Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
File:                     2LbhjGXdH5bypUTKz8mAhq75KW8.cer (raw, json)
Hash identifier:          PlzsqsFaTLNwFctdE93tD3Vjr1Z1mWAoEmKVF5xTmHM=
Subject key identifier:   D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2664
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:07:39 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327790
                          IP: 154.73.248.0/22
                          IP: 2c0f:f760::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9828 (0x2664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:07:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:90:f6:77:cb:a4:5c:c3:fc:3f:1c:c4:8f:
                    bc:50:ff:44:9d:45:54:88:fa:2b:ae:d3:7b:30:56:
                    64:da:13:c5:68:42:ad:a3:b6:d4:d3:cb:20:f1:5a:
                    a6:57:76:00:ae:f2:b9:f6:2d:00:d5:0d:31:89:84:
                    d8:e1:a9:2f:ea:dd:93:5d:6b:c4:34:c2:f2:fc:60:
                    4f:60:dd:84:99:bb:50:98:7a:3f:1f:b0:c8:2f:5f:
                    9d:fb:20:6a:67:83:c2:c5:b5:aa:da:56:da:8f:9d:
                    d3:ef:01:19:52:4c:dd:b6:49:ec:2b:8c:c8:1a:3f:
                    e2:07:c8:8b:d8:67:2a:9c:0d:d8:38:b3:eb:a6:3c:
                    e3:47:0a:fd:77:f1:9b:06:4d:e6:f5:7a:74:98:b1:
                    a7:6c:79:67:ed:90:b2:41:af:78:40:58:f1:41:bc:
                    c8:70:b6:2d:ad:19:32:23:61:12:b2:74:3e:f1:58:
                    1f:46:ff:98:ae:ca:67:18:6a:4f:02:af:7b:e3:5e:
                    a3:e6:94:e9:91:7f:19:48:4e:87:2b:47:18:5c:40:
                    92:d6:f1:ee:90:ea:48:05:d4:65:4b:d6:ae:54:8a:
                    06:81:ab:cf:2c:2f:12:bb:fe:5e:43:48:42:39:9b:
                    33:4b:7f:43:fe:7c:3b:92:a2:1b:a1:ac:60:2a:f5:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327790

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.248.0/22
                IPv6:
                  2c0f:f760::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:f8:01:96:8f:b2:55:5c:1e:32:a7:b5:41:31:75:5e:35:
         5f:95:04:c5:72:e3:ad:a9:5d:ba:53:08:e5:f3:dd:d6:bc:b0:
         08:24:7c:84:eb:1c:26:d8:82:3a:61:b2:b9:7d:3f:12:da:72:
         9b:02:22:87:f2:cb:4c:11:35:f3:32:4f:c4:4d:74:72:4f:9a:
         5a:e2:6c:41:46:ef:8e:46:23:b3:02:f3:a3:2f:1d:63:49:51:
         bc:d1:4d:29:53:01:4e:b6:47:73:c8:8c:d4:f4:3b:7e:d5:fb:
         52:7d:a2:ee:9a:ed:ed:79:b2:e1:93:83:6c:a1:4c:1f:af:cd:
         77:ac:df:5e:94:87:d5:fb:2d:2a:0f:0f:80:2c:f3:72:23:ad:
         13:a9:44:7c:be:31:3d:37:19:79:9e:31:ae:07:00:60:5f:55:
         13:aa:5e:fa:49:d9:ed:b5:44:9b:9f:c9:93:f2:d4:65:b8:26:
         f6:18:28:29:93:26:7f:95:61:9b:b6:89:16:0e:a2:92:d2:33:
         ae:14:5e:52:cb:1f:01:0b:c0:2d:66:51:2d:63:9e:16:71:67:
         33:4b:cc:5c:ee:f0:b8:d9:7c:b9:ea:50:c0:f8:8a:48:f3:a5:
         c2:d8:9b:69:eb:88:f4:3f:97:e8:d6:f5:70:69:ac:e5:c0:79:
         be:17:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----