Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.cer (raw, json)
Hash identifier:          8e0U0Z+R85CgXd2J26J6FiHIOWZjOfkp3PYI7ibtoDM=
Subject key identifier:   83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2672
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:09:48 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329289
                          IP: 102.211.220.0/22
                          IP: 2c0f:f40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9842 (0x2672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:09:48 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:8d:73:70:16:3c:75:71:54:8e:30:92:25:
                    c9:d3:81:88:b2:bf:ae:14:1e:8b:bb:67:c8:5f:3f:
                    12:3b:ed:df:0b:de:93:93:35:65:c8:92:4a:6b:8b:
                    f5:a3:13:1b:54:b1:00:1a:2c:65:16:91:42:4e:37:
                    9c:ef:82:f6:ce:a5:ee:73:2f:ce:d2:3f:79:1a:85:
                    cd:98:05:1b:f4:7b:7c:bc:88:7a:c8:2d:84:50:68:
                    9a:66:01:54:7d:51:a6:82:0b:7b:a7:43:fc:21:09:
                    c9:ea:9e:df:c9:3c:bc:0a:cd:b9:d7:0e:a4:55:3b:
                    8d:8b:cb:08:e1:17:70:2f:8f:af:16:fa:e4:e5:ee:
                    4a:72:e3:12:71:84:00:9c:27:39:a6:4f:78:e1:0a:
                    3b:24:21:0f:05:0a:15:3d:32:fb:10:a8:5a:45:e6:
                    37:b7:56:d1:72:9c:41:a1:ec:82:ab:c8:b8:44:29:
                    77:9a:84:a7:a4:5b:76:3b:8a:f3:ab:bc:be:e0:69:
                    48:3f:09:ab:bd:1e:66:c0:01:cc:72:b1:44:e4:c6:
                    54:a8:da:b3:94:eb:6c:4e:37:a1:fc:54:b9:74:c7:
                    e1:5e:f8:d7:ad:2c:0f:b4:f0:3d:9a:d2:6a:cd:b0:
                    86:10:53:2c:98:31:db:03:9d:e9:05:a9:34:e3:6e:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329289

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.220.0/22
                IPv6:
                  2c0f:f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:46:65:f2:5c:f0:b6:3e:7f:11:0f:f2:bb:ea:a6:a6:ae:
         97:43:8b:62:04:af:69:7c:0d:04:ee:4b:84:a5:c9:bf:cb:49:
         d8:7b:1a:db:81:a0:91:bd:68:14:dd:9f:bb:a3:c5:76:ef:f5:
         b6:9d:4d:a3:c4:1f:52:cd:d6:a3:f2:16:fc:9a:83:7e:00:92:
         e0:25:db:c4:b0:69:04:7b:aa:dd:f9:d6:85:b4:5e:f0:82:67:
         c3:12:b3:fa:12:30:1c:18:fe:d3:3d:dc:67:95:8a:80:2f:f3:
         dc:7e:81:0f:12:52:a8:c4:64:2a:95:b7:d4:e2:49:df:99:2d:
         cf:34:76:c7:c2:2a:0f:4d:b9:97:b0:64:ac:36:99:a7:04:b9:
         53:e1:5b:86:f9:90:03:10:ee:57:f9:cd:bc:52:8e:40:d1:66:
         ea:9b:1e:b9:07:46:af:43:af:29:2f:2c:98:a8:d9:2d:a1:58:
         57:9d:b3:d9:72:d2:14:09:e4:83:a1:8b:9d:fc:8d:62:17:e9:
         62:d1:08:77:b4:dc:81:d8:56:ec:b1:fd:9f:4b:48:a3:d8:a4:
         3e:05:b4:95:82:6f:42:8a:96:5b:44:5c:72:1d:a4:51:a1:62:
         90:b6:ee:bb:bd:6d:a3:b9:b1:49:bb:a0:60:a9:e6:d5:73:46:
         7c:50:34:49
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICJnIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzA5NDhaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjkwRDAxQUYxMTAvBgNVBAUTKDgzRDFEMTU3NjA2NUUwNTAxRjJENzQ3
NDRENTE0NUQzNEQ2QTcyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSEI1zcBY8dXFUjjCSJcnTgYiyv64UHou7Z8hfPxI77d8L3pOTNWXIkkpri/Wj
ExtUsQAaLGUWkUJON5zvgvbOpe5zL87SP3kahc2YBRv0e3y8iHrILYRQaJpmAVR9
UaaCC3unQ/whCcnqnt/JPLwKzbnXDqRVO42LywjhF3Avj68W+uTl7kpy4xJxhACc
JzmmT3jhCjskIQ8FChU9MvsQqFpF5je3VtFynEGh7IKryLhEKXeahKekW3Y7ivOr
vL7gaUg/Cau9HmbAAcxysUTkxlSo2rOU62xON6H8VLl0x+Fe+NetLA+08D2a0mrN
sIYQUyyYMdsDnekFqTTjbnZTAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUg9HRV2Bl
4FAfLXR0TVFF001qcqowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5MEQwMS8xQzI4N0I4QzYzN0Ux
MUVFQjdCMDgxN0M0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTBEMDEvMUMyODdCOEM2MzdFMTFFRUI3QjA4MTdDNEFEOUU2RkMvZzlIUlYy
Qmw0RkFmTFhSMFRWRkYwMDFxY3FvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBkkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm09wwDQQCAAIwBwMF
ACwPD0AwDQYJKoZIhvcNAQELBQADggEBAJo6RmXyXPC2Pn8RD/K76qamrpdDi2IE
r2l8DQTuS4Slyb/LSdh7GtuBoJG9aBTdn7ujxXbv9badTaPEH1LN1qPyFvyag34A
kuAl28SwaQR7qt351oW0XvCCZ8MSs/oSMBwY/tM93GeVioAv89x+gQ8SUqjEZCqV
t9TiSd+ZLc80dsfCKg9NuZewZKw2macEuVPhW4b5kAMQ7lf5zbxSjkDRZuqbHrkH
Rq9DrykvLJio2S2hWFeds9ly0hQJ5IOhi538jWIX6WLRCHe03IHYVuyx/Z9LSKPY
pD4FtJWCb0KKlltEXHIdpFGhYpC27ru9baO5sUm7oGCp5tVzRnxQNEk=
-----END CERTIFICATE-----