Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
File:                     -wB7KUv_2n8YvxAiZXr2TarOGL8.cer (raw, json)
Hash identifier:          vcBqIzMhvujBxa/sawOUuAtJ+QM09nLlWasbwYy/aZM=
Subject key identifier:   FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       35E6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 14 Aug 2025 06:40:26 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329564
                          IP: 102.205.146.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13798 (0x35e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug 14 06:40:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ed:8f:31:be:54:c1:e2:08:1d:30:d7:fb:4b:
                    a5:47:b0:77:be:a9:dd:7e:15:88:5c:b5:8b:d6:dc:
                    bf:e8:c7:2c:5e:b1:49:9b:ee:3a:e6:32:f5:34:16:
                    b2:cf:ca:de:6a:b5:84:5d:12:08:12:f0:32:c2:8e:
                    b4:1f:ae:da:dc:08:bb:97:3e:39:75:d7:97:21:1a:
                    b8:a9:53:8c:16:5d:49:83:86:18:09:ae:d0:23:29:
                    d9:c5:4b:27:d4:95:19:36:f4:dc:16:e3:ca:02:ca:
                    fb:7f:ca:5e:b0:fe:58:e2:b7:af:eb:4b:24:f8:45:
                    c8:51:b6:c9:2a:9e:9c:6b:da:2a:2b:cf:f3:64:93:
                    c7:c0:0f:f1:1c:15:18:84:c8:67:15:66:24:8d:bc:
                    f1:96:b4:4a:92:b6:c2:28:8d:14:ec:d7:89:96:d2:
                    95:7e:0b:02:06:b7:54:d5:b4:36:00:2c:ca:f7:0b:
                    a0:85:d5:43:93:f1:6e:be:2c:61:9c:8a:74:1d:32:
                    95:f8:ab:6c:27:42:04:41:fe:2c:4f:51:59:fe:73:
                    15:69:36:36:de:71:23:5f:4d:36:de:a6:82:34:c7:
                    c4:ba:d7:78:5f:5e:88:5b:de:a3:e3:6a:96:b4:f4:
                    98:5f:9f:89:4b:16:93:2b:5e:72:35:47:9d:b5:31:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329564

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:3f:63:62:51:e9:fd:61:1e:68:e2:c9:ba:f9:8f:ec:9c:
         60:31:f2:62:e6:43:ac:4a:bf:cd:e3:52:fb:fe:d7:92:98:de:
         67:7e:b2:7c:ea:ce:20:c2:2f:5e:af:44:60:ad:76:ca:eb:9c:
         18:36:2c:1c:ad:4d:35:55:a2:e3:77:d1:6f:03:36:c0:1c:2c:
         fa:91:a1:35:6c:0b:6b:59:5f:e7:26:14:7a:57:d5:f9:63:56:
         96:9c:9b:88:ea:bf:f9:4f:ce:89:59:64:38:b7:cd:e2:93:d5:
         7a:5d:c6:db:83:79:2e:25:10:24:6f:de:14:a1:9e:1c:39:66:
         1d:b9:b4:4c:b2:ba:38:50:96:40:3e:27:4f:10:9b:fe:5b:8e:
         0b:45:c5:d4:16:b9:9b:f3:de:7f:ee:8e:81:8d:86:95:f1:a9:
         9d:78:97:49:d8:5c:bd:3c:65:e1:bc:44:f1:ad:dc:09:a7:27:
         ac:57:c5:61:83:08:a2:08:88:e0:cb:22:da:23:7a:a3:7a:69:
         db:53:31:3b:c2:4f:28:15:6f:78:37:10:30:17:0e:5c:10:b8:
         f2:0c:1e:71:d3:aa:9d:14:c5:3f:85:2c:28:d5:7a:19:0f:61:
         d2:7c:71:9a:e5:98:b5:43:b8:0c:3c:d0:5c:5a:8a:54:a7:56:
         1e:67:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:02 2025 by rpki-client