Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
File:                     uB6iOhePYIDn2A7zBrAE6aHc4RA.cer (raw, json)
Hash identifier:          L4Ice77q3iPmfEeLOfyWe5cUvkPuYwizI6djJPFdyVE=
Subject key identifier:   B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2B86
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 14 Sep 2024 00:03:21 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328253
                          IP: 102.68.176.0/22
                          IP: 102.222.204.0/22
                          IP: 196.251.156.0/22
                          IP: 2c0f:4cc0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11142 (0x2b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 14 00:03:21 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363D469AF/serialNumber=B81EA23A178F6080E7D80EF306B004E9A1DCE110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:03:d9:65:fa:58:89:9f:77:1a:21:be:64:
                    29:ad:f2:be:ab:6d:8b:52:fb:bd:24:6d:47:0f:56:
                    87:ce:3b:81:27:e4:13:3a:f1:54:a3:11:a1:c6:b7:
                    0a:63:7c:04:a6:e2:29:5b:14:e2:5c:1f:6b:3e:b4:
                    73:fe:7d:1d:e7:86:60:9c:21:2a:e2:ab:d1:da:7f:
                    02:ba:44:1b:ca:12:ee:e8:1f:19:14:7c:8b:4a:e2:
                    9c:3a:af:a8:1b:d5:92:40:d5:98:0b:9e:10:dc:02:
                    03:5b:43:1c:69:18:38:a7:93:a3:86:39:0a:e6:39:
                    df:31:0d:5e:3f:9e:58:63:56:51:9e:4a:c4:33:ee:
                    b5:cb:89:d7:6a:ab:56:ed:ad:92:3e:2c:f6:c8:5b:
                    9d:ff:26:e9:bf:a7:dc:6a:37:4d:4d:e6:16:a4:45:
                    50:3b:f3:97:b9:02:04:65:93:8e:df:f3:d3:20:e3:
                    ef:f2:6b:2f:80:9f:78:ef:53:c0:f4:53:58:f1:61:
                    98:86:b4:d4:e7:48:f9:64:58:33:ec:35:a9:bf:fb:
                    d4:80:4a:21:2c:76:ab:76:b4:e7:4c:e2:4e:89:14:
                    c3:8e:58:fa:d5:25:a8:ea:39:c8:f4:66:c3:ac:4f:
                    f1:b5:ae:2c:47:7a:0f:c8:92:8f:d4:49:51:d2:72:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328253

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.176.0/22
                  102.222.204.0/22
                  196.251.156.0/22
                IPv6:
                  2c0f:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:4d:91:1a:ee:4b:d1:98:11:12:6d:9b:01:34:13:92:a7:
         6e:76:92:da:4d:18:88:43:10:44:30:e7:5e:3b:a6:21:9d:55:
         02:48:77:e9:35:68:af:30:74:cd:31:d4:2d:d2:76:a9:68:52:
         d7:f5:1f:38:69:9d:67:79:af:6e:ff:2e:34:bd:d9:a0:d8:b6:
         c0:3c:52:08:3f:a7:fc:ca:9b:1b:f2:97:a8:bc:81:af:b9:09:
         2c:1f:31:6b:56:b0:27:1c:15:fb:4d:81:d6:cc:d1:82:1c:3c:
         62:32:3c:12:55:78:af:0c:f0:bc:14:f1:75:01:4a:28:62:c2:
         a4:4f:ce:14:5c:96:47:44:62:bf:c4:e4:b7:42:8a:78:1a:fa:
         bf:92:37:2d:69:1b:fb:a5:69:a5:57:59:7d:0a:5a:db:76:54:
         f1:18:53:95:1c:ed:9d:4c:d0:fe:98:90:c9:a2:4c:77:b8:77:
         b8:de:a0:6f:6c:32:b9:5e:1b:f9:d8:f6:c0:11:2b:96:18:f4:
         fa:28:2e:ff:dd:e1:3b:45:55:f6:51:4c:a9:49:d9:44:5c:b9:
         84:f3:f0:de:62:e7:d7:20:33:a8:cf:58:eb:33:b1:ae:9b:23:
         a7:c9:35:5c:a3:df:5f:40:66:7e:0b:57:d4:61:a5:78:2b:aa:
         64:6c:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org