Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
File:                     wI8-3FkViULC3znxQl5uuCFovj4.cer (raw, json)
Hash identifier:          57Z5YtUAgF2CPByoPAiB2Ws+5oMRdy4xJ6Mp7avbhRA=
Subject key identifier:   C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       26E9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:27:48 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327901
                          IP: 102.141.128.0/18
                          IP: 102.215.100.0/22
                          IP: 102.216.196.0/22
                          IP: 102.217.108.0/22
                          IP: 102.217.200.0/22
                          IP: 102.217.224.0/22
                          IP: 102.218.240.0/22
                          IP: 102.219.116.0/22
                          IP: 102.220.148.0/22
                          IP: 102.221.120.0/22
                          IP: 102.222.168.0/22
                          IP: 196.201.232.0/21
                          IP: 2c0f:f0e8::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9961 (0x26e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:27:48 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:b8:0b:a2:6e:da:65:f5:6e:65:dd:bd:d0:
                    3d:f9:cc:c1:4c:6d:e3:99:71:3f:b9:d2:ab:f4:19:
                    da:cc:60:64:f9:67:bb:82:cd:92:7d:83:6a:ba:b1:
                    d2:4a:6a:03:61:ae:ef:d6:1c:d8:5e:58:cb:c3:bd:
                    73:61:82:5a:19:4c:ea:0c:99:13:d8:3a:c6:82:55:
                    01:77:bf:dc:5a:c3:dd:06:2e:74:b7:85:0b:84:52:
                    a1:40:81:76:a7:0f:6c:41:56:d6:3c:60:a7:f6:eb:
                    ff:10:50:4b:fa:4b:a0:e8:ad:7d:b5:3b:21:9a:be:
                    be:35:c4:40:62:a8:ef:0e:b4:82:27:f9:50:06:55:
                    b9:80:20:15:d2:c6:c4:48:ae:8a:6e:22:23:be:c5:
                    47:94:a5:45:3d:df:58:61:45:72:42:ae:ab:d8:24:
                    73:10:f0:cf:5f:c8:8d:b6:78:76:65:b9:e3:81:bd:
                    08:e0:f3:db:78:3f:ba:5f:0d:ca:ed:b4:e6:85:45:
                    da:db:0e:73:f0:01:f1:52:4b:02:50:8c:e7:d0:2d:
                    be:1f:c4:0e:6c:8e:00:32:09:11:81:ce:ce:07:b9:
                    9e:c9:09:cd:10:5d:31:bf:df:a0:d6:7c:b8:b1:bd:
                    f0:42:19:a3:5f:80:5c:97:f4:2f:14:e4:68:48:eb:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327901

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.128.0/18
                  102.215.100.0/22
                  102.216.196.0/22
                  102.217.108.0/22
                  102.217.200.0/22
                  102.217.224.0/22
                  102.218.240.0/22
                  102.219.116.0/22
                  102.220.148.0/22
                  102.221.120.0/22
                  102.222.168.0/22
                  196.201.232.0/21
                IPv6:
                  2c0f:f0e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:33:e5:df:3b:2d:62:ab:50:51:81:f0:ba:ce:09:91:73:
         aa:49:31:67:d5:ea:5d:c4:6e:37:da:f7:a0:a0:82:83:a8:b0:
         e0:69:f0:50:a1:1f:39:02:6e:63:68:48:6f:f9:33:f1:5e:b7:
         0c:f3:ad:20:af:7b:07:66:2f:b9:15:8d:f8:3f:78:45:64:a8:
         7c:f0:3c:01:f0:c3:ee:e3:f7:59:9f:7a:60:bc:1d:f1:d2:ba:
         2f:cf:83:62:97:e4:cc:8b:8e:40:9d:56:82:9d:09:6f:27:ba:
         24:27:80:b1:84:eb:ba:1e:78:dd:66:80:a2:2e:60:5d:04:14:
         f3:f0:95:14:6a:00:20:15:91:b2:40:36:81:c1:ca:c7:02:a5:
         f8:8c:36:31:07:7e:0e:e6:bc:16:73:e6:78:78:10:cf:c1:6c:
         b2:24:25:5f:d1:ef:8c:39:c7:45:65:e4:ee:fb:de:97:c0:30:
         40:c6:b5:24:3a:d4:f5:4f:26:f2:e5:93:97:f0:55:27:f8:32:
         36:29:68:1c:c3:14:df:02:2e:45:aa:8c:51:fe:8f:54:d0:78:
         59:ed:99:19:f1:e3:7b:47:95:6d:db:28:4f:f0:65:f1:ca:80:
         f7:01:74:41:bd:74:2b:c9:de:81:42:bd:33:22:7d:e1:17:1f:
         eb:f4:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:23 2024 by rpki-client on console-ams.rpki-client.org