Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
File:                     eekHF2z7dQa9kWBW83X6OM5BzaM.cer (raw, json)
Hash identifier:          eEUselZo747w+W/2K2s3DXVahrCa0C6WVRHfU7m5N6E=
Subject key identifier:   79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       31E4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 04:38:54 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328652
                          IP: 102.210.172.0/22
                          IP: 102.223.32.0/22
                          IP: 2c0f:e880::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12772 (0x31e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 04:38:54 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36AB5C3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:b1:f6:2e:3d:9f:d5:82:73:74:6a:a4:71:
                    41:8a:17:9b:83:3b:c0:86:3e:2a:7c:57:3a:6d:06:
                    32:78:f3:08:87:57:0e:d9:6c:b9:3f:a6:27:b9:76:
                    62:d3:31:c4:93:6d:0e:07:87:4f:b3:c8:d7:b5:25:
                    44:5e:62:6f:2f:17:71:a3:4b:56:ed:c5:8c:ce:db:
                    59:65:4a:5e:93:87:43:8c:fb:c9:87:f2:33:2a:29:
                    29:bb:8b:74:cb:fe:23:59:be:62:db:1d:4a:b5:56:
                    cc:3d:da:17:c8:8f:2e:0e:cd:ca:fd:50:d2:fd:e5:
                    1c:08:7c:f1:24:aa:41:01:95:4d:98:7a:e0:84:f1:
                    de:d3:e6:b5:dd:52:33:07:08:1d:a2:f7:c2:2f:71:
                    81:22:56:59:5f:c2:7e:b3:be:c3:e2:53:70:e0:93:
                    84:5e:1a:2a:d6:2e:a4:4a:23:30:70:7a:cf:5d:20:
                    33:c9:78:19:03:67:a0:2d:f6:4c:70:83:91:99:18:
                    3b:9e:45:6f:22:6b:a2:49:94:20:0a:8f:cb:95:6a:
                    38:22:26:e9:cc:46:f7:51:47:62:bd:7f:f4:9f:c7:
                    9d:c0:b4:3f:93:4b:3c:d1:58:00:7c:4a:0c:58:60:
                    99:4d:f9:5b:7c:df:3a:62:bf:07:04:15:e3:29:42:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328652

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.172.0/22
                  102.223.32.0/22
                IPv6:
                  2c0f:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:71:06:96:47:77:5f:34:57:f3:09:9a:f3:68:9b:0b:c7:
         d1:c7:09:fe:83:52:8a:6f:39:57:83:57:03:20:55:9a:30:f5:
         0a:50:cd:e9:9e:a6:ad:fb:b2:21:a0:f6:b5:4e:8a:69:10:6b:
         de:5d:4f:64:9b:89:9e:f2:b2:1f:93:16:bb:c8:a6:d7:01:54:
         8c:fc:fc:40:f8:39:bd:b8:5b:70:c3:b3:0c:f1:da:49:f0:da:
         bd:bd:d3:9a:07:81:ce:6b:19:9f:aa:7f:5c:36:92:6a:b3:b4:
         57:39:79:41:ba:4e:87:b5:50:37:25:14:00:0a:ff:ff:36:ce:
         49:c3:21:5d:f8:9b:84:4c:23:ce:0a:9a:16:a9:87:ec:4f:5d:
         c0:68:f9:a4:de:4e:dd:4a:2e:81:bb:e5:6c:83:c2:fa:9e:ad:
         31:ad:04:5f:15:ea:3b:98:00:d4:16:a7:e1:53:ae:01:6a:10:
         b6:7e:1d:2d:96:9d:de:4c:30:c1:27:99:50:1b:ed:02:93:a0:
         e5:19:a9:02:da:eb:d5:99:c9:9f:6b:51:cd:8a:fb:f2:92:1e:
         1d:50:3c:87:62:da:6c:d2:e3:8e:fd:63:66:4b:05:20:4d:f5:
         3e:4d:47:27:7d:2c:16:ab:5b:fa:4b:7a:45:1a:42:86:ba:e9:
         bf:95:01:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:21 2025 by rpki-client