Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
File:                     bssXAorVt9tcd32x3OCXh-SVstE.cer (raw, json)
Hash identifier:          uv9BoM10d3xY75dpkgEhzYmgno47lhlgT40E2LfJED8=
Subject key identifier:   6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23DB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:56:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328517
                          IP: 102.69.208.0/22
                          IP: 102.212.224.0/22
                          IP: 2c0f:7f80::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9179 (0x23db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:56:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:6f:2c:19:58:1e:e0:11:53:aa:ce:70:8e:
                    1c:6a:3a:aa:36:3f:fb:50:c0:a5:c2:df:a4:ad:46:
                    a6:e1:c5:ff:33:3e:02:5f:7d:b9:66:af:48:9e:ed:
                    90:08:95:8c:9c:b7:ea:9d:7f:16:cb:43:f0:11:4a:
                    d8:fc:99:9f:5d:ed:fe:f0:f7:bf:38:bb:35:bb:b6:
                    11:c2:e4:12:b7:fd:4d:69:6a:f0:2c:4b:bf:14:8e:
                    d4:4a:10:18:f6:5c:7b:73:b6:40:b9:3f:e6:04:7c:
                    57:9d:2c:a5:ee:0b:50:48:12:e7:4f:16:82:d2:6a:
                    71:c3:30:fc:1f:45:eb:ea:9c:30:62:b1:5e:a0:3f:
                    16:21:88:02:ad:2e:2d:f3:4f:8f:aa:fa:44:2b:53:
                    e4:40:7e:9d:6b:fb:e8:d1:80:10:2b:89:2f:e2:a8:
                    62:71:1d:7e:fd:d5:fb:b0:40:3f:f8:23:dc:64:35:
                    2c:23:5e:6b:6d:29:00:80:3e:a1:ae:96:70:d7:00:
                    95:ef:0d:1c:27:af:15:a3:26:46:f9:7d:26:51:fc:
                    48:c8:e0:6a:3f:00:e2:fe:77:21:a7:05:69:5c:81:
                    d3:39:cc:ba:f4:dd:72:81:c9:19:92:18:fd:31:aa:
                    dd:35:55:68:c1:e9:a7:2d:eb:97:17:a2:b2:27:1c:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328517

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.208.0/22
                  102.212.224.0/22
                IPv6:
                  2c0f:7f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:04:f0:1b:30:c0:c1:1c:b6:5c:a7:86:56:63:0f:c7:d7:
         83:b4:9a:ea:dd:cf:6f:9b:33:02:32:c9:0b:ea:b3:53:81:c3:
         f9:69:11:a1:28:91:6c:e4:90:e6:9b:b9:a3:14:42:0e:1d:d3:
         4b:38:af:44:ed:6a:f0:6b:c1:dc:86:da:c9:b9:1c:29:a6:93:
         19:ee:79:ad:33:87:50:6c:ba:fd:07:9a:f0:d7:55:a2:e1:3a:
         48:bf:45:82:4d:15:9e:b4:94:65:3e:93:25:51:70:ef:7e:00:
         c1:ba:6b:f3:42:42:0a:a6:6a:d2:7f:b3:80:7d:fc:f2:33:bc:
         3e:ac:92:c7:f8:2f:d1:cd:e6:05:ad:6e:16:8f:02:aa:07:0c:
         88:e5:11:55:78:9b:78:6f:bb:03:b2:0c:8c:aa:89:f1:12:a4:
         1a:70:0b:b7:80:72:9f:1b:0c:df:a3:fe:32:a6:9a:21:0c:23:
         4a:b1:bb:0e:85:26:b4:94:c8:e8:51:f1:26:dc:dc:35:08:4c:
         52:cc:40:44:78:37:55:06:36:12:89:2b:8c:c3:27:d5:c3:30:
         0b:3b:d3:f7:db:4c:b1:8a:c8:cc:f3:58:d2:ec:15:85:d0:e1:
         14:3a:f9:d7:ce:09:85:56:b0:db:b9:8f:be:3b:3c:50:86:11:
         eb:3e:76:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org