Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer
File:                     e86nsLinQVZrXm80Yi1Yiw-2f5U.cer (raw, json)
Hash identifier:          OHbRdIl9LggEWSkaeknUQqPazxLol+EKFEtPplRCjkE=
Subject key identifier:   7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24AE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:48:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328837
                          IP: 102.220.52.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9390 (0x24ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:48:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364BCB6AF/serialNumber=7BCEA7B0B8A741566B5E6F34622D588B0FB67F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:33:39:d7:5e:3d:87:95:7d:1c:91:0b:22:
                    af:81:84:cb:97:0b:03:17:82:93:c2:27:61:5a:52:
                    a9:58:1a:c4:f6:00:ab:5d:af:9f:b3:59:34:0f:25:
                    07:ec:07:02:ec:b8:77:a9:ee:b8:9a:8b:e0:94:a8:
                    23:26:60:6f:6e:1e:33:cd:43:d4:0b:17:21:cd:2a:
                    d9:2c:eb:7b:b9:10:b2:81:db:77:b6:f9:7a:db:c9:
                    5c:ec:3b:09:3b:dc:aa:3d:95:b7:7e:3f:5f:9f:d1:
                    f0:b4:30:5a:22:0b:ca:09:36:8d:bc:ca:f7:a2:a4:
                    32:97:1e:a8:a1:25:62:7d:95:81:c0:50:e2:41:77:
                    38:85:18:4e:24:d0:bc:ac:21:f8:11:96:0b:e9:ad:
                    7b:cf:8f:38:f5:eb:a0:4c:2f:cd:a0:2f:bb:26:18:
                    ae:ab:1b:e4:66:37:24:08:5c:85:70:9d:5f:40:05:
                    a9:dc:42:34:7b:37:e1:ce:29:01:de:aa:8c:14:60:
                    50:49:09:21:d5:7b:a5:ec:69:08:52:97:db:f9:f5:
                    7c:6b:c7:1b:a1:dd:67:1b:0a:4b:72:c0:80:bf:a6:
                    ae:af:62:71:30:84:37:4d:fd:41:f1:0d:74:72:94:
                    53:80:41:54:46:94:54:70:e6:d7:1d:01:12:02:6c:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328837

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:b8:2f:77:50:ee:be:93:7c:30:a6:3e:38:8b:4a:12:b1:
         f6:0a:a3:82:7e:f1:fc:a7:7d:78:fe:09:c9:4c:c8:3d:07:c1:
         95:ff:e4:b2:d6:65:12:bc:d2:0e:5a:b7:39:ed:24:2f:86:71:
         e5:df:f3:8c:56:a7:7b:f9:07:00:41:f4:a2:40:ad:9e:09:aa:
         44:a4:ac:86:b5:94:dd:81:03:61:8c:7a:ff:50:bb:da:b8:a3:
         c7:58:b4:b2:42:14:3b:ed:8d:08:ba:0c:8e:11:ee:cb:0c:d5:
         50:e7:7e:c7:9c:f5:ae:3c:ae:ac:ba:5b:6d:a8:0a:39:41:8c:
         2a:8b:83:f7:42:9a:f2:d0:07:1a:30:52:bf:6b:a8:d4:38:e8:
         b4:74:b8:ed:c8:00:80:97:31:ed:b6:2c:20:12:17:b5:6a:ab:
         0f:2e:25:76:a1:58:0d:0a:8e:8a:06:46:94:f0:cb:51:05:05:
         b0:35:b2:73:92:75:b2:86:ce:ce:de:64:aa:94:ff:29:3b:15:
         d5:92:4c:92:25:1d:02:10:43:61:b9:62:a9:3b:2c:07:39:ae:
         8b:08:2e:52:fc:fd:50:44:02:af:a3:a2:2d:79:ca:72:4f:53:
         34:09:9e:f6:b6:25:e6:3e:80:63:a7:3f:b9:29:ce:88:28:83:
         8a:ae:1d:35
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJK4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMTQ4NTFaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjRCQ0I2QUYxMTAvBgNVBAUTKDdCQ0VBN0IwQjhBNzQxNTY2QjVFNkYz
NDYyMkQ1ODhCMEZCNjdGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHezM51149h5V9HJELIq+BhMuXCwMXgpPCJ2FaUqlYGsT2AKtdr5+zWTQPJQfs
BwLsuHep7riai+CUqCMmYG9uHjPNQ9QLFyHNKtks63u5ELKB23e2+XrbyVzsOwk7
3Ko9lbd+P1+f0fC0MFoiC8oJNo28yveipDKXHqihJWJ9lYHAUOJBdziFGE4k0Lys
IfgRlgvprXvPjzj166BML82gL7smGK6rG+RmNyQIXIVwnV9ABancQjR7N+HOKQHe
qowUYFBJCSHVe6XsaQhSl9v59Xxrxxuh3WcbCktywIC/pq6vYnEwhDdN/UHxDXRy
lFOAQVRGlFRw5tcdARICbLsfAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUe86nsLin
QVZrXm80Yi1Yiw+2f5UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0QkNCNi9FNzlBODYwQ0RCMzEx
MUVCQjIxNjc4MkNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEJDQjYvRTc5QTg2MENEQjMxMTFFQkIyMTY3ODJDRjhBRUEyMjgvZTg2bnNM
aW5RVlpyWG04MFlpMVlpdy0yZjVVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBIUwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3DQwDQYJKoZIhvcN
AQELBQADggEBAFZ/uC93UO6+k3wwpj44i0oSsfYKo4J+8fynfXj+CclMyD0HwZX/
5LLWZRK80g5atzntJC+GceXf84xWp3v5BwBB9KJArZ4JqkSkrIa1lN2BA2GMev9Q
u9q4o8dYtLJCFDvtjQi6DI4R7ssM1VDnfsec9a48rqy6W22oCjlBjCqLg/dCmvLQ
BxowUr9rqNQ46LR0uO3IAICXMe22LCASF7Vqqw8uJXahWA0KjooGRpTwy1EFBbA1
snOSdbKGzs7eZKqU/yk7FdWSTJIlHQIQQ2G5Yqk7LAc5rosILlL8/VBEAq+joi15
ynJPUzQJnva2JeY+gGOnP7kpzogog4quHTU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org