Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer (raw, json)
Hash identifier:          ACsPB2Mn+iKTZTY6rO1c99ITe4cAf4gYXOrHfKnNMFA=
Subject key identifier:   4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       29F5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 26 Apr 2024 11:49:13 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 37714
                          IP: 154.117.64.0/18
                          IP: 2c0f:f418::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10741 (0x29f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 26 11:49:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:86:e2:77:68:b4:21:05:2e:66:e7:72:94:a2:
                    4b:ad:44:38:61:b5:29:4b:47:2b:ba:76:2f:b5:bc:
                    66:53:72:91:da:3f:d9:26:ef:73:17:55:3d:e7:da:
                    a6:d3:fb:95:04:7b:6d:4d:33:e0:9e:61:fc:51:28:
                    0f:2e:38:84:d0:6f:6b:0b:b8:59:e9:62:c1:61:9d:
                    3d:99:5d:1c:86:bd:18:0e:00:01:07:2b:1d:2e:dc:
                    83:2b:b2:aa:4a:3d:af:4b:f4:7b:83:53:ba:e7:40:
                    14:50:d0:d9:8a:be:5b:b6:91:c9:48:45:ac:08:b0:
                    a7:16:a0:8c:dd:fb:dc:46:c0:dc:4c:86:55:d0:9d:
                    8f:4e:c2:bd:97:05:d0:c1:53:f6:37:c9:ad:ff:12:
                    5c:bc:78:de:b4:9c:61:0b:d7:f4:c9:f7:99:c7:4a:
                    ce:10:1e:62:47:36:05:65:91:ca:c4:f7:80:6f:eb:
                    2c:fd:4d:8e:28:01:ba:53:56:f4:96:6f:d4:c4:47:
                    c7:cd:cc:42:4c:e2:ad:4f:1c:ce:e0:a6:78:05:72:
                    55:91:2c:57:5f:85:3c:be:db:52:76:57:0a:78:be:
                    2b:a4:ff:d6:05:d4:a1:ce:0c:37:46:78:af:ca:77:
                    51:11:db:75:37:df:da:28:46:14:fe:b5:74:30:32:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37714

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.117.64.0/18
                IPv6:
                  2c0f:f418::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:49:4e:42:f4:48:37:d0:b0:a3:99:c5:fc:d6:f4:c3:d3:
         83:eb:9d:1b:c2:9f:73:b6:77:cb:08:b6:3e:c4:05:ef:50:7e:
         34:ad:38:be:96:cf:99:5a:be:96:9f:dc:77:2f:18:8e:fd:22:
         ed:61:b8:86:42:90:76:ce:f0:d3:d5:3e:6f:52:c5:75:9c:bf:
         f3:53:b0:29:a7:86:93:d4:9b:1a:4a:f7:c5:0d:f9:3e:ed:d8:
         0d:fb:0f:8a:6b:79:da:8b:1a:44:12:a4:de:5a:1f:7e:92:57:
         eb:d5:79:ab:6a:0b:3f:eb:59:a7:bc:08:f8:60:d1:59:ee:90:
         53:38:b7:66:93:53:63:59:55:ea:bc:47:b9:54:41:3e:5a:4d:
         3c:ea:1d:ce:0f:9d:04:33:79:62:32:9d:da:e1:39:c9:19:a2:
         ff:89:31:f9:c4:78:2c:93:be:1c:50:ef:db:ac:3f:0c:c9:46:
         ba:fb:9f:2e:bd:eb:f8:64:ff:e8:02:d7:2a:27:18:57:b3:54:
         a1:58:99:4a:bd:06:12:cc:e5:7f:7e:57:b5:09:57:71:a6:50:
         19:39:c5:92:95:9e:aa:d6:b7:a7:c7:20:5b:13:86:81:86:27:
         5c:0b:74:ad:18:85:d9:b2:7a:a2:88:ae:d1:1a:bb:af:74:2a:
         b8:5c:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----