Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
File:                     cEamUnYMjpA1cB1qRNwnGg4zAVw.cer (raw, json)
Hash identifier:          NJHU1JQt9uxZHMU5X9jG6O+yDz2iDH2+OtNztDstduU=
Subject key identifier:   70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2310
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:00:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328453
                          IP: 102.65.0.0/16
                          IP: 102.222.180.0/22
                          IP: 2c0f:ed28::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8976 (0x2310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:00:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:12:f8:4d:9d:76:75:ad:e5:47:61:79:5e:
                    d4:69:29:e8:1f:f3:0e:8a:da:b8:77:9e:cb:a7:6f:
                    94:62:98:4d:39:1f:84:d0:bb:26:18:f3:df:ae:b2:
                    c0:da:c7:7d:64:e5:a3:65:62:8e:4f:78:43:77:fd:
                    91:30:44:cd:7a:9b:4b:2c:71:b7:f2:57:27:aa:f6:
                    fa:38:8f:38:9a:82:1c:05:8e:6f:8f:76:bb:e5:84:
                    0a:09:87:ef:49:a3:12:cf:b7:d2:76:ef:ff:78:4e:
                    70:c2:b1:7f:bc:c4:21:73:9a:53:86:6d:0f:89:93:
                    7c:3c:13:d2:0a:f1:ca:dd:56:72:ce:86:49:68:17:
                    81:16:ab:92:bb:3d:94:ca:44:fd:39:0a:46:e6:a5:
                    a8:35:2d:aa:cc:4e:de:ae:6d:39:28:fd:14:82:30:
                    95:10:df:a7:e9:d1:ee:b0:e6:81:8f:1f:46:7c:fa:
                    c4:63:2c:6f:18:73:f4:fa:2c:dc:6c:2a:9b:9d:d8:
                    a8:bf:20:2e:39:4e:9c:db:9d:1e:73:4f:86:89:86:
                    f0:1c:a8:80:75:bf:e0:0b:bb:f0:d3:83:e5:ed:ea:
                    ae:85:03:2b:c4:b1:9f:09:f4:be:ce:89:90:62:55:
                    ee:e7:d2:0f:51:8d:10:ec:3c:4b:62:59:12:85:ae:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328453

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.65.0.0/16
                  102.222.180.0/22
                IPv6:
                  2c0f:ed28::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:55:f7:bc:74:5e:40:75:a5:5b:45:19:a1:ea:96:eb:46:d2:
         80:6b:de:db:72:cb:39:90:36:09:c0:25:90:0b:c6:d8:98:9b:
         88:25:2e:ef:f3:a3:0f:40:b3:0c:1b:22:fc:96:bd:3c:28:56:
         9f:41:31:b1:dc:c3:4f:52:87:67:8a:69:8c:e4:13:8a:ac:59:
         a0:06:ed:ca:93:82:cf:74:b0:fd:97:93:27:0a:71:7b:dc:7e:
         ae:a2:c0:a8:3d:dc:2b:4c:d4:8b:94:c4:50:88:d5:cf:d4:20:
         7c:5c:6c:70:e4:32:d1:f2:50:d6:71:94:d0:c0:33:e8:54:57:
         70:7b:20:0e:be:d9:bf:9d:c6:15:ae:60:7a:fc:37:15:71:0f:
         1c:ba:e8:27:5c:a5:9f:2c:e2:0e:29:5d:69:a5:45:00:e7:d8:
         f1:d2:8a:4b:99:83:ee:24:37:96:34:ab:95:e5:96:00:f5:5c:
         70:3b:92:b3:5d:37:57:29:6e:d5:91:88:a5:31:2b:7f:d3:a3:
         eb:66:a7:75:e3:02:14:69:dd:e3:df:1b:17:2d:f4:ec:7d:92:
         ae:33:55:85:c9:82:1b:4e:65:b2:e8:d0:e0:d1:70:2e:ca:a1:
         91:23:f7:69:14:ef:f7:c4:b0:96:83:c1:1a:62:a3:ff:8b:7c:
         71:50:27:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:06 2024 by rpki-client on console-ams.rpki-client.org