Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
File:                     uB6iOhePYIDn2A7zBrAE6aHc4RA.cer (raw, json)
Hash identifier:          q+ZnlrB7tMs9O7csQUwivOcgUZwlCrdxNDGiWRl8CAU=
Subject key identifier:   B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       241E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 01:14:05 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328253
                          IP: 102.68.176.0/22
                          IP: 102.222.204.0/22
                          IP: 196.251.156.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 05:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9246 (0x241e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:14:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F363D469AF/serialNumber=B81EA23A178F6080E7D80EF306B004E9A1DCE110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:03:d9:65:fa:58:89:9f:77:1a:21:be:64:
                    29:ad:f2:be:ab:6d:8b:52:fb:bd:24:6d:47:0f:56:
                    87:ce:3b:81:27:e4:13:3a:f1:54:a3:11:a1:c6:b7:
                    0a:63:7c:04:a6:e2:29:5b:14:e2:5c:1f:6b:3e:b4:
                    73:fe:7d:1d:e7:86:60:9c:21:2a:e2:ab:d1:da:7f:
                    02:ba:44:1b:ca:12:ee:e8:1f:19:14:7c:8b:4a:e2:
                    9c:3a:af:a8:1b:d5:92:40:d5:98:0b:9e:10:dc:02:
                    03:5b:43:1c:69:18:38:a7:93:a3:86:39:0a:e6:39:
                    df:31:0d:5e:3f:9e:58:63:56:51:9e:4a:c4:33:ee:
                    b5:cb:89:d7:6a:ab:56:ed:ad:92:3e:2c:f6:c8:5b:
                    9d:ff:26:e9:bf:a7:dc:6a:37:4d:4d:e6:16:a4:45:
                    50:3b:f3:97:b9:02:04:65:93:8e:df:f3:d3:20:e3:
                    ef:f2:6b:2f:80:9f:78:ef:53:c0:f4:53:58:f1:61:
                    98:86:b4:d4:e7:48:f9:64:58:33:ec:35:a9:bf:fb:
                    d4:80:4a:21:2c:76:ab:76:b4:e7:4c:e2:4e:89:14:
                    c3:8e:58:fa:d5:25:a8:ea:39:c8:f4:66:c3:ac:4f:
                    f1:b5:ae:2c:47:7a:0f:c8:92:8f:d4:49:51:d2:72:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328253

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.176.0/22
                  102.222.204.0/22
                  196.251.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:64:02:25:15:fb:89:8c:bb:62:4b:c3:c2:ec:a4:90:db:66:
         b2:4d:01:c2:85:11:60:2a:85:db:ac:4d:f4:bc:bb:0e:d9:6a:
         94:9e:e3:d7:c3:98:a4:13:6a:e0:7e:e0:18:73:4c:22:b7:2d:
         eb:de:cf:6f:2e:20:28:0f:87:2a:22:4a:9e:1e:09:c6:93:e9:
         da:02:98:c7:f2:fe:82:5e:53:ce:7c:fb:47:92:0d:fd:36:0e:
         ae:ce:55:95:d9:9c:33:07:85:a1:40:c9:e2:f7:f1:4e:3a:d2:
         5d:a6:da:2b:55:28:59:00:21:13:e0:91:7b:84:65:7f:38:3f:
         87:a1:2b:8c:fc:73:53:4a:eb:e3:5d:f4:d8:71:68:47:4b:f5:
         1c:34:f8:3d:03:be:94:9e:1e:4a:97:42:d8:a1:03:fb:65:b4:
         97:02:33:96:34:1c:9a:1c:dd:fb:73:4d:bd:b1:04:ae:a3:43:
         f0:5a:e4:d3:77:24:c2:82:f9:44:09:93:84:8e:60:56:1c:7d:
         25:4d:c2:94:67:13:da:aa:88:54:b7:63:ee:ef:69:62:c5:dc:
         de:b5:c2:78:51:06:2d:d2:2a:a3:90:71:2e:5f:c8:4b:39:d6:
         35:82:81:3c:19:71:f9:31:5f:86:e8:e2:90:fd:70:25:ec:e6:
         82:d5:7f:b6
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgICJB4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAxMDEwMTE0MDVaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjNENDY5QUYxMTAvBgNVBAUTKEI4MUVBMjNBMTc4RjYwODBFN0Q4MEVG
MzA2QjAwNEU5QTFEQ0UxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/hwPZZfpYiZ93GiG+ZCmt8r6rbYtS+70kbUcPVofOO4En5BM68VSjEaHGtwpj
fASm4ilbFOJcH2s+tHP+fR3nhmCcISriq9HafwK6RBvKEu7oHxkUfItK4pw6r6gb
1ZJA1ZgLnhDcAgNbQxxpGDink6OGOQrmOd8xDV4/nlhjVlGeSsQz7rXLiddqq1bt
rZI+LPbIW53/Jum/p9xqN01N5hakRVA785e5AgRlk47f89Mg4+/yay+An3jvU8D0
U1jxYZiGtNTnSPlkWDPsNam/+9SASiEsdqt2tOdM4k6JFMOOWPrVJajqOcj0ZsOs
T/G1rixHeg/Iko/USVHSciI/AgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUuB6iOheP
YIDn2A7zBrAE6aHc4RAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzRDQ2OS80NDY4RUVDQTlCRjUx
MUVEQkE1MUQxQTNGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0Q0NjkvNDQ2OEVFQ0E5QkY1MTFFREJBNTFEMUEzRjEyMjI0NjgvdUI2aU9o
ZVBZSURuMkE3ekJyQUU2YUhjNFJBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAj0wKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJmRLADBAJm3swDBALE
+5wwDQYJKoZIhvcNAQELBQADggEBAJZkAiUV+4mMu2JLw8LspJDbZrJNAcKFEWAq
hdusTfS8uw7ZapSe49fDmKQTauB+4BhzTCK3Levez28uICgPhyoiSp4eCcaT6doC
mMfy/oJeU858+0eSDf02Dq7OVZXZnDMHhaFAyeL38U460l2m2itVKFkAIRPgkXuE
ZX84P4ehK4z8c1NK6+Nd9NhxaEdL9Rw0+D0DvpSeHkqXQtihA/tltJcCM5Y0HJoc
3ftzTb2xBK6jQ/Ba5NN3JMKC+UQJk4SOYFYcfSVNwpRnE9qqiFS3Y+7vaWLF3N61
wnhRBi3SKqOQcS5fyEs51jWCgTwZcfkxX4bo4pD9cCXs5oLVf7Y=
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:23 2024 by rpki-client on console-fra.rpki-client.org