Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
File:                     t96wG6y7S1p-nHgv_5n9jl3AbLI.cer (raw, json)
Hash identifier:          Sn3VJ57W/9a7TiJdrcLChB5PSXPr8iPwO/Z77yodcvI=
Subject key identifier:   B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2C49
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 09:32:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328475
                          IP: 102.69.224.0/21
                          IP: 102.207.68.0/22
                          IP: 102.211.136.0/22
                          IP: 102.215.4.0/22
                          IP: 102.217.128.0/22
                          IP: 102.218.232.0/22
                          IP: 102.220.36.0/22
                          IP: 2c0f:e818::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11337 (0x2c49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 18 09:32:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:30:04:c0:f5:c1:e5:1f:58:8c:75:c6:6e:
                    27:ec:c5:54:f5:4f:d9:83:54:79:3b:a5:8b:62:98:
                    5a:24:7b:10:0a:7b:35:80:97:ca:ab:07:8f:31:c3:
                    f9:42:a8:95:44:0a:f2:41:c1:fb:81:10:fa:b1:a9:
                    0c:f8:ea:3e:79:fb:eb:a1:be:15:c0:9d:70:b6:df:
                    d2:7d:d8:68:9b:9e:f9:5a:c6:e0:10:d6:c7:35:de:
                    da:96:db:c3:be:76:40:4c:fd:8a:cd:2e:6e:b0:a4:
                    63:03:55:f2:30:71:ed:ef:27:8e:bb:33:b6:73:4f:
                    e2:1b:1a:e0:74:f6:84:9b:f9:81:14:20:30:e3:aa:
                    06:f9:46:e6:35:09:74:34:18:0c:66:2d:9f:da:90:
                    96:d0:95:af:ed:60:ac:e5:a6:ce:14:c0:c3:2a:f1:
                    3b:0e:cf:3d:69:e6:49:c6:25:a6:80:ae:d7:ac:08:
                    28:03:fe:04:55:b5:4c:f7:90:86:e0:83:25:69:97:
                    38:53:9d:1a:46:0e:0c:5f:71:d0:bc:2d:37:2d:74:
                    8c:9f:bd:00:90:d5:e7:38:82:60:0c:49:31:d3:6e:
                    df:7e:8f:22:8b:b3:81:3c:4b:79:75:5c:01:9c:76:
                    3d:5a:e4:62:c4:b5:ec:df:17:b0:b0:ca:e8:64:9a:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328475

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.224.0/21
                  102.207.68.0/22
                  102.211.136.0/22
                  102.215.4.0/22
                  102.217.128.0/22
                  102.218.232.0/22
                  102.220.36.0/22
                IPv6:
                  2c0f:e818::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:85:04:8b:96:6b:da:b9:54:cb:85:b4:e2:bc:4b:84:d8:09:
         ed:cb:f6:fd:27:2b:4b:6e:a4:07:ac:5b:6f:be:fe:6c:8a:d7:
         cd:8f:92:25:01:e5:e3:c3:7a:e2:88:1f:79:e2:da:29:e3:59:
         0b:f6:8a:80:9a:1c:9f:f0:b1:ff:a7:3e:d7:da:41:15:b2:3f:
         62:18:34:4c:f8:71:bb:90:0d:b2:35:ac:1a:f2:4f:8d:33:69:
         bc:04:60:d5:0e:c1:bd:46:b1:25:96:90:ba:7c:46:03:9e:a0:
         b4:79:3b:f7:56:72:be:b8:d6:34:8e:48:f3:56:61:9a:6f:eb:
         cb:af:d5:98:8e:eb:14:07:18:7a:2c:79:77:bd:da:4d:70:2c:
         5e:4f:82:f9:9e:00:d2:c5:ee:78:46:c0:45:c8:23:38:bb:33:
         23:fd:2c:0a:16:19:5e:28:3b:ba:26:b2:62:15:e2:03:f1:4c:
         25:7e:39:f8:3d:b2:7e:fc:a2:c9:30:4f:cf:ec:16:0e:00:66:
         38:08:5b:e0:fd:a2:3d:77:da:ba:29:bf:1c:07:b5:6e:82:36:
         0a:f3:eb:b8:db:5b:9d:9e:0d:cb:7a:5a:17:9a:31:e0:66:2b:
         02:30:8a:40:b4:6d:e1:f2:51:b4:d6:eb:b8:29:16:2f:36:7e:
         8c:01:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:32 2024 by rpki-client on console-fra.rpki-client.org