Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.cer (raw, json)
Hash identifier:          RZZuW5/uslEcOXpygHxnn7WPPCXjAhD1FmveFCDEiSU=
Subject key identifier:   16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2584
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:35:59 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37608
                          IP: 41.242.96.0/20
                          IP: 2c0f:f9f0::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 May 2024 00:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9604 (0x2584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:35:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:d6:8e:15:d3:04:46:00:79:37:ca:60:45:
                    c9:27:61:e6:99:d7:e0:ce:4f:7a:b4:0a:01:34:25:
                    79:f9:b1:0a:fa:52:b6:f7:66:3d:01:95:e2:d8:10:
                    ab:3e:f9:de:e9:b4:2d:81:68:43:bf:7d:43:f8:dd:
                    30:52:dc:e0:64:59:b6:cc:69:40:8e:6e:3b:c8:b6:
                    cb:9f:77:67:be:9b:f9:97:cb:f8:92:6a:d1:35:6d:
                    c1:01:93:11:8d:21:2b:b5:65:c3:21:6b:41:77:8d:
                    26:fa:19:82:e3:cb:62:06:bc:8a:c0:8c:42:65:93:
                    a7:b5:8b:77:bd:53:ba:5a:63:27:f5:25:89:76:c2:
                    a3:57:9a:89:20:b0:ec:d3:f7:a9:1a:08:ac:9f:77:
                    46:81:66:2d:04:11:e6:5c:51:57:02:3c:55:77:78:
                    64:7d:e5:f4:40:d9:fc:e9:6d:fb:8b:fd:16:72:8d:
                    16:94:8a:10:fe:c1:7e:e5:88:a5:19:78:e4:0b:3f:
                    6f:85:38:e1:9a:8c:a5:42:0c:47:22:a1:22:53:7d:
                    07:ec:1d:08:ae:e1:4d:72:61:0b:42:49:56:78:22:
                    1d:23:fb:b0:f3:7c:c5:97:ee:f1:c6:08:57:d0:d4:
                    f9:8c:8e:07:ff:e8:b5:e4:e5:0a:38:fe:b4:c8:fe:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37608

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.96.0/20
                IPv6:
                  2c0f:f9f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:db:2a:96:0a:7a:a5:86:90:0e:3d:6c:12:89:fa:a9:4d:18:
         b3:27:0f:86:76:0c:b6:50:45:f3:69:f8:88:e8:9e:81:3b:64:
         fb:8e:4e:ad:32:f0:bd:5b:53:9f:17:a0:a6:54:7c:e6:43:80:
         f7:48:30:a9:36:c3:9a:99:d4:90:69:67:e7:62:ba:b5:49:5b:
         3f:df:66:cf:e3:17:f4:a3:8f:9c:b0:06:bb:ba:64:e4:14:42:
         9f:f3:cb:50:bb:8a:2b:ed:92:dc:5f:27:9d:b7:33:40:89:cd:
         7f:62:30:a0:d7:29:f9:94:ef:3c:ff:38:9f:63:54:98:af:24:
         e9:bc:50:5c:20:77:c5:ff:ae:80:a7:a4:b1:f3:e4:81:87:ba:
         5a:74:98:3d:47:a8:bd:a4:e6:51:ad:ed:ae:6d:44:de:53:af:
         08:5a:c2:de:0c:57:c0:7d:33:61:71:46:47:5f:9b:e7:b3:15:
         ca:33:40:58:7e:47:f9:7c:3f:e1:77:2b:d7:d7:28:71:11:20:
         b4:91:e9:18:5e:56:70:5a:60:d2:af:47:39:d2:20:77:60:89:
         c8:73:80:f6:f5:fa:88:7d:30:35:58:e8:9b:9d:ff:8c:73:c9:
         2f:71:4e:b0:63:e7:f4:c9:62:6b:78:d7:a5:3b:ba:41:3b:92:
         14:22:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----