Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.cer (raw, json)
Hash identifier:          DzkRY0NMFKSDzF86OAOdDm2Zu54gwcCP7GbUtSk4vK8=
Subject key identifier:   FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2937
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 08 Feb 2024 08:35:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329391
                          IP: 102.210.8.0/22
                          IP: 2c0f:2b40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10551 (0x2937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb  8 08:35:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:68:9f:5a:42:d7:ad:4f:36:3b:a7:23:92:
                    c5:af:48:52:27:2b:98:ac:c0:dd:e5:a5:fc:fe:f5:
                    3e:7f:58:22:e7:9a:e5:a0:ea:77:7a:fc:ff:e8:14:
                    be:1a:bb:23:24:28:06:c9:a3:e3:63:87:13:54:10:
                    a7:b5:c1:25:59:7a:94:35:58:09:12:c4:2d:76:fd:
                    5e:f4:aa:09:29:e8:5a:5e:bf:6b:41:3a:c3:93:8a:
                    5a:c7:47:0a:59:60:70:92:2b:e7:17:4d:2d:b3:cc:
                    c3:64:82:5f:74:65:b3:13:89:7b:eb:87:2b:35:dc:
                    78:a9:8e:69:9b:f8:b0:b7:c1:6e:18:c6:5a:8d:97:
                    21:f4:a0:35:50:86:95:32:37:1c:42:cc:7e:33:8d:
                    73:fe:d1:90:3d:4b:7d:7e:23:61:3d:4f:a1:54:d2:
                    ca:fc:04:61:ad:cf:b0:07:9a:a1:89:eb:11:7d:46:
                    76:28:24:14:5f:e9:32:cc:0a:79:68:62:41:25:a1:
                    6e:a4:59:43:35:0c:7c:5c:03:7a:9e:6f:26:22:a6:
                    ca:da:b7:12:07:35:64:04:8e:53:95:a3:4e:85:e4:
                    ea:da:53:0c:cf:83:8c:07:ef:fb:1f:d3:d3:3e:59:
                    3c:75:00:79:62:d2:a2:41:c8:e7:8e:b0:9f:de:8c:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329391

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.8.0/22
                IPv6:
                  2c0f:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:4b:aa:f2:85:56:30:e9:c0:5e:69:77:b7:2e:f5:41:1c:
         99:7f:2b:47:44:f3:a8:f9:a5:57:49:ad:36:89:ae:0c:ca:7d:
         f4:2e:2d:e7:ac:c4:d8:8e:56:9a:53:8e:52:59:37:cc:ca:c3:
         d7:82:fb:d7:38:46:6d:51:d6:9c:b5:23:74:6e:30:1c:f5:93:
         3f:29:67:87:68:68:63:12:18:a1:99:90:07:6e:98:11:3e:44:
         41:66:fc:32:17:15:ea:6c:01:e6:9f:b5:94:0a:18:7b:a7:d7:
         d9:65:a4:67:e1:de:f8:5a:9d:c8:d8:78:83:5c:e8:9e:79:80:
         0e:b8:6a:06:d2:01:fd:46:d9:d6:b8:58:b1:f0:75:ca:9a:f7:
         41:6c:f0:60:ad:7e:e1:b8:9c:9d:bb:ae:34:bd:29:a7:b6:87:
         32:92:ba:0e:ea:21:85:a3:25:5c:1e:c6:d2:88:aa:c7:46:03:
         42:9b:75:de:8b:c5:0e:01:67:69:d7:e6:7a:3f:90:a6:f1:a8:
         1d:df:4b:2e:5e:85:eb:03:64:51:7c:e3:8c:9f:1d:bc:9b:46:
         1a:83:98:0c:6d:42:3c:85:78:74:26:3e:97:9e:e0:43:ff:59:
         f1:2c:03:6d:60:4a:22:a6:bd:99:6b:a1:f4:c7:5e:c4:0e:5e:
         ca:b4:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org