Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.cer (raw, json)
Hash identifier:          JJ37I0exiv8TadzvWI/EPPKTpn77BpMisPZctbKqt0M=
Subject key identifier:   40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0C84
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:20:12 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 200.16.8.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Jan  1 00:20:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:3b:34:f8:71:1a:34:c6:bc:f3:64:93:72:
                    dc:8a:42:e2:64:48:9b:16:20:12:30:b5:af:9f:82:
                    1c:d6:f9:b4:95:fb:85:3e:40:4a:7e:d4:20:f8:fa:
                    fa:1b:40:48:bb:15:83:fc:8a:f2:7c:fd:19:3a:4b:
                    0c:0b:9f:83:4f:24:5e:c8:c6:f7:e4:ac:64:aa:e2:
                    11:97:b1:4e:0d:fa:2a:57:35:75:36:8b:f7:f3:7c:
                    a6:0c:5d:f0:dc:68:ea:bc:b7:6a:dd:fa:5e:74:f4:
                    b7:3c:6c:31:69:59:37:1e:8b:48:6a:6f:cc:14:ec:
                    8a:96:65:16:f5:f1:a3:c0:b6:9a:dd:ca:29:fb:23:
                    87:d9:90:98:e4:68:e7:e4:87:54:e9:d7:ef:6c:c6:
                    cf:42:69:26:a1:3a:bd:7a:ea:d5:ef:ba:28:ad:3d:
                    d2:93:a7:60:40:61:aa:fd:c8:b6:54:ec:70:de:5f:
                    58:c7:ee:5c:04:de:8b:83:72:e1:34:72:0c:28:46:
                    bb:90:fa:1d:c6:c5:df:62:82:a2:6d:ad:c4:9c:1a:
                    b7:c1:03:53:0b:c3:df:65:67:46:71:87:28:e4:fc:
                    ee:08:64:a4:14:31:11:8e:07:d1:a3:bb:60:c0:26:
                    be:0e:53:a8:a7:65:2b:b7:29:99:b2:78:3b:55:b6:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:12:b5:c4:44:d3:02:80:14:5b:2a:c4:89:2d:70:70:5e:2d:
         70:c8:ba:c0:95:bc:1c:93:ea:f2:70:61:c6:13:23:42:58:d7:
         52:30:20:79:eb:df:dd:28:a4:b3:9b:9c:b3:51:89:10:af:bc:
         c0:1a:09:47:8f:0f:a3:e6:72:db:69:15:08:73:11:c9:30:36:
         06:74:e3:07:b5:5f:58:f5:8c:e7:00:aa:2e:ec:e8:b4:e5:2c:
         ea:8e:97:12:62:2a:fc:b4:69:2b:73:58:70:37:bd:ca:91:59:
         a2:b9:20:a1:13:30:15:2a:b1:42:96:5c:be:a8:94:3c:19:e9:
         1b:54:0e:79:d8:ec:43:dd:d7:b5:fb:7e:1d:61:2a:de:9a:95:
         d3:66:77:ce:53:cd:84:8d:69:80:e9:cd:91:38:a9:20:8c:93:
         34:a1:ba:e1:da:38:97:98:49:dc:18:87:36:8d:bb:7a:b3:f0:
         3f:e8:f7:d2:02:fc:f0:d2:8d:16:35:f3:07:80:33:37:56:70:
         7b:46:ac:4c:1e:20:b6:2b:22:d6:57:25:16:cd:32:69:af:b8:
         94:3e:d5:3e:01:b8:7e:31:a4:d4:be:ae:fa:59:98:96:92:93:
         a3:b1:be:4d:17:c7:ff:10:f6:89:20:2a:7f:74:27:ca:a3:68:
         1a:54:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:40 2024 by rpki-client on console-fra.rpki-client.org