Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.cer (raw, json)
Hash identifier:          iMXSIgzuShxBptFuxwvk8qYAcK3A8OUJ93dZr6I3n7E=
Subject key identifier:   A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2494
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:43:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329159
                          IP: 102.214.200.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 07:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9364 (0x2494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:43:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:01:11:b5:55:22:6f:77:03:58:ee:9b:2f:
                    9d:c2:77:97:b8:2e:e5:34:5a:fb:3b:75:44:a4:3f:
                    d3:93:9a:f9:49:9f:32:1a:f8:78:57:1c:4f:61:22:
                    6c:df:60:65:ab:9a:a2:d6:28:32:6e:25:5c:c7:25:
                    76:c2:59:f8:ae:ce:bf:78:cc:eb:6b:f7:46:57:2e:
                    ef:3e:6f:70:35:0b:e3:37:10:f6:65:84:cd:35:17:
                    b2:89:e7:e3:f6:23:f7:15:c9:7b:b6:2a:dd:c2:e1:
                    a9:72:fd:00:20:ca:e7:2f:48:25:05:8f:5e:ac:69:
                    c7:52:08:f0:56:be:97:a8:2c:4a:6a:29:7a:e6:27:
                    41:19:5c:73:4b:de:6c:fd:8c:75:69:ad:bf:77:77:
                    7e:13:e4:e4:9b:91:d5:ef:14:d6:6a:8a:48:ed:42:
                    30:96:27:99:93:88:0b:0c:8e:47:0c:70:49:5d:e1:
                    58:00:76:1f:6c:3e:21:5e:e3:9b:61:2b:35:bc:64:
                    e8:20:97:24:c0:2d:fe:87:c5:2d:bc:98:5f:10:a7:
                    00:85:dd:66:9e:61:10:81:ff:55:34:97:3c:c7:2d:
                    3b:d0:ef:60:3b:1a:2d:2a:fa:10:79:04:53:00:fe:
                    62:da:e0:b7:c4:8c:85:4a:3e:3d:61:db:bb:73:66:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329159

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:11:48:f3:6e:bd:c6:95:27:6c:b6:89:57:6a:f7:03:b7:
         6d:4d:92:46:e2:2a:aa:e0:07:83:71:aa:e3:96:47:9b:d6:71:
         f0:c6:5d:d3:f1:45:69:98:70:f2:97:f2:5b:c7:7b:c7:e3:af:
         30:c5:53:f8:52:48:1f:de:99:0d:c1:cd:50:b7:69:85:c3:a0:
         62:ad:62:05:70:cb:f6:9b:9d:d6:c7:02:07:e8:06:27:06:56:
         59:fa:82:9f:fb:57:fb:fb:23:b5:e8:b3:23:58:41:ea:11:3d:
         5e:7a:a4:72:43:8b:72:39:36:b5:5f:3b:47:8e:26:6c:96:03:
         e1:7a:d7:8c:4a:b6:6a:62:a2:43:47:58:d2:aa:7c:8f:f5:65:
         fe:2c:bc:e6:20:52:7b:2d:11:47:0b:b7:1c:47:27:0b:d6:1c:
         dc:6e:24:67:4a:3a:fc:8f:5a:f8:a6:9e:03:1f:17:d5:8d:5a:
         20:45:34:70:e1:d7:95:4e:03:6f:78:b9:c3:5d:55:39:60:db:
         3d:72:45:cf:e6:07:7e:5f:4a:f6:b2:ff:fa:21:f5:49:25:84:
         f6:5f:01:0f:ab:77:23:88:3f:2b:51:46:01:2e:61:57:2c:bd:
         51:2c:28:68:bc:98:64:98:e9:37:48:a0:5b:29:e5:ba:13:a5:
         4b:14:57:8a
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICJJQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMTQzMDdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQ4MTlDQUYxMTAvBgNVBAUTKEEyOTc0RTY3MzA0MzI0Mzg4Qzg4ODAy
RTcxN0Q2QjkyODFBNTI2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDV5AERtVUib3cDWO6bL53Cd5e4LuU0Wvs7dUSkP9OTmvlJnzIa+HhXHE9hImzf
YGWrmqLWKDJuJVzHJXbCWfiuzr94zOtr90ZXLu8+b3A1C+M3EPZlhM01F7KJ5+P2
I/cVyXu2Kt3C4aly/QAgyucvSCUFj16sacdSCPBWvpeoLEpqKXrmJ0EZXHNL3mz9
jHVprb93d34T5OSbkdXvFNZqikjtQjCWJ5mTiAsMjkcMcEld4VgAdh9sPiFe45th
KzW8ZOgglyTALf6HxS28mF8QpwCF3WaeYRCB/1U0lzzHLTvQ72A7Gi0q+hB5BFMA
/mLa4LfEjIVKPj1h27tzZhK3AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUopdOZzBD
JDiMiIAucX1rkoGlJjIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0ODE5Qy81MTVCMEYwNDRFMEQx
MUVEOEZBMjAwQTlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDgxOUMvNTE1QjBGMDQ0RTBEMTFFRDhGQTIwMEE5RjEyMjI0Njgvb3BkT1p6
QkRKRGlNaUlBdWNYMXJrb0dsSmpJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBccwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1sgwDQYJKoZIhvcN
AQELBQADggEBAB1qEUjzbr3GlSdstolXavcDt21NkkbiKqrgB4NxquOWR5vWcfDG
XdPxRWmYcPKX8lvHe8fjrzDFU/hSSB/emQ3BzVC3aYXDoGKtYgVwy/abndbHAgfo
BicGVln6gp/7V/v7I7XosyNYQeoRPV56pHJDi3I5NrVfO0eOJmyWA+F614xKtmpi
okNHWNKqfI/1Zf4svOYgUnstEUcLtxxHJwvWHNxuJGdKOvyPWvimngMfF9WNWiBF
NHDh15VOA294ucNdVTlg2z1yRc/mB35fSvay//oh9UklhPZfAQ+rdyOIPytRRgEu
YVcsvVEsKGi8mGSY6TdIoFsp5boTpUsUV4o=
-----END CERTIFICATE-----
Generated at Sat Apr 20 08:00:32 2024 by rpki-client on console-ams.rpki-client.org