Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
File:                     f5DbGDX56nljonlPXDJUNY30PvQ.cer (raw, json)
Hash identifier:          I6cng1DCzoTuJd5NeOFpshhDdhyV6LC3QENSNp0wsEg=
Subject key identifier:   7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2AD1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 17 Jul 2024 06:19:36 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329322
                          IP: 102.211.68.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10961 (0x2ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 17 06:19:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:8a:aa:4d:0c:0b:32:c6:32:93:4e:9c:0c:
                    29:14:70:ec:3d:26:0c:b3:da:4c:b6:3f:7d:13:f0:
                    2d:24:21:23:73:93:53:2c:9b:45:7b:6b:88:c9:0b:
                    00:4c:a3:7b:d6:1a:62:b7:62:87:43:e0:f1:ac:0f:
                    c5:63:19:61:10:93:1a:50:a8:b0:cc:04:eb:c0:5d:
                    9c:fe:d1:cf:72:34:1c:46:f7:2c:2b:c3:2b:fb:60:
                    3d:c0:a5:23:86:88:7c:77:62:a6:a8:1f:34:ad:d9:
                    5b:7b:60:11:bd:ff:2c:a2:b2:cd:77:40:d3:ab:d6:
                    fb:b2:f0:e9:50:e9:82:37:ba:f5:20:ff:00:e2:dd:
                    ed:b3:d5:ad:82:ea:90:ca:e4:e3:27:ee:6b:29:02:
                    7d:77:c5:9f:c8:9a:bc:50:ac:bb:68:f5:49:a2:eb:
                    c9:e9:ca:61:b0:93:f9:94:d3:8b:68:a9:97:af:0b:
                    9a:73:5b:31:0d:ef:23:2f:88:a2:ac:c9:fa:57:88:
                    65:65:dd:60:ed:c1:fa:60:42:3a:1c:0e:68:c4:be:
                    40:15:4c:08:07:7c:a8:d3:57:f6:67:a9:1f:32:b6:
                    c9:2b:a5:1c:b7:48:20:3f:10:0b:c2:1d:a3:a2:23:
                    e3:ad:12:58:d7:f1:0c:09:ca:c7:5f:a9:33:d6:17:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329322

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:50:45:91:c9:bc:e2:1e:f8:eb:df:9d:bd:be:3d:ea:9d:50:
         2b:06:49:0e:ad:3c:63:76:87:d4:9d:2e:ac:9d:57:69:38:0c:
         1b:4a:82:be:76:47:c9:9f:bb:82:d8:5f:24:d5:8b:c9:13:a4:
         6b:6c:ca:77:29:07:21:29:c0:17:73:7a:ba:04:f3:6f:16:99:
         df:e3:7a:16:5b:7b:a1:b3:8d:48:04:56:9e:7d:2f:3b:42:e4:
         30:04:67:dc:ef:68:7e:4b:ff:24:7e:8b:79:e0:0e:57:cb:75:
         f0:12:59:b9:b5:d9:5a:d8:29:9f:9e:2f:3a:a2:42:4d:ee:0c:
         81:f0:7b:40:5f:ae:b6:13:2c:84:88:dc:ec:59:0c:03:dc:70:
         18:e4:50:8d:4a:dc:60:1f:13:c9:35:13:40:fb:53:b5:d3:a7:
         0b:09:85:93:c4:45:87:c9:6a:e8:74:a0:35:df:7c:2c:39:b4:
         99:a8:8a:d1:d1:da:8b:3a:5a:94:99:5a:90:d0:e1:eb:c2:0b:
         65:1b:4e:82:21:e6:4a:5e:91:8d:59:c7:b5:e6:44:78:58:ad:
         76:3d:f6:4f:4a:f4:a9:fc:cc:d3:76:99:b8:6b:39:42:20:48:
         79:20:7a:94:02:f5:8c:2c:0d:5e:65:79:30:2a:37:93:98:86:
         0e:69:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:22 2024 by rpki-client on console-ams.rpki-client.org