Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.cer (raw, json)
Hash identifier:          0SO6kYmCW5rNVuRyJkTZ5i5PJd6y8P0qEo0hJTKrFfI=
Subject key identifier:   F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2681
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:12:04 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329370
                          IP: 102.210.169.0/24
                          IP: 2c0f:6540::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9857 (0x2681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:12:04 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:97:0f:4e:43:1b:e7:32:f1:88:01:4d:87:
                    9c:a7:81:fd:c1:d0:0a:43:33:f0:01:72:bd:a2:ff:
                    3d:22:30:ce:0f:d1:d6:e6:ba:e3:d9:ae:68:42:34:
                    be:18:62:e8:d2:85:83:5e:aa:b0:ba:1c:bd:c7:51:
                    7c:1b:61:8b:24:3b:53:33:33:d9:c2:a6:d2:d7:04:
                    d5:09:a4:d3:8b:c5:51:88:6d:50:d2:b9:91:f5:b8:
                    ef:e2:52:60:5d:0a:54:0c:a0:e5:90:b2:6a:ff:38:
                    c4:ed:1f:cc:52:53:b6:21:20:d6:1c:3e:b9:96:43:
                    29:32:f9:a3:fc:dd:ce:f8:be:11:df:5d:46:06:4f:
                    c0:4c:91:cd:2a:28:80:56:31:55:5d:77:db:54:76:
                    1a:df:9a:a2:7e:f1:7f:b1:8c:de:8c:b9:bc:6b:ab:
                    fa:1b:e6:32:53:53:f5:60:f3:ba:f5:1c:71:0c:cb:
                    51:66:c6:15:61:7e:07:e3:e3:05:7f:38:00:69:64:
                    7a:1a:22:e0:d7:fb:3e:d1:f0:6d:51:58:35:30:55:
                    90:72:d5:5f:ed:34:d3:e8:cf:6f:00:1b:16:54:93:
                    4e:63:c9:d5:79:75:b2:3c:06:d6:de:1f:6e:41:5d:
                    a2:cd:67:61:c0:42:95:b8:bc:8f:6d:77:77:6c:83:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329370

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.169.0/24
                IPv6:
                  2c0f:6540::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:9b:f6:f9:4d:3d:62:ea:76:8c:da:05:95:87:8a:c0:14:
         a5:0c:e5:20:67:b3:98:9a:d7:7c:f4:d2:41:3f:63:e4:ea:e6:
         d7:8c:09:d8:c9:a2:d9:f6:2e:2f:b9:cb:aa:56:61:41:ba:b9:
         95:f8:11:26:a0:89:37:01:5a:23:12:5e:b8:60:b3:6f:2d:d2:
         d2:80:43:51:64:61:2c:e9:80:d8:2d:bc:bb:dc:44:e2:e5:0e:
         c5:60:6a:39:3c:2f:40:48:cc:ec:43:41:a5:f4:17:90:c5:a0:
         df:3b:0f:e3:7a:26:50:e8:e9:f8:13:d6:e0:99:cc:f2:3f:b6:
         f5:0b:65:d3:f9:c0:df:4f:a2:70:95:2d:91:ec:c6:65:7c:12:
         7b:45:60:f6:40:77:a7:c4:fd:1d:83:3c:4b:42:ec:fe:e4:5d:
         c5:ed:b1:f2:57:bd:5b:d7:95:33:df:85:20:93:93:c2:6b:29:
         7b:e0:df:16:f2:90:46:4c:e6:85:8f:d8:cc:64:80:e9:e3:1a:
         24:b0:94:4a:ff:f1:d2:07:9e:fe:5c:85:de:97:08:b3:2b:22:
         56:dc:c2:13:22:2a:3e:e9:78:85:35:53:84:59:77:9c:74:05:
         bc:d4:29:7e:20:ba:8c:92:eb:66:6b:5b:38:eb:fe:02:fa:67:
         3f:a2:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----