Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer
File:                     e86nsLinQVZrXm80Yi1Yiw-2f5U.cer (raw, json)
Hash identifier:          RoeNvI+3pSOCjJ00jugOGJ+zUxZh8fUe4UNQnFvLU2w=
Subject key identifier:   7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2EA0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:46:45 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328837
                          IP: 102.220.52.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11936 (0x2ea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 01:46:45 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364BCB6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:33:39:d7:5e:3d:87:95:7d:1c:91:0b:22:
                    af:81:84:cb:97:0b:03:17:82:93:c2:27:61:5a:52:
                    a9:58:1a:c4:f6:00:ab:5d:af:9f:b3:59:34:0f:25:
                    07:ec:07:02:ec:b8:77:a9:ee:b8:9a:8b:e0:94:a8:
                    23:26:60:6f:6e:1e:33:cd:43:d4:0b:17:21:cd:2a:
                    d9:2c:eb:7b:b9:10:b2:81:db:77:b6:f9:7a:db:c9:
                    5c:ec:3b:09:3b:dc:aa:3d:95:b7:7e:3f:5f:9f:d1:
                    f0:b4:30:5a:22:0b:ca:09:36:8d:bc:ca:f7:a2:a4:
                    32:97:1e:a8:a1:25:62:7d:95:81:c0:50:e2:41:77:
                    38:85:18:4e:24:d0:bc:ac:21:f8:11:96:0b:e9:ad:
                    7b:cf:8f:38:f5:eb:a0:4c:2f:cd:a0:2f:bb:26:18:
                    ae:ab:1b:e4:66:37:24:08:5c:85:70:9d:5f:40:05:
                    a9:dc:42:34:7b:37:e1:ce:29:01:de:aa:8c:14:60:
                    50:49:09:21:d5:7b:a5:ec:69:08:52:97:db:f9:f5:
                    7c:6b:c7:1b:a1:dd:67:1b:0a:4b:72:c0:80:bf:a6:
                    ae:af:62:71:30:84:37:4d:fd:41:f1:0d:74:72:94:
                    53:80:41:54:46:94:54:70:e6:d7:1d:01:12:02:6c:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328837

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:d5:3e:f8:fc:bd:f7:a4:6a:fe:dc:45:9e:0b:e9:c5:e2:
         ee:57:21:c2:d4:51:3f:ff:21:f9:1f:e9:51:14:10:dc:17:9d:
         ce:60:47:50:34:a7:32:54:73:9d:73:22:8e:c4:ad:c1:55:62:
         2d:09:3e:81:e9:e5:8f:87:0e:da:25:b9:10:fc:fd:5e:b0:2e:
         9f:2e:fe:dc:b5:f9:1d:75:48:9b:a6:e2:6b:ed:d3:11:09:24:
         47:71:52:45:25:a6:17:ef:46:d7:c8:4a:da:3a:32:94:c8:26:
         6e:bf:77:16:75:ab:f0:1b:75:98:11:8b:5e:96:23:9c:bd:5b:
         68:07:77:73:a5:ac:ce:af:4a:79:7d:95:b7:63:3d:e8:58:3a:
         24:a3:c0:f0:0f:3f:01:6a:93:ae:1d:d9:e0:18:52:72:bf:cb:
         35:48:54:72:2c:91:2b:a5:72:92:92:61:9b:bc:fd:99:01:27:
         3c:c9:d7:77:c4:95:fa:17:91:56:af:59:4e:8e:75:5a:e2:32:
         83:4e:76:1c:4b:fe:20:9e:62:00:29:d3:48:0e:51:76:b4:7d:
         d2:8c:f2:58:f2:5f:33:bc:11:bf:ff:60:af:ef:60:cc:78:c3:
         8b:96:42:3a:cf:f7:25:be:0f:0d:99:8a:4c:7a:ed:de:b4:a5:
         be:59:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:29 2025 by rpki-client