Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
File:                     wrcqDttgGOuk7XzTA12xMvRJwB0.cer (raw, json)
Hash identifier:          k51fyqbaE+O4Bkp3bW0n9+jay/R3WjvkwRGpzhScUTU=
Subject key identifier:   C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       30CF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:40:04 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328490
                          IP: 102.68.76.0/22
                          IP: 102.211.144.0/22
                          IP: 2c0f:eda0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12495 (0x30cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC
        Validity
            Not Before: Jan  1 03:40:04 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F368948BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:94:34:73:ec:ab:90:9f:78:43:68:d5:1d:
                    b1:9f:db:07:aa:5b:93:f0:2e:80:a9:54:db:3d:7e:
                    b0:e9:d0:83:0b:3d:7e:9f:0b:d0:b5:a8:c6:61:2b:
                    49:8d:28:fe:e1:c7:be:25:6b:e8:4c:ae:6a:af:f0:
                    7b:3f:e0:a9:45:d1:cc:e7:6c:3c:f8:56:2e:df:86:
                    e1:eb:e8:81:ce:bf:35:d2:af:64:2e:0b:74:95:04:
                    4b:27:f5:76:2e:9f:55:2c:16:c5:37:d5:73:4f:d3:
                    e9:50:d8:2c:22:3e:e5:3f:33:ee:85:4b:04:9e:e5:
                    9c:84:2f:01:67:ca:54:b9:c1:5a:fc:b4:85:7a:99:
                    02:ae:c8:b9:05:6a:c1:26:c7:10:86:83:5b:33:0b:
                    73:cc:5a:0f:df:e8:cf:0a:2c:f1:3f:c9:bf:bb:67:
                    63:84:50:23:77:a2:78:36:d7:43:e7:13:18:f4:16:
                    e9:ee:9c:e7:98:e1:dd:a1:09:72:be:f8:46:c2:e3:
                    64:af:ef:56:d8:97:94:26:8f:6c:7b:c6:dc:15:e9:
                    14:40:e3:c8:f8:88:fe:54:e6:e3:da:d2:b3:18:bf:
                    1b:c8:4f:7c:fa:a9:90:64:d8:d9:f5:38:99:8e:19:
                    a9:9e:29:b2:41:8f:34:e2:45:c9:ef:83:ad:96:18:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328490

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.76.0/22
                  102.211.144.0/22
                IPv6:
                  2c0f:eda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:b0:a3:e7:e2:c2:c2:43:d4:4d:e1:94:72:46:25:bf:87:
         26:20:24:0b:6f:c7:58:66:46:c2:3d:37:4b:7c:23:a3:2f:d6:
         34:c6:e1:92:b1:6a:32:d4:da:25:b8:23:f3:b2:b1:3c:c4:40:
         63:b8:4c:c4:0e:f6:00:9d:c4:60:d1:33:2f:09:ab:90:3f:b0:
         f1:43:c7:11:b6:6a:52:ac:c6:f9:47:da:fe:f9:17:8b:cc:43:
         fb:83:90:81:3e:2d:85:48:3f:be:5e:84:72:cb:bb:05:69:c2:
         07:45:75:2b:ef:0e:73:91:27:ce:a1:fc:14:24:3d:85:50:e2:
         21:88:4b:c2:31:b7:09:b6:42:f3:81:b7:43:71:3a:32:84:44:
         69:d8:6b:e1:37:79:3e:73:60:34:fd:6b:4a:f5:fa:fd:99:9e:
         e3:50:e3:0a:bf:99:bc:22:f0:cf:f0:c5:3f:f9:56:af:45:55:
         7d:f3:f3:e2:1a:ec:0e:29:78:96:13:f1:0e:43:8e:98:8f:43:
         63:aa:92:c8:b0:8c:3a:d7:da:e3:d0:66:63:f2:e7:d2:db:61:
         c2:62:98:d7:9f:90:8a:7c:8e:e2:9b:34:b2:2f:ec:2e:04:9d:
         90:a7:ba:41:f2:04:dd:37:7f:d8:9b:24:5c:db:61:65:4b:57:
         3b:df:fe:b6
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICMM8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMzQwMDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjg5NDhCQUYxMTAvBgNVBAUTKEMyQjcyQTBFREI2MDE4RUJBNEVEN0NE
MzAzNURCMTMyRjQ0OUMwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBVJQ0c+yrkJ94Q2jVHbGf2weqW5PwLoCpVNs9frDp0IMLPX6fC9C1qMZhK0mN
KP7hx74la+hMrmqv8Hs/4KlF0cznbDz4Vi7fhuHr6IHOvzXSr2QuC3SVBEsn9XYu
n1UsFsU31XNP0+lQ2CwiPuU/M+6FSwSe5ZyELwFnylS5wVr8tIV6mQKuyLkFasEm
xxCGg1szC3PMWg/f6M8KLPE/yb+7Z2OEUCN3ong210PnExj0FununOeY4d2hCXK+
+EbC42Sv71bYl5Qmj2x7xtwV6RRA48j4iP5U5uPa0rMYvxvIT3z6qZBk2Nn1OJmO
GameKbJBjzTiRcnvg62WGOfvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUwrcqDttg
GOuk7XzTA12xMvRJwB0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4OTQ4Qi81Nzg3MTExMEIwOUEx
MUVGQkE1QkU4QTA3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODk0OEIvNTc4NzExMTBCMDlBMTFFRkJBNUJFOEEwNzYyRTk1MUEvd3JjcUR0
dGdHT3VrN1h6VEExMnhNdlJKd0IwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAyowNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmREwDBAJm05AwDQQC
AAIwBwMFACwP7aAwDQYJKoZIhvcNAQELBQADggEBAC/TsKPn4sLCQ9RN4ZRyRiW/
hyYgJAtvx1hmRsI9N0t8I6Mv1jTG4ZKxajLU2iW4I/OysTzEQGO4TMQO9gCdxGDR
My8Jq5A/sPFDxxG2alKsxvlH2v75F4vMQ/uDkIE+LYVIP75ehHLLuwVpwgdFdSvv
DnORJ86h/BQkPYVQ4iGIS8Ixtwm2QvOBt0NxOjKERGnYa+E3eT5zYDT9a0r1+v2Z
nuNQ4wq/mbwi8M/wxT/5Vq9FVX3z8+Ia7A4peJYT8Q5DjpiPQ2OqksiwjDrX2uPQ
ZmPy59LbYcJimNefkIp8juKbNLIv7C4EnZCnukHyBN03f9ibJFzbYWVLVzvf/rY=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:30 2025 by rpki-client