Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
File:                     YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer (raw, json)
Hash identifier:          aG8yMwdN0iI94m0CVkj0bUHXg6M5X0B/wVUpmVfBKz4=
Subject key identifier:   62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26E1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:26:44 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328861
                          IP: 102.219.220.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9953 (0x26e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:26:44 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:26:65:4f:c2:36:30:b9:4a:9f:9e:11:76:
                    45:43:e5:51:db:bb:6e:8b:2b:dc:43:cb:0f:f8:86:
                    d3:3c:33:82:12:f7:45:4c:fa:bb:a0:22:0d:6e:d2:
                    f8:ee:3a:5c:c2:62:5c:ce:05:b8:0f:92:b8:06:de:
                    98:d8:6d:82:08:5b:52:1d:ca:1e:b6:b3:68:91:db:
                    a3:c5:79:39:6d:e3:58:24:98:c0:de:5d:a4:ac:82:
                    d0:e0:4f:81:3c:c0:9f:43:81:b4:3b:ab:53:8d:4d:
                    3b:93:03:7b:16:5e:51:12:7c:fa:63:d1:be:95:0d:
                    31:cd:88:da:26:a7:12:6d:4f:92:cf:f3:8b:a7:11:
                    69:15:56:25:72:0f:43:eb:cd:4e:ed:f8:23:e9:2a:
                    d2:aa:ec:53:23:14:c2:e4:bf:0d:54:2c:ca:f6:f5:
                    35:30:76:80:11:c6:2a:6e:32:c6:6b:47:8a:4a:1c:
                    f2:e8:31:9a:ce:95:ce:52:5c:9e:84:f3:5a:a1:b4:
                    d2:d5:aa:8e:91:ef:c1:f3:0d:74:59:96:40:10:c7:
                    fe:5a:5d:1a:c3:7f:2d:f2:48:78:9f:d2:9a:1e:c2:
                    12:2f:96:de:4c:92:bc:c9:a0:81:42:ac:e0:f6:2e:
                    60:01:fd:68:02:d1:e7:71:ad:74:b7:a4:d5:88:4b:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328861

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:bf:cf:84:61:f0:bf:d6:b4:a1:95:63:da:60:ff:85:fd:
         99:79:c8:dc:1b:7e:dd:64:fd:9b:d4:f7:ab:16:ac:2d:ff:04:
         3d:ac:78:ac:9c:76:b9:2e:0b:d5:66:1f:4a:db:2a:03:37:18:
         cf:e9:ff:14:72:0d:97:24:5c:dd:74:b8:78:ac:52:7f:94:f5:
         03:3c:19:98:40:10:67:c7:6d:c7:4d:b1:b1:17:e0:e9:2b:3f:
         19:21:6c:02:b1:89:cc:fe:63:f9:22:35:7f:2b:44:e5:4d:45:
         6a:a7:a8:e9:6d:ba:b0:be:ad:7c:23:d4:19:99:78:87:44:a3:
         3c:66:1f:13:fb:ad:91:b6:d3:73:b5:62:3d:fd:dc:dd:87:0e:
         79:57:ba:78:0c:b5:c2:03:15:41:ea:07:a6:48:a7:a6:05:33:
         4f:f3:78:d2:ad:46:5f:6a:03:5d:23:14:9b:a9:2b:6f:a6:84:
         14:5b:a0:b0:a6:9f:e2:5d:18:5f:7d:55:ea:92:2b:30:f3:59:
         f3:4c:8b:fc:1e:a7:7d:be:3c:1f:d9:35:c1:63:22:c1:57:a4:
         17:c9:d7:ce:16:b5:c5:fe:98:a5:8f:b4:5a:e1:c2:ee:a8:b6:
         1c:9d:95:85:ed:a2:2b:56:88:f6:4d:27:0f:62:8a:84:c1:83:
         45:b6:b4:3c
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJuEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzI2NDRaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZBRjlCQUYxMTAvBgNVBAUTKDYyNzUzM0VDQkFCN0Q4OUJEOTU3MEIy
MDA1NDY2NjA1MzY2OUE3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDV3iZlT8I2MLlKn54RdkVD5VHbu26LK9xDyw/4htM8M4IS90VM+rugIg1u0vju
OlzCYlzOBbgPkrgG3pjYbYIIW1Idyh62s2iR26PFeTlt41gkmMDeXaSsgtDgT4E8
wJ9DgbQ7q1ONTTuTA3sWXlESfPpj0b6VDTHNiNompxJtT5LP84unEWkVViVyD0Pr
zU7t+CPpKtKq7FMjFMLkvw1ULMr29TUwdoARxipuMsZrR4pKHPLoMZrOlc5SXJ6E
81qhtNLVqo6R78HzDXRZlkAQx/5aXRrDfy3ySHif0poewhIvlt5MkrzJoIFCrOD2
LmAB/WgC0edxrXS3pNWIS13jAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUYnUz7Lq3
2JvZVwsgBUZmBTZpp1kwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQUY5Qi81RTI2Qjc5Q0NDMjcx
MUVCQTRFQTE2MjdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkFGOUIvNUUyNkI3OUNDQzI3MTFFQkE0RUExNjI3RjhBRUEyMjgvWW5VejdM
cTMySnZaVndzZ0JVWm1CVFpwcDFrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBJ0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm29wwDQYJKoZIhvcN
AQELBQADggEBABmwv8+EYfC/1rShlWPaYP+F/Zl5yNwbft1k/ZvU96sWrC3/BD2s
eKycdrkuC9VmH0rbKgM3GM/p/xRyDZckXN10uHisUn+U9QM8GZhAEGfHbcdNsbEX
4OkrPxkhbAKxicz+Y/kiNX8rROVNRWqnqOlturC+rXwj1BmZeIdEozxmHxP7rZG2
03O1Yj393N2HDnlXungMtcIDFUHqB6ZIp6YFM0/zeNKtRl9qA10jFJupK2+mhBRb
oLCmn+JdGF99VeqSKzDzWfNMi/wep32+PB/ZNcFjIsFXpBfJ184WtcX+mKWPtFrh
wu6othydlYXtoitWiPZNJw9iioTBg0W2tDw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org