Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
File:                     j0bclvxCB36wfkfE1NrsuUVbSAI.cer (raw, json)
Hash identifier:          90Acy37RuTyrTbu0EMCqCE/FSDUXvsQPWyE7f1GSsj0=
Subject key identifier:   8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       27DC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:05:11 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328351
                          IP: 102.140.112.0/21
                          IP: 102.210.64.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10204 (0x27dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:05:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36D4BDDAF/serialNumber=8F46DC96FC42077EB07E47C4D4DAECB9455B4802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:da:b8:ca:ba:a2:da:7d:72:be:45:8e:79:
                    de:f4:05:d9:ac:bd:36:9d:b6:b4:d7:41:fe:45:3a:
                    f5:9d:c3:a1:98:6f:18:8a:f1:aa:37:3c:21:21:3c:
                    c8:5c:06:cc:ca:e4:a5:6d:86:14:69:2d:61:36:60:
                    7b:2f:6f:48:7d:e6:26:df:9b:f9:24:39:fe:ff:db:
                    ab:69:86:f9:04:c7:21:5b:73:38:39:dc:56:a1:d5:
                    cc:ac:a1:72:ac:e7:f3:3b:0e:a0:d8:55:22:8c:25:
                    8c:21:ef:c2:3a:95:fb:e6:e5:a9:a3:72:b4:75:7d:
                    d3:fd:d5:a2:71:10:3e:63:37:4d:35:e0:73:5a:3b:
                    03:12:1a:f2:38:de:2a:bf:93:cf:3d:6c:bc:e2:10:
                    33:4b:f6:6f:0b:95:ed:31:15:fb:f7:ae:61:74:4f:
                    b1:f6:bc:60:4d:42:09:61:fc:9e:df:ee:2f:23:5b:
                    ee:a9:05:f0:27:6f:56:39:41:ab:f0:6c:9b:f1:c3:
                    da:5b:89:3b:e9:29:43:38:dd:a2:64:b4:72:0b:d1:
                    1b:ec:29:6f:94:a8:20:ed:e9:2e:4f:e6:44:22:03:
                    8c:98:5f:e9:08:ed:96:4b:f0:f2:b0:1c:d5:07:ce:
                    29:80:f2:a2:c9:17:f0:b8:e9:81:20:81:f5:ee:98:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328351

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.112.0/21
                  102.210.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:e8:3a:ac:dd:00:ea:10:70:3d:74:19:5e:e4:da:af:3b:
         8c:51:2c:3b:53:f8:ab:0e:7d:61:bc:9d:e9:9c:fd:0c:71:13:
         85:b5:bd:ca:5d:18:db:0a:20:fc:b6:9e:73:41:8b:e3:40:38:
         2f:6f:68:c9:2f:86:81:5c:19:ed:11:28:f8:88:44:be:2f:12:
         62:ed:c3:47:82:24:79:22:d3:33:99:d5:07:4e:43:b0:3d:d1:
         d1:78:58:c1:27:81:e4:90:d3:f8:ac:1a:be:59:08:23:47:7a:
         30:d3:28:81:8a:f4:c4:df:e4:72:b5:a9:98:5c:0c:55:2c:a0:
         df:51:95:c0:70:49:7f:98:ee:98:b3:49:65:a6:ed:4c:a4:ac:
         ad:15:b6:75:a6:14:cf:ca:9e:31:48:2a:13:bd:6c:93:65:2c:
         e7:f9:bf:59:97:a3:9f:5a:a7:b9:16:4a:a4:c2:04:40:53:1c:
         85:7e:3b:b8:d8:b9:ef:c4:54:5d:36:f7:ab:35:02:b3:74:ba:
         f8:ce:59:d0:eb:30:04:c1:05:18:2a:f7:1c:08:08:65:75:1d:
         4c:50:c6:01:bf:fd:83:fc:38:d2:f0:de:50:b8:57:c6:d3:3d:
         0c:6b:70:a4:a3:6b:da:d4:e8:9a:64:db:da:3d:0f:1f:cc:bc:
         92:1e:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:42 2024 by rpki-client on console-ams.rpki-client.org