Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
File:                     vuhQJeKvFdQRCrom9RsNdAV9rss.cer (raw, json)
Hash identifier:          HxOcD7DHu9APLan3fiUbnZJiKp/jhkLN0EtAQA0UBWQ=
Subject key identifier:   BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2344
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:15:54 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329223
                          IP: 102.212.228.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9028 (0x2344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:15:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:c6:25:92:ba:14:80:c4:9e:4f:41:89:18:
                    34:cc:e6:c1:95:92:0b:80:b7:ba:12:f0:4d:7e:eb:
                    9d:48:b5:8a:44:7c:83:15:bd:ae:27:0a:11:ad:bc:
                    c4:61:ff:cc:01:90:9e:0d:34:6c:16:bd:7a:cb:88:
                    42:f1:7a:71:9d:42:45:4c:ce:e7:15:cd:fb:b3:71:
                    db:c3:14:bb:78:a1:8b:22:f4:eb:9e:78:ca:18:0a:
                    28:ca:89:21:c1:4b:9a:d0:07:03:87:1c:1d:59:9e:
                    16:c4:87:2b:cb:f8:a5:aa:f3:d4:f5:fa:3e:29:66:
                    64:45:b0:01:16:d7:1f:1e:24:3c:f9:31:8d:61:92:
                    39:f0:96:6a:d6:b1:35:21:8c:0e:df:35:98:a1:93:
                    25:be:0e:48:b8:76:4b:32:2d:22:8f:27:30:71:69:
                    1a:a9:8e:74:11:01:1b:1e:12:98:e9:98:4f:32:d1:
                    3c:33:df:88:e7:94:9b:50:b6:06:d2:6e:fd:ee:3f:
                    97:b7:32:3d:6e:28:10:f8:c5:78:46:ff:65:07:cf:
                    cf:04:b2:ce:2a:8d:5e:cd:9f:2b:35:cc:5b:f3:16:
                    57:7b:14:75:2c:ab:b8:5f:fc:d4:13:75:b0:cc:1a:
                    a7:23:ae:5e:6f:33:6c:27:c9:3f:0c:5b:0a:ca:89:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329223

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:b2:a2:12:db:61:2b:91:84:12:5a:04:8e:52:ef:f7:04:
         31:b4:55:a3:4b:c0:99:51:99:9f:4b:10:0d:76:19:34:25:80:
         6c:48:14:80:a4:51:79:e1:1a:d3:25:9a:77:c1:e9:8b:48:2d:
         fe:24:8a:99:33:fd:19:44:bc:3a:92:cd:5b:de:b4:92:34:f9:
         bb:a2:b3:f2:86:09:2a:b5:66:92:15:9c:f7:f7:fa:6b:17:a1:
         3f:c7:8d:8f:70:8e:50:f4:84:25:1e:17:c0:26:5e:da:74:7f:
         54:71:31:75:0d:d1:ac:c4:63:66:86:c9:e2:23:58:67:4e:8b:
         22:c7:db:f4:7f:e9:69:78:8e:01:8d:e4:25:d6:91:cb:b0:ce:
         1c:12:1d:e0:ee:f3:e3:27:a3:a4:e9:88:be:8a:5d:15:81:12:
         5e:01:b1:db:8d:6a:b8:54:56:b4:7c:16:c9:3a:26:23:83:36:
         aa:4c:f2:b2:a0:de:ba:25:7b:e4:ce:43:2d:fe:2f:a3:b7:54:
         0f:ef:7e:b1:78:3a:ee:98:63:67:b9:10:58:6e:83:f3:12:80:
         22:42:ad:94:8c:df:b1:7e:2e:d2:ba:ec:25:bd:f1:06:f9:3a:
         c1:77:dd:47:71:5d:0d:54:4b:51:8b:12:fd:26:20:c8:0b:c4:
         9c:c3:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:14 2024 by rpki-client on console-ams.rpki-client.org