Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.cer (raw, json)
Hash identifier:          bfrN4g7YPvR8aVeYL3ZUmF25ER9wz/c/h6Dy73bjVsw=
Subject key identifier:   84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26FD
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:31:18 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37638
                          IP: 41.190.232.0/22
                          IP: 102.213.196.0/22
                          IP: 102.222.228.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9981 (0x26fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:31:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:f0:b4:67:1d:e1:91:c3:c4:e2:b5:b4:52:
                    05:62:73:59:c5:7a:d5:9d:2e:62:da:0f:84:cb:95:
                    79:13:f2:d0:cd:2b:03:8e:16:78:03:b1:03:f7:f6:
                    d6:1a:7a:ab:a3:20:89:82:b4:64:3b:bb:4c:be:c8:
                    ab:80:fb:1b:54:a4:88:e6:44:d5:b2:4a:a2:16:20:
                    d7:59:85:66:a1:f8:54:1c:74:20:ec:1e:60:9c:4c:
                    d6:fc:25:79:30:ab:c9:fe:19:76:1a:87:1a:7d:08:
                    b2:a3:07:f8:1c:47:64:ff:4d:e4:86:a1:4e:e6:6d:
                    12:44:3f:6e:91:4b:6b:60:ae:eb:d3:d2:e1:ed:02:
                    c3:bd:49:75:cf:44:ad:20:39:cd:c5:bc:60:dd:73:
                    11:4c:84:87:ea:55:c8:77:84:b8:da:74:c9:6f:54:
                    3d:8e:54:2f:84:ba:ce:1f:17:f2:0e:7b:46:38:52:
                    13:f0:16:dd:5b:3c:db:69:af:10:9c:11:79:9b:d9:
                    13:ba:77:72:87:a0:44:19:11:72:95:cc:42:b5:54:
                    40:0a:ef:39:3b:ee:fb:88:ee:c5:13:0a:6e:6c:87:
                    3f:c5:98:ff:e1:b2:5b:c7:b2:8d:b7:f8:52:76:89:
                    ab:f6:df:b4:0e:fb:c5:b0:26:fc:e0:e3:83:5a:9e:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37638

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.190.232.0/22
                  102.213.196.0/22
                  102.222.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:59:00:d8:f5:43:70:a4:6a:1a:28:2a:12:c4:a6:ef:ea:
         26:90:f5:af:28:9d:bc:2d:5c:13:e6:cc:f7:28:2a:6b:cb:aa:
         98:66:37:4d:29:91:e9:38:85:67:d2:ba:e8:86:57:bf:27:90:
         a0:b5:05:5e:4b:e6:cb:27:be:94:cb:db:a5:fe:02:61:5e:ce:
         a1:6c:ac:bf:a8:1f:cd:3f:22:6c:29:67:d5:93:ad:c5:06:2c:
         e7:07:d2:50:bc:84:09:51:58:c9:7c:64:bf:d4:ad:98:1d:d0:
         47:01:d1:35:c2:fe:f4:59:c4:2c:31:5b:41:09:7a:5b:b8:63:
         52:a3:88:35:d0:29:a5:d9:4a:d2:c7:8e:3c:b7:19:64:7a:88:
         4c:ef:d5:fc:eb:f2:6d:e6:1c:a9:84:50:26:3f:65:ae:b1:a2:
         53:cd:c3:2c:a1:5e:9f:f8:80:c9:59:dc:ee:c9:5d:22:c6:83:
         ba:1f:d6:04:12:6f:e7:cc:71:49:43:22:98:e8:a0:71:8a:47:
         07:26:0a:33:20:07:e7:1e:05:8d:0b:f5:c4:7e:e0:b2:aa:29:
         fd:d4:46:02:4a:9e:5e:66:ef:2a:7d:03:33:5e:6b:95:8b:8c:
         45:b7:9b:16:6d:bf:f6:56:bb:a9:1d:0b:4d:2f:3e:9a:3e:8a:
         4b:fe:56:87
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgICJv0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzMxMThaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE0NDU5QUYxMTAvBgNVBAUTKDg0QkMyMkExNEJCNUY4ODlCQzEwQTIy
Q0YxN0M5QzE5QjUxOUIyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVhvC0Zx3hkcPE4rW0UgVic1nFetWdLmLaD4TLlXkT8tDNKwOOFngDsQP39tYa
equjIImCtGQ7u0y+yKuA+xtUpIjmRNWySqIWINdZhWah+FQcdCDsHmCcTNb8JXkw
q8n+GXYahxp9CLKjB/gcR2T/TeSGoU7mbRJEP26RS2tgruvT0uHtAsO9SXXPRK0g
Oc3FvGDdcxFMhIfqVch3hLjadMlvVD2OVC+Eus4fF/IOe0Y4UhPwFt1bPNtprxCc
EXmb2RO6d3KHoEQZEXKVzEK1VEAK7zk77vuI7sUTCm5shz/FmP/hslvHso23+FJ2
iav237QO+8WwJvzg44NanjEzAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUhLwioUu1
+Im8EKIs8XycGbUZsogwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNDQ1OS9DREQ3NEQ3NjJEMUIx
MUVEQkUwMDg4OEJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEyMjI0NjgvaEx3aW9V
dTEtSW04RUtJczhYeWNHYlVac29nLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkwYwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAIpvugDBAJm1cQDBAJm
3uQwDQYJKoZIhvcNAQELBQADggEBAE0NWQDY9UNwpGoaKCoSxKbv6iaQ9a8onbwt
XBPmzPcoKmvLqphmN00pkek4hWfSuuiGV78nkKC1BV5L5ssnvpTL26X+AmFezqFs
rL+oH80/ImwpZ9WTrcUGLOcH0lC8hAlRWMl8ZL/UrZgd0EcB0TXC/vRZxCwxW0EJ
elu4Y1KjiDXQKaXZStLHjjy3GWR6iEzv1fzr8m3mHKmEUCY/Za6xolPNwyyhXp/4
gMlZ3O7JXSLGg7of1gQSb+fMcUlDIpjooHGKRwcmCjMgB+ceBY0L9cR+4LKqKf3U
RgJKnl5m7yp9AzNea5WLjEW3mxZtv/ZWu6kdC00vPpo+ikv+Voc=
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:07 2024 by rpki-client on console-ams.rpki-client.org