Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
File:                     J6gbBcpK9RHHhjK7VblPrvRxyOU.cer (raw, json)
Hash identifier:          PW7b+u60KHiywG2w4k12IgoGJ9Id9/dYflV9eLzpXqU=
Subject key identifier:   27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3490
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 12:56:18 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328713
                          IP: 102.221.252.0/22
                          IP: 2c0f:e930::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13456 (0x3490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr  2 12:56:18 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F369A67FAF, serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:a3:94:22:e3:4d:eb:b8:34:9e:57:54:23:
                    4f:49:e3:aa:38:7d:a7:4a:6e:ed:3a:da:e1:03:f9:
                    b9:c6:f9:02:e8:6d:da:2e:15:d6:2f:d1:2f:c6:a0:
                    3d:c5:07:d4:40:c9:43:3c:07:e2:1d:35:6d:38:e7:
                    bd:d4:fe:ec:9e:b8:41:ff:b7:85:21:70:ff:0f:90:
                    68:a8:08:ca:30:b7:96:63:f2:87:45:c4:05:fd:ce:
                    8d:2b:e9:37:77:f1:c8:36:cf:68:e7:c4:b9:bd:bf:
                    9a:ec:12:02:a1:5e:1d:eb:be:9e:a1:9c:09:1e:c4:
                    57:c1:33:92:b0:04:ca:a7:19:84:a3:b2:39:73:1e:
                    5a:e3:03:23:32:bf:69:95:73:fd:e5:a2:e6:59:3a:
                    4a:42:a0:fe:a8:3f:c7:2e:f5:7a:51:2a:f8:73:6c:
                    ba:73:43:3d:b3:ed:73:b6:c7:1d:cc:57:30:09:ab:
                    e9:13:d3:ff:50:49:97:0c:43:d5:90:a1:f3:6d:0c:
                    1d:80:c6:9d:75:7c:97:4c:e5:90:e1:74:9d:56:20:
                    e5:22:14:7f:ca:fa:74:7d:4d:3c:4b:4f:bd:a9:20:
                    28:c6:e8:39:bf:66:ee:19:4d:41:b7:0d:06:0b:1e:
                    d0:57:a4:cd:14:df:f1:6a:9a:98:a9:2a:46:6a:4c:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328713

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.252.0/22
                IPv6:
                  2c0f:e930::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:e6:c8:a2:de:1a:7b:78:bb:0b:8d:85:9e:07:06:58:06:
         7b:b4:03:1a:0b:20:cd:26:a6:4b:71:34:4a:99:c6:89:11:be:
         ef:bc:50:e3:91:2f:ee:df:45:02:66:2c:58:4b:8b:3c:51:97:
         7c:62:1b:66:6b:f9:2e:3b:ce:18:61:7c:79:98:15:09:29:c7:
         b1:1d:84:60:fb:bb:e8:99:1e:f7:4a:3c:ec:98:0f:4f:88:f0:
         97:d4:34:80:07:05:af:1e:fc:23:b4:52:44:34:50:e8:6c:12:
         cc:83:52:53:1c:ce:e7:d2:1b:92:61:b0:af:f1:b4:0e:55:73:
         9d:93:2a:bb:5d:0d:e0:92:87:4a:e1:84:6b:cd:e4:22:c1:f3:
         16:00:1e:41:76:9d:91:0f:c0:a4:69:41:bc:32:b7:39:16:e4:
         fc:38:c2:88:b3:de:bc:26:da:b8:6c:38:52:79:95:10:b2:a6:
         7f:53:2c:5b:48:a2:07:9d:93:1b:e0:d6:f1:e7:13:b6:0d:55:
         54:34:75:35:8a:97:b4:21:9f:33:83:46:32:68:d4:b2:70:6f:
         3a:f5:69:0c:ca:38:9e:6f:bf:05:63:53:9c:af:11:00:65:9d:
         82:9b:63:25:90:45:d2:c1:f6:21:db:4c:75:4e:65:c6:a7:07:
         d9:8a:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:05:27 2025 by rpki-client