Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0uJ0KvvUUUxpz03u29i6jlzXA4g.cer
File:                     0uJ0KvvUUUxpz03u29i6jlzXA4g.cer (raw, json)
Hash identifier:          wi8ARwLQ6JYhaaZeNLgq0N/aZcABcCAll8yrZYIXa7Y=
Subject key identifier:   D2:E2:74:2A:FB:D4:51:4C:69:CF:4D:EE:DB:D8:BA:8E:5C:D7:03:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2856
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ECD0F/454938AA130511ED8BBA279CF1222468/0uJ0KvvUUUxpz03u29i6jlzXA4g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ECD0F/454938AA130511ED8BBA279CF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 04:24:09 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329088
                          IP: 102.215.68.0/22
                          IP: 2c0f:6480::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10326 (0x2856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:24:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36ECD0FAF/serialNumber=D2E2742AFBD4514C69CF4DEEDBD8BA8E5CD70388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:0d:75:c4:ff:e8:06:19:98:f2:ea:ee:ad:
                    fb:1c:a4:62:2c:73:4a:86:3d:b0:ed:77:7d:9e:8a:
                    ef:2b:95:f1:91:95:c3:26:73:6a:d9:d6:e5:ae:c0:
                    fd:27:b9:45:ce:34:d0:86:34:5a:f4:97:fe:0d:93:
                    1e:23:64:4a:e3:9e:29:27:a4:0d:6a:45:b3:9b:af:
                    0c:c3:1c:c3:27:d3:c7:7f:ad:31:93:10:16:c1:4b:
                    18:eb:05:b1:c7:d9:8b:57:22:45:7a:5e:d1:24:67:
                    48:23:d0:a1:01:78:e7:df:82:2b:78:42:19:2d:eb:
                    86:9a:aa:eb:34:56:3f:9d:11:94:e7:99:50:cf:35:
                    10:1a:dc:4f:25:ef:2a:97:c7:fe:22:9d:ac:7d:59:
                    17:20:ab:c0:90:e0:ba:cd:37:cb:90:ac:d0:d9:82:
                    3a:18:c7:08:c3:da:f3:1b:93:e3:11:2a:0c:ed:e5:
                    b7:ad:b0:33:6e:ed:2c:0e:5d:bd:89:34:8e:fd:6b:
                    75:11:b1:66:03:44:1c:d1:d0:f9:e5:4b:8a:2e:ef:
                    84:55:f5:83:c7:b2:c4:d8:c3:fd:e2:28:7e:3e:4d:
                    31:96:90:26:87:c6:35:84:0c:a9:35:fc:1c:c8:86:
                    0d:d1:a9:bc:fc:3c:44:83:cb:9c:75:f9:69:df:13:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:74:2A:FB:D4:51:4C:69:CF:4D:EE:DB:D8:BA:8E:5C:D7:03:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECD0F/454938AA130511ED8BBA279CF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECD0F/454938AA130511ED8BBA279CF1222468/0uJ0KvvUUUxpz03u29i6jlzXA4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329088

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.68.0/22
                IPv6:
                  2c0f:6480::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:91:11:79:34:9f:4c:8a:e3:8d:dc:6e:82:c0:29:e9:0c:b9:
         8d:27:e7:e8:23:89:07:bf:d9:00:c2:6a:b5:39:00:f6:ab:9f:
         e6:6a:3b:95:83:c7:24:d0:3a:19:a3:c0:63:87:0e:75:90:9c:
         30:1e:ca:85:81:4f:80:90:49:1a:7b:34:cf:46:85:be:17:86:
         3b:a9:f7:6d:67:05:22:ae:c8:fd:95:20:40:8a:64:46:10:e3:
         e5:97:14:7e:74:cc:7c:25:74:6c:a9:8d:62:bc:ec:e1:0b:49:
         05:8c:57:a7:2f:f6:bb:0e:29:ab:ad:cd:dd:21:f9:85:2f:1e:
         5d:ed:54:05:68:d1:a4:7c:78:dc:9f:64:94:be:02:e4:b6:00:
         5b:0c:16:e9:3c:f5:df:3a:17:a2:24:a1:af:13:c4:66:df:98:
         7e:e6:ae:62:c7:c9:ea:17:69:e4:ee:a3:9e:1a:2f:bb:bf:67:
         2d:e7:6d:06:bb:0d:b2:6a:30:23:f5:1c:bd:99:1e:4e:38:eb:
         cc:2e:4d:0f:e0:31:e9:2b:af:34:c4:c7:11:52:9e:55:a5:12:
         a3:59:08:de:b9:86:b0:1a:b3:1a:35:8f:93:60:df:7b:c4:0f:
         eb:2b:3a:de:c5:bf:59:d7:8f:cf:e9:4d:ec:2e:a0:cb:bf:3f:
         2c:be:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----