Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
File:                     zVIytjxqgymQyGcHy3Ob3ATbmlk.cer (raw, json)
Hash identifier:          nX0Yy54pe5AAJqo7IspF6PdY4a0siqPOhyrRe+yJiz0=
Subject key identifier:   CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2910
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 10:17:02 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327752
                          IP: 102.68.128.0/21
                          IP: 102.214.104.0/22
                          IP: 154.73.28.0/22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10512 (0x2910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 29 10:17:02 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:85:a3:7e:a5:6f:93:33:98:d0:96:2d:71:
                    ae:4b:86:0b:75:34:60:50:fd:60:86:e2:2a:1d:db:
                    4e:59:0e:05:80:0c:ee:3b:b6:f1:cd:d6:02:9c:68:
                    02:43:36:2a:ab:9b:d2:b9:d1:21:37:e3:7a:b1:54:
                    13:e0:a1:9a:82:17:14:61:1c:67:87:19:b7:28:b2:
                    4d:33:05:c3:3d:32:9a:70:95:7f:cd:27:b8:06:88:
                    d8:10:82:42:7b:f0:32:48:9d:94:88:49:c2:5f:2a:
                    10:6a:06:0f:62:09:fa:65:b9:90:2a:69:11:56:f6:
                    be:4f:8b:56:26:e4:fd:46:41:05:f3:2a:f4:7c:72:
                    90:4a:6d:9b:a0:69:74:76:7d:81:fd:bb:3f:24:36:
                    a6:39:b3:df:8f:a1:06:d7:23:cd:e2:b0:0a:59:92:
                    51:cd:56:1d:e1:75:32:c2:52:f6:ec:4d:2c:1c:01:
                    5d:2f:64:9b:73:c8:c3:3a:55:54:97:ab:37:5b:f5:
                    d1:e6:17:ff:66:1d:ab:26:44:8c:f0:09:3b:ce:f7:
                    36:86:10:ab:4b:00:bb:e0:1e:0e:68:52:6e:e1:67:
                    44:c0:76:50:8f:57:43:50:cf:0d:98:87:c3:1c:55:
                    3c:ba:81:3b:1f:14:37:5c:3b:c6:c0:c4:40:42:1d:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327752

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.128.0/21
                  102.214.104.0/22
                  154.73.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:34:1a:fb:b5:29:55:0c:3e:f1:3f:c0:7f:58:e2:ea:82:
         b7:20:04:fb:2b:bd:39:20:19:b1:ee:03:32:1d:f7:f5:0f:e7:
         f0:3d:07:97:94:0f:2c:e8:61:ba:a4:f6:dc:de:80:52:f8:72:
         28:55:ca:40:65:b2:e7:e1:2d:7a:5e:ee:7e:f0:bb:ce:de:a2:
         1d:e9:0d:58:a5:e1:c3:7c:33:77:3a:b0:4e:f1:69:6d:4d:60:
         b9:1b:05:fa:18:d6:c2:a1:ff:0a:bf:b1:5a:23:8a:9c:7a:82:
         f9:bb:3b:ab:8e:b4:46:4e:9a:5b:86:81:3c:7c:db:c4:92:71:
         34:dd:80:78:57:44:ef:85:3c:ae:cd:80:41:24:a4:42:6f:d0:
         e8:a5:3c:f1:8b:25:04:4d:c9:d4:72:2d:d5:78:c4:f7:ac:c0:
         f0:9b:7b:35:b4:18:4b:19:ad:f8:b6:7a:b7:5b:61:ee:db:44:
         4e:a7:2e:d2:5f:51:55:eb:33:d1:f1:b7:6d:05:49:8e:35:60:
         75:bf:e5:05:5b:64:01:9c:36:d5:51:94:8d:b9:be:92:92:5a:
         92:97:a1:7e:28:fd:89:5d:77:b3:6b:e2:f9:d6:7f:16:c0:81:
         dc:62:76:de:61:cf:69:ca:96:6f:b8:85:77:b3:92:ce:94:9b:
         f7:83:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:32 2024 by rpki-client on console-fra.rpki-client.org