Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.cer (raw, json)
Hash identifier:          0fMO2ZS3BEBOOqcSDYlaqs9pV9u04d0/UtxZgZOlWF8=
Subject key identifier:   79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2915
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 30 Jan 2024 07:13:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328590
                          IP: 102.38.48.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10517 (0x2915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 30 07:13:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:87:fd:8e:b5:95:d5:8a:1d:3c:e6:08:22:
                    61:8f:75:88:6b:f3:56:68:cd:d4:8e:3d:68:a3:8e:
                    d8:c3:d3:49:a8:39:2f:9b:63:c6:aa:c5:45:05:53:
                    34:29:6c:87:01:2f:f7:9a:00:4b:59:ee:55:09:3f:
                    34:46:b8:59:28:ce:c3:cd:6f:e7:a2:05:37:5e:8e:
                    43:b2:c6:0d:3d:6d:af:08:38:52:a5:56:2a:a3:52:
                    6e:b2:2d:f2:66:c8:ea:b6:20:22:de:32:90:49:65:
                    b6:79:a7:bf:ec:69:f8:e9:c6:07:46:06:17:87:04:
                    fa:10:d3:ef:4b:7c:06:b3:41:d9:5f:8c:6c:ab:39:
                    09:f5:17:8a:87:e4:3d:94:4c:c8:d0:60:d8:18:74:
                    0a:1e:1d:86:34:0c:00:25:9e:b3:b4:99:ff:a4:2d:
                    21:39:79:c3:e1:99:22:92:75:d8:29:ef:8a:73:1d:
                    e7:17:4f:08:53:f6:95:02:84:b5:47:61:81:67:af:
                    fc:10:2a:18:83:10:6a:22:b9:0e:ab:b4:b1:0e:c3:
                    d4:62:ab:26:a2:a1:7a:3c:56:c4:d5:42:b3:28:e7:
                    1a:ab:df:89:72:41:df:17:40:bb:17:a2:a3:d4:da:
                    71:20:77:41:a8:21:10:b9:2f:f4:bc:fe:e0:ad:a2:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328590

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.38.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:bc:12:28:ae:24:a9:6a:7c:ce:d1:70:4a:8f:64:1f:53:
         e0:5a:20:a5:e8:33:0e:21:6e:04:44:38:99:44:a5:86:07:55:
         82:c9:1c:a1:ca:59:cb:79:92:2f:84:64:43:46:cb:c2:99:2c:
         38:92:a2:dd:c1:09:5d:47:87:3a:56:af:5a:36:a1:22:c7:20:
         f1:a1:bc:fc:38:82:ae:74:b3:1e:6d:be:d3:99:dc:84:49:2d:
         1e:28:db:55:82:01:bd:29:db:75:d7:a1:8d:83:30:de:fe:1c:
         f8:d9:3d:e3:fa:3e:09:4f:b6:6d:98:77:58:c5:f0:73:d5:e0:
         61:9b:58:0d:7f:59:22:d8:ee:38:23:ea:06:e0:d3:85:61:39:
         81:02:a4:d8:67:0b:37:2b:87:ab:7d:b2:7c:6d:2f:2b:27:33:
         16:7e:cf:f3:c1:63:0e:76:9a:c3:e6:be:d8:e3:4c:02:e2:66:
         63:e8:0d:db:db:34:d8:b0:51:8f:8a:cc:e0:e2:51:66:16:85:
         a0:c8:25:1c:93:d7:36:78:27:00:4b:62:07:bf:68:0a:3f:78:
         0a:12:11:cb:9b:31:0c:e5:2d:a6:52:3a:31:2f:df:a4:b0:28:
         72:14:c5:a0:47:be:21:0b:91:ba:02:31:fd:87:4a:68:1a:6e:
         22:e0:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org