Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
File:                     0L5n0EWzPwWlhxUQOZ5wnJj2130.cer (raw, json)
Hash identifier:          qZ1iA50MryXqpbgtHa4N7PiNQSoVBxr0jCc9UUeBykY=
Subject key identifier:   D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       275D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:45:40 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328337
                          IP: 102.134.64.0/21
                          IP: 2c0f:ef40::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10077 (0x275d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:45:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:d9:47:4b:2d:a2:2d:79:30:b1:f3:b4:bb:
                    61:4d:c8:76:4a:ab:28:01:57:7b:95:09:13:1a:7d:
                    c4:3b:1f:da:28:32:48:b0:fb:a4:6d:dc:51:30:4e:
                    8a:06:1a:d1:b2:e1:75:d5:26:b3:ce:ed:f7:ad:91:
                    26:78:b4:06:4f:e4:56:62:ae:b8:97:63:0b:8f:c4:
                    17:91:78:dc:b6:c8:5c:7b:fb:ea:bb:32:34:16:66:
                    e4:2e:3e:0d:6d:d8:35:42:f7:71:73:89:9f:39:0e:
                    2b:89:06:ed:54:3c:51:56:50:8d:9b:91:4d:e2:23:
                    0f:58:28:47:6d:e3:a2:9b:c1:34:d4:8d:a3:0f:c7:
                    6b:8b:27:36:9f:64:2e:03:f4:2f:b2:21:6e:f2:db:
                    dd:d9:83:72:ba:4c:f5:c5:79:4e:f3:34:f0:62:34:
                    6e:a0:d6:2a:29:09:88:f0:c8:09:37:69:89:cc:52:
                    8a:82:b2:bc:64:19:b8:97:d1:ff:78:55:6e:12:1a:
                    36:0f:42:95:a3:3c:56:ca:17:09:ea:8f:86:74:00:
                    34:01:b5:87:62:a4:f8:47:91:1a:26:74:0d:81:a4:
                    81:5f:8f:15:e9:aa:35:9a:d5:ea:5f:80:cb:3f:79:
                    ed:99:03:33:33:d4:2b:90:dd:44:a0:ab:eb:0b:16:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328337

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.64.0/21
                IPv6:
                  2c0f:ef40::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:ce:30:7b:c0:90:ce:18:b1:e0:d9:13:83:b8:11:d6:0c:
         e8:3d:6f:5d:8f:b1:f0:ba:f7:84:04:21:3e:b3:21:4b:82:5b:
         cf:76:55:62:bf:5b:60:47:63:26:24:3a:1c:90:41:be:d5:77:
         ef:8e:88:c5:42:d6:fb:a8:94:b1:23:35:16:e4:c5:38:ff:88:
         a3:c1:20:27:af:e1:bc:d2:5f:8e:72:e3:fc:03:4e:8c:b3:b1:
         4c:45:c8:6d:38:26:c0:52:26:94:86:43:ea:dd:14:cc:db:4e:
         e5:d8:f4:c5:09:50:f1:31:b0:c7:f2:4a:4e:fe:57:bf:25:65:
         36:e4:b1:b1:f0:88:d7:ac:3b:67:5c:7c:bd:f6:8c:e8:2d:51:
         49:58:01:68:0b:19:1a:bb:6b:03:be:50:98:6b:69:8e:52:11:
         62:ac:fd:52:19:a9:40:85:94:f8:74:d1:fe:f2:24:d4:2b:49:
         2f:8e:d6:04:17:12:a7:ed:e8:75:13:e7:72:26:53:7f:d7:65:
         00:13:77:d6:01:ac:c6:9d:8f:ad:c8:f0:2a:4f:14:d5:de:ba:
         67:05:05:04:e4:f6:dc:d9:21:e3:1e:26:1d:e1:63:f3:6d:75:
         b7:79:3d:46:87:6b:78:b2:32:7d:34:48:fc:eb:9e:ee:ba:a1:
         58:97:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----