Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m2alk7NXauyLeoxnrfp6kgsUOag.cer
File:                     m2alk7NXauyLeoxnrfp6kgsUOag.cer (raw, json)
Hash identifier:          7DE/gfLVfCdqTa2vjdisfIdKABHhKcdsbmxeds5guyc=
Subject key identifier:   9B:66:A5:93:B3:57:6A:EC:8B:7A:8C:67:AD:FA:7A:92:0B:14:39:A8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       28BE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/m2alk7NXauyLeoxnrfp6kgsUOag.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:40:01 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328427
                          IP: 102.68.136.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10430 (0x28be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:40:01 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FE1EAAF/serialNumber=9B66A593B3576AEC8B7A8C67ADFA7A920B1439A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:1c:18:4e:1d:b5:61:21:8b:cc:c7:a4:df:
                    87:44:ae:09:4e:65:6c:8e:cb:76:d5:c8:9c:08:94:
                    49:e6:45:04:68:aa:96:38:30:ca:3a:db:ce:35:be:
                    9b:45:1e:73:69:b3:5b:1b:c7:9e:08:3b:8d:ff:85:
                    2c:4b:f3:2d:5f:b7:96:41:8d:da:9a:48:a6:9f:3e:
                    8b:11:51:ec:27:55:99:f5:fe:1a:56:ba:26:b7:39:
                    a9:ff:79:73:bc:0b:40:a9:c4:9f:73:90:df:10:9a:
                    61:61:21:2f:bd:a5:9a:14:51:ef:bd:53:5d:1f:d5:
                    c7:7e:07:83:22:c4:5e:c4:9b:c4:67:9a:57:ee:a7:
                    70:6f:52:50:92:09:36:0a:02:13:94:6f:4e:0d:8a:
                    59:20:da:1e:e0:b5:3e:af:f4:82:7e:6f:ef:b4:74:
                    32:03:5d:ad:15:0e:02:87:7b:a9:60:d1:e4:57:f2:
                    e1:62:c4:1c:cc:e6:80:c8:c3:3d:ec:ae:5c:16:28:
                    96:f9:e6:1c:56:4e:9b:c4:69:d2:84:cc:c0:da:1a:
                    3c:c2:80:11:e7:af:6f:8c:94:6a:89:ea:74:cc:11:
                    4c:af:06:79:ed:de:81:b2:12:6b:c9:53:39:5c:5a:
                    56:be:b1:68:62:eb:d7:2b:f9:76:c3:5d:36:a7:91:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:A5:93:B3:57:6A:EC:8B:7A:8C:67:AD:FA:7A:92:0B:14:39:A8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/m2alk7NXauyLeoxnrfp6kgsUOag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328427

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:60:a3:15:f9:06:4d:aa:55:25:ad:12:3b:4b:b0:24:b6:71:
         0e:8b:da:ad:70:7c:b4:9b:1a:53:3a:18:3c:c7:c8:57:5e:3d:
         ba:35:9f:70:a8:8c:95:66:91:72:37:2c:8d:fc:d8:75:01:b8:
         b4:2b:78:ce:f6:a4:ee:61:a4:3c:e3:c4:bf:97:2e:ba:b4:a7:
         18:4e:1c:29:56:a4:3f:8c:88:6b:11:6d:e8:7c:65:76:2c:9d:
         a3:c8:8b:f3:00:31:60:04:9e:3c:5c:03:6e:6d:c4:e0:e4:74:
         a1:81:fd:a4:9a:3b:48:23:08:45:bc:ac:23:1b:03:52:1c:bb:
         0a:9c:f7:0e:3c:e8:79:60:00:62:21:85:33:9b:12:07:29:25:
         e1:4e:30:2c:28:d4:b0:53:b9:b9:61:0b:55:ff:b3:5f:89:e1:
         cb:5b:c9:bd:87:0a:52:74:ce:03:e5:00:43:91:24:b6:99:11:
         b5:d7:8f:8a:6b:37:37:46:f0:46:03:62:63:31:0d:d4:09:1d:
         69:63:64:d9:e1:e1:30:3b:c5:c5:db:86:86:08:c6:f5:aa:05:
         ef:a3:03:b2:07:cc:20:dd:35:52:2c:35:85:7f:df:d8:19:5a:
         e1:e5:3c:96:83:f3:75:af:dd:49:66:f7:23:89:f2:b4:98:b7:
         d4:4b:8e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:56 2024 by rpki-client on console-ams.rpki-client.org