Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.cer (raw, json)
Hash identifier:          0ra9Eypcfk4HUuMPSr/Cz9DkzNVcHXC//f2ouXz9rZs=
Subject key identifier:   9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26FB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:30:59 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328170
                          IP: 102.22.80.0/22
                          IP: 102.67.136.0/21
                          IP: 102.211.28.0/22
                          IP: 102.221.36.0/22
                          IP: 2c0f:ed68::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9979 (0x26fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:30:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36A42DFAF/serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:96:2f:d4:8b:7b:c7:9d:47:b9:d4:c4:1a:
                    fc:63:d7:47:2e:e4:bb:ab:03:12:a3:ea:76:e4:2c:
                    08:d0:d4:69:64:f4:a5:71:26:24:d6:6f:2d:ff:2e:
                    53:d9:2b:ec:1d:f2:75:3b:6a:74:22:2a:4c:bf:a3:
                    3c:3c:7d:7e:13:28:47:32:aa:dc:34:a7:6d:70:60:
                    9b:66:fd:39:d8:a7:e8:50:dc:27:3d:99:8d:df:18:
                    b5:a3:0e:e1:09:12:7a:bd:9f:61:b2:82:8c:8c:3d:
                    1d:8e:c9:de:17:3a:ac:41:98:af:d3:f3:2b:5d:0e:
                    87:cc:3b:b8:11:84:46:cd:b5:57:a5:c9:cc:17:2e:
                    5b:d0:0b:26:18:d3:25:ba:6c:b8:71:a2:d4:60:a9:
                    db:fc:b9:eb:71:fd:d4:d7:6a:c8:d8:b0:56:8c:0e:
                    5f:62:ad:6c:22:6a:f8:2a:2d:e2:a5:01:21:68:f1:
                    8e:99:d1:7b:93:cd:a9:b6:f0:8a:d4:bf:9f:41:e3:
                    20:7d:4e:7c:45:ad:cf:88:dd:f9:13:e0:88:81:f1:
                    44:1e:56:3f:20:d0:00:29:3b:82:ed:84:f4:a7:16:
                    6e:43:97:40:4b:54:78:1b:b2:40:ed:82:32:ed:83:
                    ef:29:df:33:9b:da:29:ba:f7:d4:89:a4:88:32:0f:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328170

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.80.0/22
                  102.67.136.0/21
                  102.211.28.0/22
                  102.221.36.0/22
                IPv6:
                  2c0f:ed68::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:f6:c2:99:7d:c2:c9:d2:7b:d1:34:ae:92:66:20:42:25:
         80:14:96:6f:e7:a7:12:56:ed:11:06:90:fb:40:59:6d:54:79:
         ca:54:25:61:f6:52:c1:a8:b0:88:69:a2:93:9c:41:91:f6:77:
         66:42:e0:0b:1d:80:20:c5:56:7d:a7:97:33:2b:16:6f:8e:74:
         ea:48:83:7c:18:48:e4:aa:55:92:4d:f9:3c:97:64:a4:0b:32:
         4f:47:05:c9:7e:93:94:b2:96:d5:03:b0:c1:c9:25:9c:c7:a0:
         7f:1f:5b:ff:2a:cb:31:7c:72:d0:5a:8a:fe:e0:9b:c1:7c:35:
         93:f5:f7:6e:5e:c8:90:75:0c:3b:83:31:78:d2:23:a5:bc:b6:
         ee:02:38:7b:e7:b4:38:a6:57:bc:f5:2e:77:2b:67:ab:ab:7f:
         7b:14:f2:bd:31:56:ac:79:76:2c:94:46:9b:ee:87:01:55:71:
         a9:0a:42:0e:78:0a:db:fe:fa:73:c6:09:06:ad:fb:26:0f:51:
         9f:63:ce:c7:f0:c8:41:f9:93:f6:7d:dc:ef:4e:1e:d2:2c:40:
         b6:62:50:e6:87:9d:47:f3:5d:ea:74:fb:45:ff:c1:f8:c2:53:
         5c:e5:6c:65:c6:42:86:d7:8d:d8:7f:81:d8:93:cf:17:db:84:
         a6:f7:b4:e6
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgICJvswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMzMwNTlaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE0MkRGQUYxMTAvBgNVBAUTKDlCNTY2OEJDMTMyMTExMzFERjBFRDNF
RTlDMjVEMzExNEM1NEIyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCy15Yv1It7x51HudTEGvxj10cu5LurAxKj6nbkLAjQ1Glk9KVxJiTWby3/LlPZ
K+wd8nU7anQiKky/ozw8fX4TKEcyqtw0p21wYJtm/TnYp+hQ3Cc9mY3fGLWjDuEJ
Enq9n2GygoyMPR2Oyd4XOqxBmK/T8ytdDofMO7gRhEbNtVelycwXLlvQCyYY0yW6
bLhxotRgqdv8uetx/dTXasjYsFaMDl9irWwiavgqLeKlASFo8Y6Z0XuTzam28IrU
v59B4yB9TnxFrc+I3fkT4IiB8UQeVj8g0AApO4LthPSnFm5Dl0BLVHgbskDtgjLt
g+8p3zOb2im699SJpIgyD40PAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUm1ZovBMh
ETHfDtPunCXTEUxUspMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNDJERi85RUYzREI4MjRENjMx
MUVFQTM2MzU4ODE0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTQyREYvOUVGM0RCODI0RDYzMTFFRUEzNjM1ODgxNEFEOUU2RkMvbTFab3ZC
TWhFVEhmRHRQdW5DWFRFVXhVc3BNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAeowQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJmFlADBANmQ4gDBAJm
0xwDBAJm3SQwDQQCAAIwBwMFACwP7WgwDQYJKoZIhvcNAQELBQADggEBAB1k9sKZ
fcLJ0nvRNK6SZiBCJYAUlm/npxJW7REGkPtAWW1UecpUJWH2UsGosIhpopOcQZH2
d2ZC4AsdgCDFVn2nlzMrFm+OdOpIg3wYSOSqVZJN+TyXZKQLMk9HBcl+k5SyltUD
sMHJJZzHoH8fW/8qyzF8ctBaiv7gm8F8NZP1925eyJB1DDuDMXjSI6W8tu4COHvn
tDimV7z1LncrZ6urf3sU8r0xVqx5diyURpvuhwFVcakKQg54Ctv++nPGCQat+yYP
UZ9jzsfwyEH5k/Z93O9OHtIsQLZiUOaHnUfzXep0+0X/wfjCU1zlbGXGQobXjdh/
gdiTzxfbhKb3tOY=
-----END CERTIFICATE-----
Generated at Tue May 7 01:57:27 2024 by rpki-client on console-fra.rpki-client.org