Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer (raw, json)
Hash identifier:          jUO0069j5pkRrDjKtqO/ZvyVrDJjcmDC/i1VoO1ekdM=
Subject key identifier:   C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2BE7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 08:32:42 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328233
                          IP: 102.207.221.0/24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11239 (0x2be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 10 08:32:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:75:fd:3d:c6:c0:20:96:18:4e:a6:7d:70:
                    af:69:fe:16:3b:1f:66:90:43:64:7c:38:15:aa:23:
                    d8:93:c9:d0:80:be:fc:00:8f:25:e5:19:f0:40:f0:
                    70:cd:5a:a5:22:cf:e5:7f:78:b1:74:43:33:f1:b8:
                    49:0d:37:93:6d:42:a2:6f:ca:82:00:40:29:aa:b5:
                    8b:fe:af:28:bf:2a:10:4b:84:e4:12:cb:9a:5e:44:
                    c6:b3:88:82:d7:e5:d7:bf:6d:e4:a7:c5:fa:a3:a9:
                    f5:6c:e8:91:3d:f9:dc:c2:9d:cb:d6:2b:cf:09:22:
                    f6:7a:9a:55:c3:45:6b:f1:ba:bc:2a:41:6c:dd:6d:
                    9b:14:7d:20:89:fe:e7:c5:d5:55:b4:bf:73:f9:0d:
                    d9:87:6c:c8:dc:da:2d:a8:34:c4:9e:61:cb:85:b2:
                    26:4f:ed:9a:49:db:a8:13:97:96:8e:bf:c5:f8:f7:
                    88:16:d1:ac:b5:2a:47:d7:07:7c:36:0f:5b:92:86:
                    ac:72:0d:a3:61:e8:e0:d5:08:3c:08:c3:b0:43:c8:
                    1e:7b:fe:6c:1b:c8:e3:7f:9c:51:fa:3c:ad:28:9d:
                    e7:16:53:5d:64:4a:8f:d9:ef:f1:e7:18:20:c0:3f:
                    b0:d7:18:e3:d7:01:3f:72:b4:52:91:d1:14:9d:b5:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328233

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:a0:aa:0f:e0:33:63:ee:11:0d:ed:46:6b:ff:27:ba:d4:
         0a:46:8a:a8:63:98:8a:7b:64:0b:b9:f2:7c:84:99:19:b3:55:
         58:b3:72:bb:0b:95:67:03:fa:eb:b7:4c:bb:09:98:c9:f5:da:
         72:b4:37:7e:96:a4:3d:53:d8:6b:d5:63:2d:5f:3e:16:de:3c:
         30:c9:31:42:95:62:ef:a6:ab:67:a2:61:ec:d6:67:80:56:17:
         6b:41:d1:28:fc:f0:94:e5:c3:ec:cb:9c:b0:df:35:26:85:6b:
         6e:29:99:a2:c5:48:30:34:a2:81:9d:5c:ab:87:fc:60:59:16:
         4a:92:0b:78:2f:8c:6f:2d:b0:49:8b:9d:57:a6:1c:c5:fb:05:
         54:51:d8:03:7d:f6:3d:d0:9d:93:a2:75:1d:c0:e0:bd:fd:1f:
         87:8b:ab:ba:7b:ef:86:cc:d7:ef:74:4f:07:4b:77:aa:68:5c:
         a0:57:59:86:73:a0:58:7f:b5:fd:0a:1f:00:93:fd:93:d9:e1:
         87:c4:29:33:89:96:84:67:3b:8b:dc:9c:f5:8f:00:e3:06:4f:
         f1:29:c5:66:1e:95:56:19:4d:d3:fe:42:4e:c9:c2:6a:7f:1e:
         e4:a2:a4:48:fe:31:f0:ec:22:66:7d:46:b9:62:c5:42:52:4d:
         1a:b6:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 02:14:46 2024 by rpki-client on console-ams.rpki-client.org