Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.cer (raw, json)
Hash identifier:          oNiTSLx0WmEQQb6pyb0MqxNZrefeCNmPfJmpcW/Ph+Q=
Subject key identifier:   78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3462
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 06 Mar 2025 06:27:44 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328980
                          IP: 102.218.144.0/22
                          IP: 2001:43ff:2000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13410 (0x3462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Mar  6 06:27:44 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36EE687AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:76:74:af:84:a7:07:4f:de:bc:0d:61:f9:
                    ac:4f:c4:83:f3:f7:5d:f8:e6:9d:53:c0:80:ee:69:
                    68:40:28:de:34:09:99:19:50:c0:02:36:3e:50:5f:
                    a1:98:90:2a:3a:01:3d:30:0c:9a:d6:b2:88:2b:3f:
                    e6:fd:0e:5e:83:fc:0d:dd:48:0e:97:7b:2b:23:c1:
                    02:ac:c9:1c:5f:f7:fa:11:3e:6f:fe:d8:26:96:4e:
                    fc:a9:48:c7:16:81:d2:8d:85:ae:71:92:7d:53:40:
                    61:ee:c7:5d:cb:51:3b:51:6f:bd:23:73:1f:68:2a:
                    77:07:63:1f:49:cc:64:ff:a8:4f:3e:4b:de:4f:f6:
                    e2:84:a5:18:6b:fc:24:cb:4b:ca:6b:4a:fd:fe:f8:
                    1f:82:b3:b7:8e:71:69:cc:f7:b8:dd:b9:fa:ef:37:
                    dc:97:59:9c:93:f6:aa:36:53:53:e6:81:11:f8:58:
                    9f:fa:68:9d:ba:a6:bc:00:fc:7d:e5:85:48:20:4f:
                    c3:ef:e9:86:d1:28:d7:2f:9d:61:c7:24:b0:4a:d1:
                    71:8d:ef:5a:9b:e4:a5:5d:c2:f1:0c:3a:20:d0:9d:
                    b7:c2:08:7e:f1:c9:f6:e3:78:09:6a:0b:bf:2d:f1:
                    ac:f8:ef:b6:9b:b9:ef:6d:b1:8c:8a:4f:4a:b7:85:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328980

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.144.0/22
                IPv6:
                  2001:43ff:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:55:2d:62:67:d2:37:ba:56:26:86:fd:2c:2f:2c:15:89:
         b4:b9:01:9c:02:29:76:b1:cc:24:95:7e:b4:44:70:74:75:a2:
         ee:ad:ad:13:33:24:66:a7:c2:df:a2:ef:e8:e9:4e:d0:b8:ba:
         a1:e7:df:c3:22:71:cd:fb:79:f1:c8:8d:e3:23:7f:e6:c1:93:
         5a:a5:cd:9e:42:74:05:60:a2:55:42:ee:f1:b8:6d:bc:18:3a:
         98:f8:88:b6:78:fd:cb:ba:24:7c:c9:0c:61:a4:fc:9e:18:ab:
         d2:1f:fc:9f:fe:55:2e:d5:88:4f:60:77:66:a6:f1:05:df:d8:
         b6:26:9b:34:57:ab:04:28:19:f3:af:81:0e:09:ad:a5:87:a6:
         1d:dc:9b:92:92:48:ef:e8:0b:37:5d:2f:8b:80:61:95:a6:13:
         d0:da:84:08:3f:66:8b:71:a8:23:10:bf:e5:f6:74:fd:82:20:
         bf:4d:bc:ba:ab:6a:f8:9a:c5:5f:87:b7:4b:61:0f:e9:e2:2a:
         d9:77:73:e7:2c:92:7c:a5:7a:5e:30:9e:61:80:11:3e:e4:75:
         97:b8:a6:b5:b2:54:ba:87:ea:2e:22:2b:2a:b4:5c:59:ad:08:
         4b:b8:69:7b:cb:f4:48:cb:61:e5:36:4a:c8:b4:87:ab:af:58:
         e8:39:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:33 2025 by rpki-client