Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.cer (raw, json)
Hash identifier:          DGXG/FQ8kor2mqjCJ81iHlM2Mf18djfgHnu+eV1TZaI=
Subject key identifier:   82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2F49
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 02:20:39 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328111
                          IP: 102.216.168.0/22
                          IP: 2c0f:eab0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Apr 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12105 (0x2f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 02:20:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F365E03DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:70:20:82:52:2e:5f:03:bf:ef:ab:03:8a:
                    da:91:4c:c0:6b:2f:06:f6:41:f3:4b:08:76:dc:6f:
                    bf:d5:97:83:1e:d5:00:62:42:6f:6d:35:86:33:d3:
                    28:83:19:e7:c5:85:71:e6:e8:3c:25:f6:42:2a:f6:
                    98:2b:a8:10:5f:53:8c:96:82:56:ab:83:56:98:78:
                    47:bf:e1:ea:11:ad:fc:57:4e:65:b4:94:0e:e5:19:
                    08:43:00:8e:2d:d8:b8:99:b3:78:b4:4e:cd:ea:dc:
                    db:19:b2:4d:5d:b5:a3:8d:f8:07:72:60:01:d5:4e:
                    05:61:73:81:9c:3c:b9:87:b4:82:0e:9d:b1:f3:d9:
                    c7:c8:22:40:2c:90:44:e9:b2:dd:f1:44:5e:e3:c8:
                    30:2f:74:6d:b0:5e:0a:1a:6d:92:3f:f6:6e:14:56:
                    c7:5b:21:81:b7:a8:34:2e:41:9d:1b:74:4f:33:e9:
                    96:e5:65:5c:eb:cf:06:96:3c:fa:ea:d6:2b:24:58:
                    e4:bd:53:80:a2:98:e8:db:e4:63:09:2d:ae:69:d2:
                    2a:ad:0f:a2:9f:15:5f:33:30:31:dc:9c:ee:22:04:
                    a4:b3:ef:07:65:45:08:bf:ab:7b:36:ae:ed:82:93:
                    90:85:e4:0d:75:e9:c8:9e:0a:83:5a:32:ac:85:92:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328111

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.168.0/22
                IPv6:
                  2c0f:eab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:d1:e9:1c:41:5e:ed:34:41:b1:71:ca:c1:05:a7:9e:bc:60:
         7c:d0:ea:6d:0b:da:9c:97:89:d9:c0:09:d3:98:a0:68:04:37:
         2e:41:26:5e:8e:6a:fc:9a:5d:22:97:ea:76:ef:09:05:f4:29:
         86:61:96:c2:43:9e:2e:67:5b:84:48:2b:34:98:19:36:2a:e4:
         8d:7c:d5:a1:ad:e8:8d:9c:6d:30:82:36:a3:57:ae:5a:59:f3:
         ce:3a:f0:a8:30:bf:7b:1d:c9:6b:74:74:40:22:1f:94:6b:d6:
         e4:8b:29:26:36:77:09:73:cb:28:eb:2b:9a:f5:c9:0e:83:4e:
         17:84:0b:02:3a:c0:c3:58:6f:5f:fa:e9:a0:50:1a:f2:36:45:
         35:28:e3:f6:17:5c:5a:9d:fd:46:fb:4c:9f:e9:c3:08:f9:35:
         42:1c:6c:70:3b:bf:ac:29:f8:5f:59:85:ff:d5:27:a1:6a:3d:
         f6:6f:c5:99:8b:2e:97:56:ab:1e:cd:c2:75:58:5f:53:23:cc:
         e2:af:eb:7a:f4:18:be:e6:f2:7e:3a:30:37:85:0c:48:f2:a6:
         b2:3f:86:b4:5d:92:ba:bc:13:1a:93:f1:92:bf:58:69:d8:9f:
         49:c9:98:7e:4c:ec:9d:35:b7:cb:62:6d:b5:d8:4e:45:e3:24:
         e9:fb:24:bd
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICL0kwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjIwMzlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjVFMDNEQUYxMTAvBgNVBAUTKDgyNTFCNjVGQ0ZGNEQ3NjcyQzk4NzU5
MEU3QzBDQjY0OUQ0NEMyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEw3AgglIuXwO/76sDitqRTMBrLwb2QfNLCHbcb7/Vl4Me1QBiQm9tNYYz0yiD
GefFhXHm6Dwl9kIq9pgrqBBfU4yWglarg1aYeEe/4eoRrfxXTmW0lA7lGQhDAI4t
2LiZs3i0Ts3q3NsZsk1dtaON+AdyYAHVTgVhc4GcPLmHtIIOnbHz2cfIIkAskETp
st3xRF7jyDAvdG2wXgoabZI/9m4UVsdbIYG3qDQuQZ0bdE8z6ZblZVzrzwaWPPrq
1iskWOS9U4CimOjb5GMJLa5p0iqtD6KfFV8zMDHcnO4iBKSz7wdlRQi/q3s2ru2C
k5CF5A116cieCoNaMqyFkgvXAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUglG2X8/0
12csmHWQ58DLZJ1EwhIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1RTAzRC81RjBDRkMxODI4OTAx
MUVEODg2RDREOTRGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUUwM0QvNUYwQ0ZDMTgyODkwMTFFRDg4NkQ0RDk0RjEyMjI0NjgvZ2xHMlg4
XzAxMmNzbUhXUTU4RExaSjFFd2hJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAa8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2KgwDQQCAAIwBwMF
ACwP6rAwDQYJKoZIhvcNAQELBQADggEBALvR6RxBXu00QbFxysEFp568YHzQ6m0L
2pyXidnACdOYoGgENy5BJl6OavyaXSKX6nbvCQX0KYZhlsJDni5nW4RIKzSYGTYq
5I181aGt6I2cbTCCNqNXrlpZ88468Kgwv3sdyWt0dEAiH5Rr1uSLKSY2dwlzyyjr
K5r1yQ6DTheECwI6wMNYb1/66aBQGvI2RTUo4/YXXFqd/Ub7TJ/pwwj5NUIcbHA7
v6wp+F9Zhf/VJ6FqPfZvxZmLLpdWqx7NwnVYX1MjzOKv63r0GL7m8n46MDeFDEjy
prI/hrRdkrq8ExqT8ZK/WGnYn0nJmH5M7J01t8tibbXYTkXjJOn7JL0=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:28 2025 by rpki-client