Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/huglnkPq8W75kYMuF3CJk-ot1X4.cer
File:                     huglnkPq8W75kYMuF3CJk-ot1X4.cer (raw, json)
Hash identifier:          9guI26hGIdE1c0N/jhCqwh14o+llIVd0QguQx6GCUG4=
Subject key identifier:   86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26E5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:27:16 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327861
                          IP: 102.141.236.0/22
                          IP: 196.13.208.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9957 (0x26e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:27:16 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A18AFAF/serialNumber=86E8259E43EAF16EF991832E17708993EA2DD57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:3d:46:36:b3:3c:2c:ac:ae:43:0a:32:06:
                    75:76:02:da:f8:05:93:eb:9e:5a:3a:03:05:a8:fa:
                    ec:74:39:23:c2:76:59:6e:f6:85:43:1f:ad:79:4e:
                    ac:87:f1:de:6e:9d:bd:68:6f:36:d6:01:bc:87:1b:
                    ba:7c:ae:ad:9d:6c:59:14:50:70:8f:1c:c3:1c:91:
                    c2:46:d6:04:b6:cc:36:22:af:8c:04:37:f5:bb:32:
                    8c:f6:d4:ee:5e:f9:0a:d5:43:59:b7:ea:e7:9d:ff:
                    f1:f0:11:2f:65:aa:1a:0a:9d:fb:7a:b6:1f:7d:25:
                    f0:3c:3c:7a:ac:c5:33:8b:55:8e:55:0a:49:7a:26:
                    14:f2:76:e9:94:40:57:46:2c:4e:f0:fc:04:12:d4:
                    1f:a8:76:92:63:d2:9e:9e:f6:69:81:b2:62:88:2e:
                    c9:af:66:13:76:a0:3e:80:ee:39:a1:91:cd:ce:a8:
                    35:0f:a7:f9:a9:df:1c:8f:4b:04:de:06:94:f3:96:
                    d3:bd:99:b6:a0:e2:27:76:ac:10:d0:c1:65:73:05:
                    7f:ce:90:a6:42:17:e9:47:ab:fa:2a:79:39:d5:53:
                    9a:8d:29:fe:f8:6a:87:cc:ad:92:eb:ce:47:48:93:
                    41:0c:45:77:64:97:53:98:bd:d5:ca:11:83:61:50:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327861

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.236.0/22
                  196.13.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:4f:8d:3a:6b:e2:20:a0:06:46:6e:54:d9:88:b4:c4:de:
         75:9e:02:ca:eb:25:86:42:a2:b7:b6:8c:00:27:2e:41:3b:03:
         6d:ef:e8:58:69:50:f8:48:b0:c0:09:57:f8:f8:2f:1c:05:b6:
         f0:2a:8d:d3:22:a0:92:3b:91:d0:7d:8c:1b:46:8d:76:fc:db:
         7d:fa:87:5a:31:e0:e4:ea:5e:47:e0:c6:25:f8:97:8e:1a:be:
         43:c7:da:6c:78:8a:7b:a3:51:f6:7a:b8:d6:60:7c:02:9b:cf:
         b1:78:6d:a9:27:c0:21:66:a2:b2:b9:32:4a:2a:80:cc:98:a8:
         53:64:ff:db:4f:12:6b:74:6a:9b:b0:6b:0d:02:63:74:f3:b1:
         95:1f:70:32:ef:82:ac:85:1f:e4:bc:a7:cf:b6:1a:6e:46:6e:
         73:6f:28:ae:ec:8c:f7:7b:9c:eb:7e:14:93:e9:a2:64:47:04:
         9c:06:56:6d:75:5e:28:17:b3:c8:47:ae:69:eb:67:7e:3d:bd:
         ae:38:ad:6d:7a:de:84:92:da:4d:d2:ac:42:d8:19:9e:12:77:
         b1:7d:86:e0:ef:ba:da:c3:e9:2d:6b:e6:3f:93:f0:a8:85:35:
         f9:f2:0e:a7:fb:ce:22:61:fa:8a:91:73:d4:c1:e5:49:53:c9:
         f5:0c:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org