Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
File:                     eekHF2z7dQa9kWBW83X6OM5BzaM.cer (raw, json)
Hash identifier:          ZztpHD0VJzhr295Lq296v67sR4tNeshzmbIYbDBcw7M=
Subject key identifier:   79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2724
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:37:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328652
                          IP: 102.210.172.0/22
                          IP: 102.223.32.0/22
                          IP: 2c0f:e880::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10020 (0x2724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:37:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36AB5C3AF/serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:b1:f6:2e:3d:9f:d5:82:73:74:6a:a4:71:
                    41:8a:17:9b:83:3b:c0:86:3e:2a:7c:57:3a:6d:06:
                    32:78:f3:08:87:57:0e:d9:6c:b9:3f:a6:27:b9:76:
                    62:d3:31:c4:93:6d:0e:07:87:4f:b3:c8:d7:b5:25:
                    44:5e:62:6f:2f:17:71:a3:4b:56:ed:c5:8c:ce:db:
                    59:65:4a:5e:93:87:43:8c:fb:c9:87:f2:33:2a:29:
                    29:bb:8b:74:cb:fe:23:59:be:62:db:1d:4a:b5:56:
                    cc:3d:da:17:c8:8f:2e:0e:cd:ca:fd:50:d2:fd:e5:
                    1c:08:7c:f1:24:aa:41:01:95:4d:98:7a:e0:84:f1:
                    de:d3:e6:b5:dd:52:33:07:08:1d:a2:f7:c2:2f:71:
                    81:22:56:59:5f:c2:7e:b3:be:c3:e2:53:70:e0:93:
                    84:5e:1a:2a:d6:2e:a4:4a:23:30:70:7a:cf:5d:20:
                    33:c9:78:19:03:67:a0:2d:f6:4c:70:83:91:99:18:
                    3b:9e:45:6f:22:6b:a2:49:94:20:0a:8f:cb:95:6a:
                    38:22:26:e9:cc:46:f7:51:47:62:bd:7f:f4:9f:c7:
                    9d:c0:b4:3f:93:4b:3c:d1:58:00:7c:4a:0c:58:60:
                    99:4d:f9:5b:7c:df:3a:62:bf:07:04:15:e3:29:42:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328652

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.172.0/22
                  102.223.32.0/22
                IPv6:
                  2c0f:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:39:db:d4:99:65:9b:6a:9a:1e:46:2b:38:31:32:75:a6:4f:
         95:ec:da:77:8c:f9:12:19:bc:52:ca:f4:51:b4:d2:e3:99:2b:
         6c:ef:f9:e7:65:f2:97:33:1f:82:5e:9a:dd:6e:90:a1:46:d5:
         ce:26:52:86:85:a7:29:f3:e6:a3:04:01:94:f4:d0:b1:54:7f:
         a0:57:f3:ce:16:8d:2c:31:36:2a:09:d9:d6:e5:88:a0:13:5e:
         5c:19:54:ad:19:7a:a3:81:81:3e:4e:96:d7:d7:89:3c:8f:3a:
         fc:db:9a:41:98:b8:f9:44:30:6d:38:c9:49:d6:ca:fb:65:ed:
         8c:8e:cf:10:64:44:0c:0d:75:33:e5:da:24:07:5c:e6:08:df:
         de:ae:a7:1e:51:e3:6b:34:a8:8c:e1:73:32:dd:61:86:6a:e8:
         15:08:85:72:1f:f5:c7:63:41:e2:9c:1f:1a:c9:0d:7c:7f:e6:
         6e:9b:2a:06:9b:7a:0b:31:95:28:14:b4:95:e4:2d:b5:69:0b:
         1f:99:6c:9c:2f:d2:e0:1d:d6:cd:87:88:f9:6b:85:93:76:99:
         39:5f:50:be:30:5f:d3:b4:2d:9c:db:05:79:61:f5:27:f9:47:
         7e:85:3b:6f:99:4b:bc:f1:11:fd:23:9c:e5:49:3f:1e:ef:f7:
         3b:b4:0a:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org