Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
File:                     ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer (raw, json)
Hash identifier:          tRasqP4LgiXrKPbUbJcDbdDtQDxO6GlDlL2LFK6dYPg=
Subject key identifier:   66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2873
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:27:47 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 30983
                          IP: 102.216.118.0/24
                          IP: 196.200.128.0/18
                          IP: 2001:4310::/32
                          IP: 2001:43f8:1670::/48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10355 (0x2873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:27:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:4b:2b:4e:6e:e8:1d:3f:db:ef:25:96:9b:
                    73:44:90:95:ae:03:bf:d3:71:d2:03:24:af:77:67:
                    60:0a:04:70:cc:09:1d:69:87:ad:b1:c7:d1:17:83:
                    e3:14:c5:f2:17:c1:e6:19:ae:00:0b:77:92:2c:bd:
                    4e:6f:5c:de:55:84:39:5d:90:24:8c:92:db:ca:8b:
                    24:08:7c:dd:db:0e:5e:8b:46:5e:d9:9b:52:fa:27:
                    60:2e:aa:3f:97:72:0b:b8:a2:59:16:c2:96:36:f6:
                    9e:ad:77:05:5e:96:56:e3:14:7f:13:c0:4b:c6:22:
                    d4:38:6a:9c:eb:84:e1:fa:c6:06:cd:a6:9e:d6:4a:
                    8f:f2:88:2e:c5:e1:9e:a2:9c:c3:0e:76:e2:08:67:
                    c8:92:53:44:46:2a:96:e9:55:48:37:3a:5c:77:29:
                    8a:06:61:bf:c6:8d:1d:12:75:9d:7b:12:12:05:3a:
                    54:65:6d:9e:79:13:b0:b9:d5:6c:9c:fb:2d:df:aa:
                    24:68:93:c9:f9:ff:97:6e:fd:b7:94:7b:b1:d7:19:
                    70:ef:08:40:30:55:38:2f:95:b2:29:b2:03:05:17:
                    ca:a6:ac:6c:1f:d5:ea:5d:e8:79:71:80:a7:ad:2d:
                    a7:0e:1a:d1:d2:f3:8f:c1:20:3a:94:cd:81:db:cf:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30983

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.118.0/24
                  196.200.128.0/18
                IPv6:
                  2001:4310::/32
                  2001:43f8:1670::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:0d:53:4f:b7:e2:b6:a3:04:48:4b:36:89:9a:a0:05:42:
         4d:d0:56:ee:b0:7a:9f:f7:c0:7b:a0:2b:08:3f:d6:d2:54:f6:
         bb:cd:7b:cc:7d:eb:eb:18:f7:d0:75:75:87:70:4b:78:0c:54:
         8c:90:f3:91:a2:44:70:eb:6f:bd:8c:d5:1f:92:ed:1d:5b:bc:
         78:16:68:f1:90:00:b7:c4:ae:f3:4a:c4:62:37:7f:ce:fc:aa:
         23:86:e2:2f:d6:31:b9:ad:46:14:e6:3b:cf:bf:69:45:52:26:
         86:83:76:26:50:1c:03:ed:22:a7:99:d4:c2:44:ce:95:dd:21:
         35:60:14:37:f0:6c:59:0b:5a:73:42:78:8b:6a:e0:b4:3a:28:
         7b:62:7c:c4:c5:ce:1e:e6:61:60:02:40:d2:47:0d:14:0c:50:
         6d:ab:a8:88:05:52:7b:2e:18:1f:01:4c:b8:2b:c2:8d:74:83:
         4a:8c:af:a1:91:94:e7:d5:70:98:16:60:89:63:75:60:18:76:
         78:62:2d:a4:6b:bb:42:f9:93:07:ac:7f:e1:21:d7:5c:8b:74:
         14:3a:c8:bd:71:17:10:52:69:d2:95:b7:ba:6e:12:c1:11:f0:
         44:7b:44:be:d0:43:4a:f9:68:89:f3:97:84:68:41:de:3b:42:
         53:ca:0e:ad
-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgICKHMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDI3NDdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkYwMTMzQUYxMTAvBgNVBAUTKDY2MzBDNzg0MDg0NkYyRjY5MDk3NTRG
MTM0MTQ2NkNEQUZFQTJGRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVb0srTm7oHT/b7yWWm3NEkJWuA7/TcdIDJK93Z2AKBHDMCR1ph62xx9EXg+MU
xfIXweYZrgALd5IsvU5vXN5VhDldkCSMktvKiyQIfN3bDl6LRl7Zm1L6J2Auqj+X
cgu4olkWwpY29p6tdwVellbjFH8TwEvGItQ4apzrhOH6xgbNpp7WSo/yiC7F4Z6i
nMMOduIIZ8iSU0RGKpbpVUg3Olx3KYoGYb/GjR0SdZ17EhIFOlRlbZ55E7C51Wyc
+y3fqiRok8n5/5du/beUe7HXGXDvCEAwVTgvlbIpsgMFF8qmrGwf1epd6HlxgKet
LacOGtHS84/BIDqUzYHbz7y5AgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUZjDHhAhG
8vaQl1TxNBRmza/qL9QwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMDEzMy81MDQxQTcwOEU1ODYx
MUVDQUZDMjJBODdGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEyMjI0NjgvWmpESGhB
aEc4dmFRbDFUeE5CUm16YV9xTDlRLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJ5BzA9BggrBgEFBQcBBwEB/wQuMCwwEgQCAAEwDAMEAGbYdgMEBsTIgDAWBAIA
AjAQAwUAIAFDEAMHACABQ/gWcDANBgkqhkiG9w0BAQsFAAOCAQEAFF0NU0+34raj
BEhLNomaoAVCTdBW7rB6n/fAe6ArCD/W0lT2u817zH3r6xj30HV1h3BLeAxUjJDz
kaJEcOtvvYzVH5LtHVu8eBZo8ZAAt8Su80rEYjd/zvyqI4biL9Yxua1GFOY7z79p
RVImhoN2JlAcA+0ip5nUwkTOld0hNWAUN/BsWQtac0J4i2rgtDooe2J8xMXOHuZh
YAJA0kcNFAxQbauoiAVSey4YHwFMuCvCjXSDSoyvoZGU59VwmBZgiWN1YBh2eGIt
pGu7QvmTB6x/4SHXXIt0FDrIvXEXEFJp0pW3um4SwRHwRHtEvtBDSvloifOXhGhB
3jtCU8oOrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:27 2024 by rpki-client on console-ams.rpki-client.org