Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.cer (raw, json)
Hash identifier:          WaGVnJTxvr28iy6jBtzL0eRj11BWMhiTCij72AuAzgk=
Subject key identifier:   78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       33D6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 06:30:43 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328503
                          IP: 102.67.32.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13270 (0x33d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 06:30:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36FF74CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:db:c4:59:da:9a:1b:31:6b:c0:7e:a7:b9:
                    e3:f8:c1:d0:eb:e3:cc:b3:63:b5:2c:4d:e3:38:87:
                    61:4d:4f:84:8b:96:66:a8:f1:dc:19:11:d2:d3:16:
                    01:ff:01:4b:03:8c:b5:03:9e:24:cb:fe:28:a0:4f:
                    4c:9c:50:3c:cd:61:21:a3:22:fe:d4:f8:6d:d0:98:
                    aa:ed:9c:eb:50:6b:db:4a:98:4c:e1:99:da:96:94:
                    0b:13:a6:57:56:7f:23:50:79:ba:86:c4:9e:f7:86:
                    a0:1f:8e:06:f2:b3:2c:f5:1b:ae:89:34:8c:3a:f8:
                    23:3b:67:37:b9:fa:95:f3:0c:ab:b1:5c:af:e1:b3:
                    a6:d5:56:4d:31:1d:80:18:c2:c0:84:c2:ef:64:ad:
                    40:a4:bc:a3:ca:2a:1b:98:99:46:21:ef:e3:84:0a:
                    94:d7:47:69:84:fb:07:b5:40:41:93:8c:f2:c0:76:
                    e6:22:06:ad:25:81:e5:c4:fc:ab:6a:ea:0a:c2:63:
                    c4:19:5f:d4:53:c5:00:54:e0:6c:9f:71:86:f1:18:
                    37:4c:49:45:33:8d:d5:7b:fc:f5:69:2d:31:2c:e7:
                    7d:18:90:30:8a:5d:35:c2:b9:4d:e6:54:35:1b:ad:
                    d5:a1:c6:4d:29:bd:fb:68:55:f5:96:80:c3:cc:fa:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328503

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:f7:77:c6:b7:78:15:96:8e:ac:76:2f:90:98:5d:c7:e5:
         b2:a0:e7:e9:ab:d9:da:61:da:39:b7:b5:b4:0c:e1:35:ce:30:
         f3:58:bf:94:6c:d3:de:52:ec:56:59:96:ce:20:9d:4e:d8:1d:
         cc:27:c8:39:db:5c:f4:37:93:a6:ad:97:fc:27:21:b2:a1:78:
         50:a8:fe:4f:37:db:0b:31:2e:27:76:29:99:18:10:a5:2d:57:
         cb:74:d0:df:90:5f:4b:d3:97:6a:9a:b5:2b:f9:5b:e7:11:09:
         82:37:4f:b2:3d:65:7a:16:fa:a0:d4:96:53:7c:31:4b:28:77:
         d8:34:04:a2:58:33:4f:2d:04:f2:21:96:f8:eb:75:4c:0a:4f:
         80:0d:69:33:02:c7:b6:cf:b2:6b:1d:49:4c:8e:e1:b5:b7:df:
         ea:1f:c5:02:59:5d:b8:e9:c0:ba:46:ce:ea:74:d7:de:2a:bd:
         4d:99:c8:45:63:34:95:54:03:8f:8b:1f:fb:de:67:27:78:d9:
         ff:bb:52:e4:22:6f:83:1a:a1:ae:44:08:52:db:14:10:d1:1c:
         e5:98:2c:b5:78:c0:25:51:01:69:61:9a:2d:68:48:c1:8c:88:
         94:f5:b4:23:08:9f:70:0e:1e:b7:62:ea:a0:39:35:3e:0e:08:
         4a:c2:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:12 2025 by rpki-client