Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
File:                     cHofKGrimG32SRDDA05RiafCFt0.cer (raw, json)
Hash identifier:          avOll1dkAIcR4ohMI1kol/lY4JLDQUZzwCTIWDFz3P4=
Subject key identifier:   70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2452
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:26:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37731
                          AS: 328137
                          IP: 102.215.236.0/22
                          IP: 2c0f:f030::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9298 (0x2452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:26:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:ee:27:a2:db:f8:4e:88:62:dd:cc:0f:fc:
                    f8:d0:75:f3:f1:c0:13:29:79:cb:95:44:e0:0b:c4:
                    f7:c9:2a:20:2b:bd:00:ac:c5:0b:97:4f:69:b0:30:
                    51:d8:7d:9e:ff:0d:d6:61:dd:ab:be:b0:03:57:f5:
                    31:3d:94:80:67:d4:d0:2c:f7:4e:32:b2:6a:3a:a5:
                    eb:8d:bd:38:70:8a:00:24:e3:c7:04:21:c2:e0:6a:
                    43:03:9b:e9:1e:ac:68:6f:ac:18:af:e6:1b:ae:03:
                    eb:82:83:08:7b:4f:8e:7b:3f:6e:b3:a6:c4:6b:c2:
                    b8:de:3b:b8:d9:3d:ac:e0:a5:73:b7:b9:2e:66:c8:
                    e5:62:6d:23:90:87:63:77:9b:1c:1c:2f:db:8f:e5:
                    b4:45:11:7c:11:85:23:ca:e8:ba:e4:20:b0:e2:a4:
                    62:75:db:f6:63:57:a0:2c:3a:ed:81:c4:45:ce:be:
                    77:00:e2:17:8f:95:c5:96:c3:cc:96:e7:31:0a:5f:
                    05:e1:1d:61:a1:ff:d9:4b:75:c2:ff:e9:d1:ce:57:
                    97:ad:f6:b8:ea:5d:8a:e5:c4:01:40:3d:d3:b7:31:
                    4e:4e:e2:22:48:4f:8a:b8:3f:26:88:0d:3e:2f:0b:
                    c5:e4:40:9d:45:29:5f:c9:ea:1d:51:9b:b6:b6:17:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37731
                  328137

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.236.0/22
                IPv6:
                  2c0f:f030::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:70:fc:b5:e4:8d:97:9c:50:96:dd:6b:51:f4:e4:4c:05:93:
         b5:7c:f0:ad:08:bf:a2:6c:28:a7:a1:3c:23:cf:f6:03:09:95:
         b2:ab:4d:a1:c1:86:ec:6d:0a:4c:da:d2:84:ba:d9:e7:61:4c:
         43:68:28:f8:b9:c4:52:f6:32:4f:cc:01:f0:65:a0:82:f3:3e:
         02:77:6b:bf:84:0e:5f:61:c6:e1:03:34:19:00:ee:4f:72:3d:
         d3:25:da:6a:6e:89:57:16:df:18:a4:e9:57:01:ff:49:9c:84:
         dd:44:b6:f3:11:52:d6:63:89:62:f9:59:52:a5:a8:51:74:24:
         ef:d8:cb:bc:3e:39:53:d3:03:13:b4:16:1a:58:bd:9c:14:16:
         94:b2:d7:ee:35:34:72:b4:96:d8:d6:12:7d:48:ce:d3:f1:ec:
         75:a8:08:a2:47:17:60:85:9c:52:dc:1b:e0:c5:96:a7:65:ec:
         48:fc:b3:18:8a:31:9e:08:f7:6a:61:32:48:29:ea:6c:ac:90:
         dc:00:89:db:7a:71:13:dd:67:d8:29:82:e8:0a:62:66:bb:5c:
         9c:55:5a:ec:d6:d1:7f:ba:2c:8c:31:5e:63:da:38:ac:ea:d5:
         c5:1e:0f:ea:c7:d7:e2:95:bc:7a:2b:5b:fb:95:b9:b9:d2:c8:
         07:6a:b7:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:32:27 2024 by rpki-client on console-fra.rpki-client.org