Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
File:                     ll15l05AXZDHV_miXEMFvq3uoG0.cer (raw, json)
Hash identifier:          Lo2RtpdJOesPBxM7Da1ic+BNpQQSwgWaYMvFcOc0Z6c=
Subject key identifier:   96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2884
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:30:45 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329052
                          IP: 102.215.176.0/22
                          IP: 2c0f:1080::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10372 (0x2884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:30:45 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FB8C3AF/serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:21:1f:29:db:33:d2:84:72:0f:f4:e2:2e:
                    1e:97:9d:f7:a5:af:06:e5:25:4b:88:74:da:81:e2:
                    9c:67:1b:c2:1b:af:31:5d:10:68:ea:bc:b8:f9:35:
                    ae:a8:a2:ca:47:8c:95:82:d3:29:3a:7d:06:cb:89:
                    1e:ce:36:8a:bd:d6:d8:d3:09:b9:be:cb:e9:a8:18:
                    b7:8f:ae:c4:8f:b6:77:ca:4c:ee:c5:e6:16:93:21:
                    bf:5c:e5:b4:d8:e5:17:30:ba:e0:42:8c:5d:f8:14:
                    b8:b0:4a:1b:ba:c3:c8:10:6b:77:12:2f:6e:5b:be:
                    a7:37:9e:4f:4e:21:e6:47:06:0f:40:cf:dc:a5:22:
                    51:4b:df:4d:b1:11:c6:10:c0:40:1c:fa:10:00:07:
                    45:9b:3a:4c:2d:dc:fc:fc:47:26:c3:85:fb:c0:a0:
                    73:19:fe:35:90:a9:ec:89:41:40:78:1b:f3:70:13:
                    ce:e8:2d:3f:58:36:4e:a2:d3:6d:31:71:d0:79:6c:
                    ba:c2:e2:03:e9:49:e8:c1:af:99:e8:92:76:d7:48:
                    06:b9:2a:18:4f:02:4b:8b:e9:a8:ff:13:a3:b5:3b:
                    38:4f:ba:8b:f5:a1:a4:e6:b0:1c:09:87:6c:14:5c:
                    95:9a:00:e1:14:71:1b:63:3a:ba:ba:bd:e6:09:8c:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329052

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.176.0/22
                IPv6:
                  2c0f:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:e5:8f:97:fd:c2:67:e1:2c:1c:78:6d:b0:5b:1e:03:ea:
         1d:31:ce:2e:de:92:57:48:dc:be:a1:dc:35:67:1a:ee:66:81:
         fd:02:fb:b0:b6:79:4b:b0:3f:ac:a5:e4:ff:b6:a8:c6:be:7b:
         1e:bf:97:5d:78:8c:a8:d1:f8:f8:9c:43:74:a1:b4:fa:52:19:
         69:ac:46:93:28:20:de:22:1d:bc:cc:3f:af:4b:77:f9:40:49:
         47:dd:56:3e:fe:90:5a:22:5e:45:f7:80:1a:29:6f:42:45:18:
         9c:05:6b:99:ab:3b:9a:0b:92:1a:ab:47:26:fd:f0:e3:5d:df:
         39:65:a7:0c:d0:9e:b6:33:a5:92:b6:fb:3f:c9:5a:2d:42:d0:
         a5:cb:76:a5:1b:b7:ee:c3:a3:ef:39:7c:0e:ab:dc:40:17:26:
         71:ee:48:fe:f9:29:5a:08:82:4f:b5:64:fd:dd:49:65:9e:f5:
         df:6b:6c:20:54:b1:5f:99:8c:6c:fd:68:83:2e:38:9b:c5:23:
         cd:1e:9f:b0:ca:ea:6d:ab:55:f1:14:de:7a:72:b2:f1:3c:6b:
         00:ea:e0:4d:21:0f:4a:71:a4:25:fb:c5:73:79:e6:3d:68:cc:
         19:05:bf:f3:a0:fa:50:41:e5:9f:ca:42:09:69:72:ab:67:e8:
         e0:3b:e1:38
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICKIQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwNDMwNDVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZCOEMzQUYxMTAvBgNVBAUTKDk2NUQ3OTk3NEU0MDVEOTBDNzU3RjlB
MjVDNDMwNUJFQURFRUEwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGliEfKdsz0oRyD/TiLh6XnfelrwblJUuIdNqB4pxnG8IbrzFdEGjqvLj5Na6o
ospHjJWC0yk6fQbLiR7ONoq91tjTCbm+y+moGLePrsSPtnfKTO7F5haTIb9c5bTY
5RcwuuBCjF34FLiwShu6w8gQa3cSL25bvqc3nk9OIeZHBg9Az9ylIlFL302xEcYQ
wEAc+hAAB0WbOkwt3Pz8RybDhfvAoHMZ/jWQqeyJQUB4G/NwE87oLT9YNk6i020x
cdB5bLrC4gPpSejBr5noknbXSAa5KhhPAkuL6aj/E6O1OzhPuov1oaTmsBwJh2wU
XJWaAOEUcRtjOrq6veYJjPOvAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUll15l05A
XZDHV/miXEMFvq3uoG0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQjhDMy85ODAxQTVGMjMwMTMx
MUVEOTYxRTMyRkFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkI4QzMvOTgwMUE1RjIzMDEzMTFFRDk2MUUzMkZBRjEyMjI0NjgvbGwxNWww
NUFYWkRIVl9taVhFTUZ2cTN1b0cwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBVwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm17AwDQQCAAIwBwMF
ACwPEIAwDQYJKoZIhvcNAQELBQADggEBAEsD5Y+X/cJn4SwceG2wWx4D6h0xzi7e
kldI3L6h3DVnGu5mgf0C+7C2eUuwP6yl5P+2qMa+ex6/l114jKjR+PicQ3ShtPpS
GWmsRpMoIN4iHbzMP69Ld/lASUfdVj7+kFoiXkX3gBopb0JFGJwFa5mrO5oLkhqr
Ryb98ONd3zllpwzQnrYzpZK2+z/JWi1C0KXLdqUbt+7Do+85fA6r3EAXJnHuSP75
KVoIgk+1ZP3dSWWe9d9rbCBUsV+ZjGz9aIMuOJvFI80en7DK6m2rVfEU3npysvE8
awDq4E0hD0pxpCX7xXN55j1ozBkFv/Og+lBB5Z/KQglpcqtn6OA74Tg=
-----END CERTIFICATE-----