Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
File:                     Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer (raw, json)
Hash identifier:          EzdFU+/65vzI44PuGof3Q2unQOM/E9hoVINK0qE63RE=
Subject key identifier:   67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       271C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:35:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328730
                          IP: 102.221.196.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10012 (0x271c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:35:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:25:88:3d:36:98:75:a1:79:cc:3c:90:b5:
                    dc:e2:e9:4f:2e:7a:8f:3a:f8:97:2f:a9:3f:28:41:
                    bf:2c:7a:0f:10:29:fc:47:29:d5:fd:a3:e0:0e:f1:
                    bd:a1:21:88:fd:6b:86:b1:c8:e9:50:59:6c:09:1e:
                    ee:4e:65:f0:60:c1:5a:15:0f:79:65:83:a5:d8:e8:
                    04:22:65:b6:dd:5f:ef:34:57:e5:dc:c1:f5:14:d8:
                    a4:3c:ed:ea:31:45:9b:2f:38:0b:68:be:e8:50:a1:
                    9c:f8:a0:00:ac:b5:b4:bd:8b:f7:96:f0:88:a2:61:
                    8f:89:17:12:09:da:a8:41:99:ab:05:4f:8c:1d:2a:
                    5c:64:aa:4f:d2:0d:7e:6b:94:4c:fd:f9:90:90:94:
                    14:6e:7f:1a:06:5f:6c:2e:08:4d:b8:de:58:0a:35:
                    17:82:57:c2:b1:a5:b3:e4:77:2b:b0:62:78:10:5b:
                    f3:ef:cd:6d:c2:62:80:13:42:b6:6a:86:c9:7b:9c:
                    16:b0:f9:61:0c:ed:81:19:cd:0d:63:fb:cd:c7:ec:
                    92:a1:2c:b9:88:5f:20:34:87:00:d9:9c:09:bc:e6:
                    8d:0b:59:56:0c:b9:61:8a:77:bf:1f:d4:17:a2:4c:
                    c3:16:0b:02:27:52:99:f5:0b:3e:a7:50:ae:37:ba:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328730

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:1e:d1:eb:73:2b:27:64:79:52:45:a1:e1:f8:4a:03:ec:
         70:6b:cd:ac:e0:5c:1f:fc:c0:ad:71:d3:20:93:55:6c:52:ea:
         17:51:db:ce:6c:7c:9d:ec:1d:15:85:5d:fc:a0:d6:2b:23:08:
         ef:73:91:1c:69:10:37:c3:b3:77:bf:01:00:03:19:98:58:4d:
         a6:f8:a2:cc:e2:82:8c:21:3a:9f:1a:7c:a1:89:72:c2:c4:67:
         59:14:a8:bd:a4:ef:e4:5d:43:2f:b5:03:06:07:09:9e:87:75:
         06:12:36:8b:0e:89:54:0b:5b:21:97:86:2c:9f:f7:0b:a9:f5:
         fe:1a:79:5e:6d:0c:d8:d7:78:4c:ca:d6:45:71:f6:eb:aa:b3:
         ae:f8:1f:7b:14:d7:21:6d:8a:aa:48:e2:37:d3:a6:28:a7:a5:
         af:99:dd:16:de:44:f5:0c:72:77:18:06:93:55:20:06:07:19:
         55:41:09:b6:61:0d:92:87:f3:a6:ba:38:83:50:b9:f5:c3:1f:
         e4:97:59:66:80:85:ff:01:4e:9b:9b:16:61:8a:bf:fe:2a:05:
         73:fc:9c:d6:8f:c6:85:75:30:be:a6:48:60:b4:15:55:5b:bd:
         b3:71:f9:b1:f0:42:e3:4d:85:81:40:1e:c1:7b:3a:da:d2:22:
         c8:e3:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org