Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.cer (raw, json)
Hash identifier:          xPdDw/d5N4SG31GmP1c10fQgSfNQCoQObk8v5j5GiFU=
Subject key identifier:   BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2994
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 15 Mar 2024 06:01:07 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329371
                          IP: 102.209.144.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10644 (0x2994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 15 06:01:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:7b:00:8d:de:40:b7:f9:a6:6c:8f:f8:3e:
                    84:e4:88:63:10:84:43:57:b7:8d:3f:da:24:33:71:
                    66:dd:04:1c:84:ac:5a:8c:fa:d0:9f:23:97:7c:0e:
                    bc:d6:28:c0:1b:5a:e8:64:1c:e4:a1:49:db:bd:63:
                    2d:2a:ee:88:3a:00:5c:f9:f1:07:77:f1:59:38:7b:
                    f4:8e:f9:fd:f2:b3:51:b0:70:50:98:05:9e:90:61:
                    8f:0f:62:74:d8:5f:44:07:55:ee:49:b4:92:02:dc:
                    9c:b2:9b:27:c5:09:29:3e:17:bb:60:45:df:6f:99:
                    e1:fd:3c:70:ba:6b:e0:5f:40:ae:6d:fc:b8:52:ca:
                    85:04:38:06:fa:b2:9d:ec:5f:7c:e5:d6:85:75:69:
                    94:2b:ec:46:a5:1e:2c:f3:e2:3a:f2:5f:1c:6f:97:
                    b4:ae:77:4f:fe:c9:86:74:38:8c:e3:02:ce:fa:1d:
                    7f:66:77:d5:4c:43:a0:7f:52:98:8d:51:a2:17:08:
                    62:66:45:7b:b4:8c:2c:64:12:07:30:81:35:d9:51:
                    18:a4:51:37:b4:10:c2:3f:e0:57:58:da:de:fc:e3:
                    23:f3:7e:31:60:92:44:39:f5:4e:8a:78:4a:4d:09:
                    9a:29:00:ea:82:d1:58:97:b0:9d:83:73:58:e8:8e:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329371

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:2a:77:cb:74:d4:ec:d8:bf:89:db:c5:c3:92:a9:76:3c:
         74:c8:1f:f3:59:c0:e8:76:95:05:cf:20:f8:64:34:fb:9a:3a:
         60:f8:2c:3e:5f:95:1f:aa:2d:41:85:2a:8b:d8:ee:d5:e3:bc:
         b6:eb:de:65:1b:a9:40:be:93:f5:87:82:d3:98:cc:66:29:77:
         bc:00:49:cb:56:ba:02:26:67:63:bc:38:67:fa:7f:35:46:ad:
         cf:aa:1d:98:bd:fc:c5:6a:52:28:3a:ba:3d:73:06:21:93:7e:
         d9:df:9e:3e:18:74:f4:85:e1:61:ea:0b:79:08:9b:2b:21:84:
         e9:a5:07:4d:42:28:b4:57:b0:9c:f9:0d:19:d7:7f:56:41:9d:
         c2:74:73:0e:4f:1c:09:a5:e1:f3:05:68:eb:ef:66:9c:d8:1a:
         71:ed:90:e8:db:b8:8d:76:08:6a:ff:7d:ac:3d:cd:a5:b3:68:
         98:6d:1b:9b:2c:8e:8b:46:1f:96:43:33:df:83:5b:d1:2b:04:
         74:67:3d:ad:f6:9c:2f:20:68:fe:be:60:67:94:df:3a:be:ae:
         82:ae:37:3f:c5:89:3d:a4:e7:3c:d4:3b:c8:15:3f:92:fb:ef:
         28:97:fb:ab:0b:58:56:54:59:50:e8:8b:12:de:7b:3e:ea:80:
         fe:d6:21:cc
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICKZQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNDAzMTUwNjAxMDdaFw0yNTAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjc5NjgwQUYxMTAvBgNVBAUTKEJBMkZGRDVDRTM3QzAxQzZFRDk0RkI5
NUMzNThENzBBMjk4REM5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfL3sAjd5At/mmbI/4PoTkiGMQhENXt40/2iQzcWbdBByErFqM+tCfI5d8DrzW
KMAbWuhkHOShSdu9Yy0q7og6AFz58Qd38Vk4e/SO+f3ys1GwcFCYBZ6QYY8PYnTY
X0QHVe5JtJIC3JyymyfFCSk+F7tgRd9vmeH9PHC6a+BfQK5t/LhSyoUEOAb6sp3s
X3zl1oV1aZQr7EalHizz4jryXxxvl7Sud0/+yYZ0OIzjAs76HX9md9VMQ6B/UpiN
UaIXCGJmRXu0jCxkEgcwgTXZURikUTe0EMI/4FdY2t784yPzfjFgkkQ59U6KeEpN
CZopAOqC0ViXsJ2Dc1jojqP1AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUui/9XON8
AcbtlPuVw1jXCimNyXQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OTY4MC82NzEwMUY1MEUyOTEx
MUVFQkM5QTcyNTg3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Nzk2ODAvNjcxMDFGNTBFMjkxMTFFRUJDOUE3MjU4Nzc1NDEyRTYvdWlfOVhP
TjhBY2J0bFB1VncxalhDaW1OeVhRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBpswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0ZAwDQYJKoZIhvcN
AQELBQADggEBAFP2KnfLdNTs2L+J28XDkql2PHTIH/NZwOh2lQXPIPhkNPuaOmD4
LD5flR+qLUGFKovY7tXjvLbr3mUbqUC+k/WHgtOYzGYpd7wASctWugImZ2O8OGf6
fzVGrc+qHZi9/MVqUig6uj1zBiGTftnfnj4YdPSF4WHqC3kImyshhOmlB01CKLRX
sJz5DRnXf1ZBncJ0cw5PHAml4fMFaOvvZpzYGnHtkOjbuI12CGr/faw9zaWzaJht
G5ssjotGH5ZDM9+DW9ErBHRnPa32nC8gaP6+YGeU3zq+roKuNz/FiT2k5zzUO8gV
P5L77yiX+6sLWFZUWVDoixLeez7qgP7WIcw=
-----END CERTIFICATE-----
Generated at Tue May 7 01:57:27 2024 by rpki-client on console-fra.rpki-client.org