Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
File:                     saGqcslle0DmFrw3PhPPk7Ip6z8.cer (raw, json)
Hash identifier:          wvaBKLj4yh2zE/kaZ/NkUFExwZWA0/AoH8nPJuv0W4c=
Subject key identifier:   B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       255A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328676
                          IP: 102.214.44.0/23
                          IP: 102.223.7.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Apr 2024 12:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9562 (0x255a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:30:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:56:d6:62:7c:0d:8c:71:c4:4b:2d:af:5e:
                    9b:7b:a3:ad:c3:a5:f1:1e:9a:ab:67:9d:5e:6e:2f:
                    e4:4e:0f:01:ab:34:fb:4a:e0:f9:04:2f:70:fc:eb:
                    36:55:f9:bb:af:25:7e:4f:4e:02:da:47:87:9b:c4:
                    a9:23:a7:69:9a:d9:d8:80:d4:44:12:ca:f2:31:9c:
                    46:46:f0:ec:a3:36:4e:49:54:5b:65:83:84:69:c7:
                    cb:f1:1c:1f:77:31:40:28:6a:8c:cf:b6:70:19:88:
                    d7:11:5e:0b:9d:f0:17:09:6a:30:f6:f8:b9:b6:f3:
                    cc:de:29:f7:43:5f:e1:5e:34:85:12:5e:d0:e6:62:
                    5d:cc:86:59:0f:81:7c:e4:ac:04:40:e6:c2:6a:15:
                    a6:ab:a5:bf:bc:21:c7:0a:f0:d7:02:1a:94:88:5b:
                    43:5d:37:cb:fb:a7:c6:ec:00:e5:64:27:67:fa:c7:
                    ab:32:f4:11:c5:85:98:b8:72:6e:f5:0d:7c:95:8c:
                    36:69:48:f5:b7:16:95:42:50:06:5c:4d:6c:e9:d6:
                    e7:aa:68:fc:f8:ee:ec:d1:74:ce:03:bf:14:ae:6f:
                    cc:19:26:17:80:46:e9:07:b2:ed:8f:37:0f:e0:22:
                    3c:27:ba:c0:b4:7c:c0:fe:0b:05:e8:50:f7:33:65:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328676

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.44.0/23
                  102.223.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:c0:e7:9d:e3:a2:8e:32:19:27:d4:c3:db:61:24:31:d6:
         d7:61:21:6a:15:e3:82:43:c1:e3:7c:32:fd:01:67:2b:c8:e2:
         1a:8c:8b:88:e9:c4:96:54:fb:fd:3d:47:44:23:62:b2:2d:c3:
         f5:ea:17:bd:81:b8:40:88:a3:c2:ac:4a:cb:fb:71:e4:a4:5a:
         13:b1:8e:0e:ac:b6:de:8b:96:08:d1:55:e3:0a:59:b4:e1:91:
         9a:7e:fb:03:37:dc:ed:44:3c:27:c8:8c:10:22:b6:4c:80:b7:
         87:32:87:62:23:d2:ce:03:90:e6:72:78:bd:ef:42:f0:c6:7c:
         0e:ec:d3:40:c2:b5:77:c9:9c:d2:26:c1:d3:56:91:5a:f5:86:
         3a:f8:da:e4:be:3f:b8:1c:14:ae:37:bd:2e:fc:35:1c:ba:be:
         b6:16:ca:6a:11:a8:99:99:bf:fd:96:1d:ab:9e:25:ef:b3:12:
         3e:89:0e:81:87:0f:c0:e8:39:60:49:d2:58:ab:3a:d2:ad:34:
         8f:46:0f:95:00:95:38:91:f4:93:8b:9c:9b:c9:cf:ee:5d:95:
         75:3f:dd:29:e0:96:8b:e7:a5:82:54:ab:5b:98:31:b5:1d:26:
         a8:09:34:2b:b5:6b:9a:fc:1f:a2:00:39:64:58:36:34:13:e6:
         cd:df:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:46 2024 by rpki-client on console-ams.rpki-client.org