14:37:9a:
                    5d:cd:aa:93:07:8c:28:98:ed:32:52:66:85:2b:2a:
                    14:31:f1:a0:bf:c4:9d:38:49:7e:12:98:b6:fc:96:
                    50:51:e7:03:22:f4:c5:8a:82:59:48:ba:e6:de:ba:
                    0e:07:e9:7e:2c:72:64:9a:27:a9:d2:e1:1e:15:13:
                    01:2b:06:8f:80:b8:9f:7d:3d:cb:06:a4:8f:30:f2:
                    1c:2f:50:eb:40:b1:8c:e1:b6:57:4f:a7:ab:f1:b8:
                    16:fa:f6:cd:f3:6f:84:b3:4a:8e:d0:9c:12:4e:62:
                    0f:f9:33:7b:e2:c0:3f:45:aa:37:60:d6:ed:a5:b0:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328974

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.228.0/22
                IPv6:
                  2c0f:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:13:ae:b3:e7:44:bd:40:e4:c3:6c:ff:4d:26:d0:e0:8b:a1:
         b8:9d:5a:18:95:29:fc:b3:5b:6f:0e:6a:8b:27:ad:3d:ab:39:
         42:a9:29:27:fd:c6:5f:c2:32:c7:72:78:ac:5c:8a:50:67:ff:
         17:a9:6c:57:ea:fa:a6:45:9b:b9:e3:89:55:21:a1:35:59:ed:
         12:25:16:c0:47:f1:52:5e:25:62:07:66:68:65:51:6e:3e:da:
         83:f5:08:d5:b9:5c:d0:21:ff:d7:18:31:6f:ae:2c:d3:c9:1f:
         d5:b3:a3:dc:9c:16:7e:b1:09:13:56:8e:4e:03:3a:b4:d7:7f:
         5d:bd:38:e7:22:cc:48:1e:c6:51:17:05:66:fd:02:6d:e4:f5:
         15:63:4c:04:f0:23:bb:59:5e:a6:7f:a2:74:d7:a2:d1:96:1d:
         ce:b4:f2:bf:70:b0:50:75:1d:3b:dd:5d:9f:a8:9a:7f:f8:8e:
         5f:78:98:7c:ae:71:0f:d9:0d:98:31:4d:32:c1:17:bf:f9:d2:
         09:13:df:be:13:f7:05:39:f2:6f:d3:d1:86:d9:92:86:13:4a:
         93:1b:56:01:11:96:5b:82:90:be:3d:44:e8:54:08:5e:cb:ed:
         51:a3:0e:6b:57:7b:71:e7:0f:36:88:d3:47:60:28:a3:6a:c8:
         c9:0b:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----