Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
File:                     Y-C7azQzzV1xpCsBab2wHiDkVX8.cer (raw, json)
Hash identifier:          kgJxmLwlBWLIIAckWEfLc6Ptdjhc5hjKVafRbkECUOg=
Subject key identifier:   63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23BC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:49:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328528
                          IP: 102.36.160.0/22
                          IP: 102.218.100.0/22
                          IP: 102.220.212.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9148 (0x23bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:49:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:da:1d:c8:2a:6a:bc:01:b4:33:17:b4:1a:
                    76:c0:3d:d9:40:e2:29:00:f5:86:8f:f6:2b:ae:fd:
                    37:b6:d9:76:28:25:09:22:95:9a:b8:35:eb:cc:9c:
                    da:12:fc:f8:af:c9:58:00:29:9b:ad:f4:5e:56:ab:
                    7f:50:cc:de:13:f5:4c:49:36:3f:f5:45:fc:6b:4e:
                    5a:ac:3b:a7:0a:5e:63:78:d2:8e:a7:97:cb:61:99:
                    8c:77:a4:e8:34:63:d0:68:e2:ee:b9:ab:01:8d:ad:
                    c5:70:69:bc:40:64:69:8b:04:8c:8f:44:13:a0:fd:
                    f3:e7:d5:fe:81:e0:03:5d:e3:61:5a:06:0a:87:f4:
                    79:c2:b2:43:10:8e:62:bf:89:2f:b4:25:f8:c5:4e:
                    49:dd:4b:03:68:83:1c:5a:fc:a7:db:e5:49:9f:5d:
                    1e:7c:7a:d4:90:c4:28:95:a7:82:6b:fc:03:50:2d:
                    14:d5:38:a0:9c:2e:a1:db:29:99:a9:fe:d7:4d:7a:
                    54:f2:af:b1:86:22:1e:48:07:1b:69:90:96:65:73:
                    9a:15:6f:be:93:12:9a:cb:b2:74:91:3c:5b:e9:b9:
                    be:66:f2:2b:b4:1a:2f:1c:07:10:97:c3:a1:6c:77:
                    88:b1:b5:84:5d:51:4c:26:d7:04:3e:ec:7b:7d:ea:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328528

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.160.0/22
                  102.218.100.0/22
                  102.220.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:45:44:09:34:8d:66:75:22:e0:b1:2c:3c:5e:6b:e8:eb:38:
         2b:fc:fa:5c:3d:ef:be:09:d8:31:75:e3:f7:f8:ef:a1:ba:4f:
         4f:23:56:59:1b:55:0a:82:1e:1f:0f:df:97:5d:df:5a:b1:4b:
         13:b4:30:e1:52:81:ca:68:3f:79:eb:8b:4a:b0:61:66:68:24:
         de:6b:29:a1:db:84:bc:82:fc:6f:ac:79:1b:07:b3:4d:12:a3:
         57:fc:6e:6f:e7:c7:f2:9d:56:e7:62:5b:e7:34:8b:2f:3a:1a:
         53:76:8a:9a:55:12:cb:dc:3f:c7:34:ee:e5:86:4a:79:d2:e6:
         65:eb:21:88:2f:e3:e5:b6:25:33:73:97:f8:cb:ff:fb:5b:94:
         a6:bb:13:de:c0:98:4a:a1:f4:e7:36:d7:f6:70:79:8d:87:b4:
         3f:fb:9f:65:0f:da:30:45:b1:63:cb:0d:32:09:ed:56:71:41:
         d1:27:f8:53:7f:66:e2:78:03:a8:9f:33:7d:fe:b1:e8:ce:99:
         33:53:20:bb:34:fe:14:16:99:78:ca:20:3f:f1:34:df:9e:4b:
         d6:e8:ca:52:52:b3:41:87:ea:b8:05:7d:03:a8:40:47:47:7a:
         e3:17:b3:20:d1:db:6b:c9:6b:56:39:02:ac:0c:e4:a3:6f:67:
         f7:32:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org