Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.cer (raw, json)
Hash identifier:          IlNWPJE979qmedqYZ4wov8LCUdRps+F5dqYKuPuArwg=
Subject key identifier:   82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2533
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:22:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328111
                          IP: 102.216.168.0/22
                          IP: 2c0f:eab0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 16:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9523 (0x2533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:22:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:70:20:82:52:2e:5f:03:bf:ef:ab:03:8a:
                    da:91:4c:c0:6b:2f:06:f6:41:f3:4b:08:76:dc:6f:
                    bf:d5:97:83:1e:d5:00:62:42:6f:6d:35:86:33:d3:
                    28:83:19:e7:c5:85:71:e6:e8:3c:25:f6:42:2a:f6:
                    98:2b:a8:10:5f:53:8c:96:82:56:ab:83:56:98:78:
                    47:bf:e1:ea:11:ad:fc:57:4e:65:b4:94:0e:e5:19:
                    08:43:00:8e:2d:d8:b8:99:b3:78:b4:4e:cd:ea:dc:
                    db:19:b2:4d:5d:b5:a3:8d:f8:07:72:60:01:d5:4e:
                    05:61:73:81:9c:3c:b9:87:b4:82:0e:9d:b1:f3:d9:
                    c7:c8:22:40:2c:90:44:e9:b2:dd:f1:44:5e:e3:c8:
                    30:2f:74:6d:b0:5e:0a:1a:6d:92:3f:f6:6e:14:56:
                    c7:5b:21:81:b7:a8:34:2e:41:9d:1b:74:4f:33:e9:
                    96:e5:65:5c:eb:cf:06:96:3c:fa:ea:d6:2b:24:58:
                    e4:bd:53:80:a2:98:e8:db:e4:63:09:2d:ae:69:d2:
                    2a:ad:0f:a2:9f:15:5f:33:30:31:dc:9c:ee:22:04:
                    a4:b3:ef:07:65:45:08:bf:ab:7b:36:ae:ed:82:93:
                    90:85:e4:0d:75:e9:c8:9e:0a:83:5a:32:ac:85:92:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328111

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.168.0/22
                IPv6:
                  2c0f:eab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:e3:d1:6b:55:07:db:d1:4f:d6:a5:fa:14:b7:32:e9:14:
         1c:a6:8f:e6:53:41:ba:92:f6:4c:fd:c6:5f:84:8a:71:cb:2b:
         44:98:fb:e4:b5:7d:15:0e:00:38:60:a0:44:c7:b5:b5:54:77:
         db:6b:cc:d1:c2:14:b2:32:d5:3f:1c:b5:50:c1:0e:d3:d3:ef:
         19:07:11:8b:d2:c4:40:df:a6:65:3c:5d:2f:6b:f5:b0:02:f9:
         b2:2b:66:b1:04:9a:32:23:54:d3:76:11:bd:6c:69:e2:67:2b:
         af:67:ab:c3:46:e7:20:15:cd:aa:e1:c6:dd:79:a5:6b:45:6d:
         57:4c:69:96:52:8d:cf:02:f1:70:f0:62:e8:23:63:87:63:4d:
         4f:2d:59:82:fe:30:84:d9:48:84:cc:5f:df:2a:8b:52:b0:d3:
         74:49:a2:9d:4c:92:23:bc:92:aa:51:fb:77:c9:42:d6:c4:37:
         c7:5f:6f:b6:02:18:a0:cb:d1:90:4e:b5:6a:be:9a:a2:ce:b7:
         08:cf:dd:b4:47:63:20:a1:d4:2b:4c:17:d7:01:1a:17:59:65:
         27:67:0c:78:22:6c:fd:7e:76:ac:94:cb:18:cb:d9:50:c9:9b:
         51:08:3b:45:68:35:75:b8:3b:83:e3:c5:48:8b:b3:94:be:35:
         4a:b4:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:30:58 2024 by rpki-client on console-fra.rpki-client.org